POPIA & privacy

MediConsult SA processes your personal and health information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and the ethical guidelines of the Health Professions Council of South Africa (HPCSA).

Information we collect

Identity (name, SA ID / passport, date of birth), contact details, a consent selfie, medical history, current medications, medical-aid membership, symptoms and consultation records, and payment information.

Why we collect it

To deliver clinically safe remote consultations, comply with HPCSA record-keeping obligations, issue prescriptions and sick notes, bill medical aids or process card payments, and improve the platform.

How we protect it

All records are encrypted at rest and in transit. Access is limited by role-based Row Level Security. Only the treating practitioner sees your clinical record. Documents are stored in private buckets and retrieved via short-lived signed URLs.

Your rights

You may request access, correction, or deletion of your information at any time. Some clinical records must be retained for a minimum period as required by HPCSA and the National Health Act.

Contact

Information Officer: privacy@mediconsult.co.za