Privacy Policy for the MedSquirrel Website

1    Introduction

1.1    Any capitalised terms have the meanings ascribed to them in the Website Terms and  Conditions.

1.2    This is the Privacy Policy applicable to your personal information, collected by MedSquirrel (Pty) Ltd (MedSquirrel) through its website, www.medsquirrel.co.za (Website). 

1.3    MedSquirrel respects privacy rights and complies with all laws in respect of the handling of all personal information, including collection, use, storage, sharing and disposal.

1.4    This Privacy Policy aims to help you understand how MedSquirrel handles personal information when you use the Website. 

1.5    This Privacy Policy does not apply to any third party websites which may be accessible through links on the Website.  MedSquirrel makes no representations or warranties about the privacy practices of any third party and does not accept any responsibility for the privacy practices of, or content displayed on, third party websites.  Third party website providers are responsible for informing you about their own privacy practices.


2    What personal information does MedSquirrel handle?

2.1    When used in this Privacy Policy, the term “personal information” has the meaning given to it in the Protection of Personal Information Act, 2013 (POPI).  Generally speaking, personal information is any information that can be used to personally identify a natural or juristic person. 

2.2    Personal information that MedSquirrel collects, when you register for the Website, may include your name, address, registration / VAT / identity numbers, contact details and, in the case of medical professionals, your practice number.

2.3    If the information that MedSquirrel collects personally identifies you MedSquirrel will treat it as personal information.

3    How does MedSquirrel collect personal information?

3.1    MedSquirrel collects personal information directly from you in the following ways, namely:

(1)    through your registration for, access to and use of the Website;

(2)    when you, as a user, upload and store information onto your profile;

(3)    when you, as a medical practitioner, link your website to the Website; and

(4)    when you communicate with MedSquirrel .

4    What if you do not provide personal information requested by MedSquirrel or allow MedSquirrel to collect personal information?

If you do not provide MedSquirrel with personal information where MedSquirrel requires it, you will not be able to register on, or use certain of the features of, the Website.


5    For what purposes does MedSquirrel handle personal information?

MedSquirrel collects personal information and handles it for the purposes of:

(1)    registering you on the Website;

(2)    enabling you to use certain Website features

(3)    meeting legal or other regulatory obligations imposed on it;

(4)    updating its records; and

(5)    processing and responding to any queries.

6    Who does MedSquirrel disclose personal information to?

6.1    MedSquirrel may disclose personal information to:

(1)    its employees, affiliates, contractors or third party service providers in connection with the Website and the services that it provides to you, including its information technology service providers;

(2)    its insurers and professional advisors, including its accountants, business advisors and consultants;

(3)    employees and other relevant people connected with any entity with which MedSquirrel merges, combines or to which it divests a part or the whole of its business;

(4)    law enforcement or regulatory bodies as required by law; and

(5)    any other juristic or natural person for any authorised purpose with your express consent.

6.2    MedSquirrel undertakes never to sell personal information.

7    Does Medsquirel disclose personal information to anyone outside South Africa?

7.1    Medsquirel may need to transfer personal information to, or store it with, third party suppliers and service providers, such as hosting or information technology service providers, located outside of South Africa for some of the purposes listed above.

7.2    Where personal information is transferred outside of South Africa, your rights and the rights of your customers and your directors/members will continue to be respected and MedSquirrel will take all reasonable steps to ensure transferred personal information is kept secure and receives a similar level of protection as that which it receives in South Africa. 


8    Security and data quality

8.1    MedSquirrel may hold personal information in either electronic or hard copy form.  In both cases MedSquirrel takes reasonable and appropriate steps to ensure that the personal information is protected from misuse and loss and from unauthorised access, modification or disclosure.

8.2    Personal information is destroyed or de-identified when no longer needed or when MedSquirrel is no longer required by law to retain it (whichever is the later).


9    How can you access and correct your personal information?

9.1    You have the right to contact MedSquirrel at any time requesting:

(1)    confirmation that MedSquirrel has the personal information;

(2)    access to the records containing the personal information or a description of the personal information that we hold; and

(3)    the identity or categories of third parties who have had, or currently have, access to the personal information. 

9.2    When making a request MedSquirrel requires adequate proof of identity which will include providing a certified copy of identity / registration documents.

9.3    MedSquirrel will try to provide any person entitled to access their personal information with suitable means of accessing information, by for example, posting or emailing it to them.

9.4    MedSquirrel may charge a reasonable fee to cover its administrative and other reasonable costs in providing personal information requested. 

9.5    There may be instances where MedSquirrel cannot grant access to personal information.  For example, if granting access would interfere with the privacy of others or would result in a breach of confidentiality, MedSquirrel may need to refuse access.  If MedSquirrel refuses access, it will give written reasons for its refusal.

9.6    If you believe that any personal information that MedSquirrel holds about you is inaccurate, irrelevant, outdated, incomplete or misleading, you may request MedSquirrel to correct it.  If you believe that any personal information that MedSquirrel holds about you is excessive or has been unlawfully obtained or that MedSquirrel is no longer authorised to retain the information, you may request that MedSquirrel destroys or deletes it.  MedSquirrel will consider if the information requires correction, deletion or destruction and if MedSquirrel does not agree that there are grounds for such action, you may require MedSquirrel to note your request.


10    Changes to personal information
Should your personal information change, please inform MedSquirrel and provide MedSquirrel with all changes as soon as reasonably possible to enable MedSquirrel to update the personal information.  It is your responsibility to ensure that all personal information is kept up to date as MedSquirrel has no way of doing so directly.

11    Unlawful access to personal information

11.1    If you believe that your personal information has been unlawfully accessed or acquired, you may contact MedSquirrel using the contact information below and provide details of the incident so that MedSquirrel can investigate it. 

11.2    MedSquirrel will treat such queries confidentially (unless otherwise required by law), investigate them and aim to achieve resolution within a reasonable time.


12    Indemnity

12.1    You must ensure that you are permitted to disclose the information you upload or provide on the Website.

12.2    MedSquirrel and its employees, directors or agents will not be liable for, and you indemnify and hold MedSquirrel and its employees, directors or agents harmless against, any loss or harm, direct, indirect or consequential, arising from, or connected to the use of the personal information or the disclosure to MedSquirrel of such personal information by you.


13    Contact information

If any person has questions about this Privacy Policy or needs to contact MedSquirrel in connection with their personal information, they may contact MedSquirrel’s Information Officer using the details set out below.

Name:   Mr Ryan Burns
Email:   ryan{at}medsquirrel.co.za

14    Changes to Privacy Policy

MedSquirrel reviews its policies regularly and occasionally may need to change or update them.  Any updated versions of this Privacy Policy will be posted on the Website and will be effective from the date of posting.  You must check the Privacy Policy regularly for updates.  This Privacy Policy was last reviewed and updated on 11 October 2017.