Privacy Policy


Privacy Policy

Copyright warning:

This document is the Property of Busamed (Pty) Ltd and is protected by the copyright law of South Africa. No part thereof may be reproduced in any form or under any means without written permission of Busamed (Pty) Ltd.
Any unauthorized reproduction of this document will constitute a copyright infringement and any doer will be liable under both criminal and civil law.

Policy Details

Title Privacy Policy
Document Number POP002
Department POPIA ACT
Effective Date July 2021
Next Review Date June 2022
Compiled By Taryn Laas
Position Group Brand Marketing Manager
Approved By Yaseen Harneker
Position Group Funder Relations Manager
  1. Introduction
    1. Busamed Hospital Group [BUSAMED] is a proudly South African Private Hospital providing specialist services in seven hospitals across the country. BUSAMED is supported by various subsidiaries providing services and facilities within the Group.
    2. We recognize the importance of protecting your privacy and to process your information lawfully in accordance with the rules prescribed in terms of the Protection of Personal Information Act 4 of 2013, as amended [POPI].
    3. Busamed strives to comply with its obligations under POPI.
    4. Our Privacy Policy establishes our standards about the way we shall process and treat your personal information.
    5. "Personal Information" has the meaning ascribed thereto under POPIA and specifically includes any form of information that can be used to identify a Data Subject;
    6. "Data Subject" has the meaning ascribed thereto under POPIA;
    7. "Regulator" means the Information Regulator established in terms of POPIA;
    8. Processing means any operation or activity whether or not by automatic means, concerning records including collecting, receiving, recording, organizing, collating, storing, updating, modifying, retrieving, altering, consulting or using, disseminating, distributing or making available and merging, linking, blocking, degrading, erasing and destroying.
  2. What types of personal information do we process?
    1. Busamed will generally process personal information for purposes required to operate and manage our normal operations as a managed healthcare provider.
    2. Examples of personal information we process includes but is not limited to: - information such as your name, surname, contact details, educational qualifications, race, gender, age, and ID/passport number and medical information (including but not limited to pre-existing conditions, medical test results and medical aid details).
  3. When will we process your personal information?
    1. Personal information may be processed when you make an enquiry, complete the relevant application forms to access our services, apply to be a service provider, apply for employment, or for the appointment as a contractor in person via electronic or hard copy.
    2. Busamed will only process your personal information for a specific and lawful purpose.
  4. How do we use your personal information?
    1. We may use your personal information for any legitimate business purposes relating to providing our services to you. Some of the purposes for which we use your personal information include:
      1. providing you with our services and products.
      2. referring you to other service providers.
      3. responding to your queries posted on our website or emailed to us.
      4. improving our website and services by analysing certain information collected, including cookies and other related information.
      5. onboarding suppliers and service providers as approved suppliers/service providers of BUSAMED.
      6. employment related purposes such as recruitment, payroll.
      7. for other purposes where you consent to the processing of your personal information.
      8. payment processing functions, including payment of suppliers/service providers.
      9. complying with our regulatory or other obligations.
  5. Sharing of your personal information
    1. We may disclose your personal information to our subsidiaries or third-party service providers, where necessary, to fulfill the purpose for which your information was provided to us. We may thus share your personal information with:
      1. any subsidiary of BUSAMED.
      2. your medical aid scheme or insurance company.
      3. any firm, organisation, or person that BUSAMED uses to collect payments and recover debts or to provide a service on its behalf.
      4. any payment system that BUSAMED uses.
      5. regulatory and governmental authorities, ombudsmen, including tax authorities, a court of law where BUSAMED has a duty to or obliged to share information.
      6. third parties to whom payments are made on behalf of employees.
      7. financial institutions or medical aids from whom payments are received on behalf of patients.
      8. employees, contractors, and temporary staff; and
      9. our duly appointed Agents.
    2. We will only share your personal information for purposes of providing services to you or any other legitimate purpose relating to the provision of our services to you, including but not limited to, the protection of our or your rights, complaints, marketing, or carrying out or enforcing any agreement between us.
    3. Where required, we may share your personal information with our service providers. We only share information with service providers after obtaining an undertaking that your information will be processed lawfully. You have the right to object to this at any time.
    4. Where the law requires us to do so, we may also share your personal information with third party service providers, agents, contractors, employees, law enforcement agencies or affiliates. We will only share your personal information in these instances where it is necessary for us to do so and only to the extent that your personal information is needed for such third parties to perform their services or obligations.
  6. Your Rights

