Privacy Policy

1. Introduction

Dr. Metuse Plastic & Reconstructive Surgeon is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

This policy complies with the Protection of Personal Information Act (POPIA) of South Africa, as well as other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact information (name, email address, phone number, postal address)
• Identification information (ID number, passport number)
• Medical information (medical history, current medications, allergies)
• Demographic information (age, gender, date of birth)
• Payment information (credit card details, banking information)
• Images and photographs (before and after treatment photos)
• Communication records (emails, consultation notes, appointment history)

2.2 Technical Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on our website
• Actions taken on our website
• Cookies and similar tracking technologies

3. How We Collect Information

We collect information through:

• Direct interactions (when you complete forms, register for an account, book appointments)
• Automated technologies (cookies, server logs, web beacons)
• Third parties (payment processors, medical referrals, insurance providers)
• Public sources (where permitted by law)

4. How We Use Your Information

We use your information for the following purposes:

• Providing medical services and patient care
• Managing appointments and consultations
• Processing payments and billing
• Communicating with you about your treatment
• Sending appointment reminders
• Improving our services and website
• Marketing and promotional activities (with your consent)
• Complying with legal and regulatory requirements
• Maintaining medical records
• Conducting research (with anonymized data)

5. Lawful Processing of Personal Information

We process your personal information in a lawful and responsible manner, including for the following reasons:

• Consent: When you have given explicit consent for specific purposes
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When processing is necessary to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate interests, provided they are not overridden by your rights
• Vital Interests: When processing is necessary to protect someone's life

6. Information Sharing and Disclosure

We may share your information with:

• Healthcare providers involved in your treatment
• Service providers (IT services, payment processors, appointment scheduling)
• Insurance companies (for claims processing)
• Legal and regulatory authorities (when required by law)
• Professional advisors (accountants, lawyers, consultants)

We do not sell your personal information to third parties. Any third-party service providers we use are bound by contractual obligations to keep your information confidential and secure.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption of sensitive data
• Secure networks and servers
• Access controls and authentication procedures
• Regular security assessments
• Staff training on data protection
• Physical security measures for our premises

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Medical records: As required by medical regulations (typically 5-15 years)
• Financial records: As required by tax laws (typically 5-7 years)
• Marketing information: Until you withdraw consent

When personal information is no longer needed, we will securely delete or anonymize it.

9. Your Rights

Under POPIA, you have the following rights:

• Right to Access: You can request a copy of your personal information
• Right to Rectification: You can request correction of inaccurate information
• Right to Erasure: You can request deletion of your information (subject to legal requirements)
• Right to Restriction: You can request restriction of processing
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw previously given consent

To exercise these rights, please contact our Data Protection Officer at admin@drmetuseplasticsurgeon.co.za.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Children's Privacy

Our services are not intended for children under 18 years of age without parental consent. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

12. International Data Transfers

We primarily store and process your information in South Africa. However, some of our service providers may be located in other countries. When we transfer your information outside South Africa, we ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

15. Complaints

If you have a concern or complaint about how your personal information has been handled, please contact our practice first so we can investigate and address your concerns.

If we are unable to resolve your concerns, you may escalate the matter by lodging a complaint with the Health Professions Council of South Africa (HPCSA).

HPCSA website: https://www.hpcsa.co.za/

For complaints and medico-legal matters, please email medicolegal@drmetuseplasticsurgeon.co.za. For general administrative queries, please email admin@drmetuseplasticsurgeon.co.za.