How we handle your information

This notice is given when we collect your information, as section 18 of the Protection of Personal Information Act (POPIA) requires.

Who is responsible

AVB Financial Solutions, is the responsible party for the information collected on this site.
Phone 021 555 0100
Email joshua@cangocode.com

Our information officer, reachable at joshua@cangocode.com. Write to them about anything on this page.

What we collect, and why

Name and surname	To identify you at the appointment, and in our records together with your email address or cell number.
Cell number	To reach you about this appointment, and to text reminders if you ask for them. With your name, it lets us recognise you when you book again.
Email address	With your name, it is how we recognise you in our records: your bookings and booking history are kept against your name and your email address or cell number, and your account if you make one signs in with it. We also use it to confirm the booking with a code, and to send your reference, confirmation and any change to it. If you book for someone else using your own email or cell, they are kept as a separate person under their own name.
Password	Only if you create an account, and stored only as a one-way hash.
What you booked	Which checks you are having, when, what you paid, and whether you attended. Booking a health check says something about your health, which POPIA treats as special personal information, so we process it only with the consent you give when you book.
Your choices	Whether you asked for reminders or emails about your next check, and the exact wording you agreed to, so we can show what you consented to and when.

Do you have to give it?

Your name, cell number and email address are needed to book: without them we cannot confirm the booking or reach you about it, so the booking cannot be made. Everything else - reminders, texts, and emails about your next check - is optional, and saying no changes nothing about your booking.

Who else sees it

The clinic's own staff, and the people who run the services below on our instructions. We do not sell your information and we do not share it with anyone for their own purposes.

Your information may be stored or processed on servers outside South Africa, for example in the European Union, where the law gives it protection comparable to POPIA. Any such transfer is made under section 72 of POPIA.

Our web host stores this site and its database.
Email delivery. Booking codes, confirmations and reminders are sent through our mail server.

Emails about your next check

Only if you tick that box when you book. Each of those emails has a link to stop them, and stopping them never affects a booking you have made.

Your rights

Under sections 23, 24 and 25 of POPIA you may ask what we hold about you, have it corrected, or have it deleted, and under section 11(3) you may object to how we use it. If you have an account, see everything we hold and delete it there. If you booked as a guest, use Find my booking: the page it opens lists your bookings and has the option to delete your information. For anything else, contact us using the details above.

How long we keep it

Booking records are kept for 5 years and then anonymised automatically, or sooner if you ask us to delete your information. Waitlist entries are deleted once the time has passed, and verification codes once used or expired.

Security

The site is only served over HTTPS, only clinic staff with their own sign-in can see client records, and administrator accounts can be protected with a second factor. If we learn that your information has been accessed without authority, we will tell you and the Information Regulator, as section 22 requires.

Complaints

Please raise a concern with us first, and we will try to put it right. You may also complain to the Information Regulator (South Africa): inforegulator.org.za/complaints, enquiries@inforegulator.org.za, 010 023 5200.