    You have the right to:

    1. know who is collecting and processing your personal information.
    2. be notified if your personal information has been accessed or acquired by an unauthorised person.
    3. request, where necessary, the correction, destruction, or deletion of your personal information (subject to statutory restrictions).
    4. object, on reasonable grounds, to the processing of your personal information.
    5. object to the processing of your personal information at any time for purposes of direct marketing.
    6. not to be subject, under certain circumstances, to a decision which is based solely on the basis of the automated processing of your personal information intended to create a profile.
    7. BUSAMED may retain your personal information only for the period necessary for the purpose for which it was intended or in accordance with the provisions of any applicable legislation and guidelines issued by the Department of Health and the Health Professionals Council of South Africa. Copies of these guidelines are publicly available.
  7. Your objection to the use of your personal information
    1. POPI provides that you may object, at any time, to the processing of personal information by BUSAMED, on reasonable grounds. Should you elect to object to the processing of your personal information, please complete the prescribed objection form which may be obtained from the website of the Information Regulator.
    2. Any objection to us processing your personal information shall impact on our ability to provide our services to you which may include the inability to honour our contractual commitments entered into with you.
  8. Right of access to and correction of your personal information
    1. You have the right to access your personal information subject to providing proof of identity and fulfilling the prescribed requirements.
    2. You may request us to correct or delete your personal information on grounds that it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully; or destroy or delete a record of personal information that we no longer are authorised to retain in terms of POPI alternatively any other relevant legislation.
    3. If you wish to request a correction or deletion of personal information or the destruction or deletion of a record of personal information you must submit the prescribed request for correct or deletion form which may be obtained from the website of the Information Regulator.
  9. Safe keeping of personal information
    1. BUSAMED shall preserve the security of your personal information and prevent its alteration, loss and damage, or access by non-authorised third parties.
    2. BUSAMED will ensure the security and integrity of your personal information in its possession or under its control with appropriate, reasonable technical and organisational measures to prevent loss, unlawful access, and unauthorised destruction of your personal information.
    3. BUSAMED has implemented physical, organisational, contractual, and technological security measures (having regard to generally accepted information security practices or industry specific requirements or professional rules) to keep all personal information secure, including measures protecting any personal information from loss or theft, and unauthorised access, disclosure, copying, use or modification.
    4. BUSAMED maintains and regularly verifies that the security measures are effective and regularly updates same in response to new risks.
  10. Website access and privacy
    1. When accessing our website, you are not required to provide any personal information on the public areas of our website. However, you may choose to do so by completing the application forms on various sections of our website, including:
      1. making an enquiry regarding our services.
      2. Careers/vacancy applications.
    2. By adopting this privacy policy, we seek to balance our legitimate interests and your reasonable expectation of privacy, we will take appropriate and reasonable technical and organizational steps to prevent unauthorized access to, or disclosure of your personal information.
    3. By continuing to use our website:

      You agree that we may collect, collate, process and/or store your personal information for the purpose of:
      1. providing you with access to the website and its contents.
      2. to respond to enquiries about our services.
      3. email you updates.
      4. contact you about possible employment.
    4. By continuing to use our website and supplying your personal information you do so:
      1. voluntarily acknowledging that you know and understand the contents and terms and conditions of this policy.
      2. give BUSAMED your informed expression of will, consenting to the processing of your personal information.
  11. Use of cookies
    1. Cookies are pieces of information a website transfers to a user’s hard drive for record-keeping purposes. Information from cookies and similar technologies may be used to collect information about your activities, which allows us to collect standard internet visitor usage information. The use of cookies and similar technologies are an industry standard.
    2. We will only use your personal information for the purposes for which it was collected. In addition, where necessary, your information may be retained for legal or research purposes.
  12. Links to other sites

    When you are using our website, you could be directed to other sites that are beyond our control. These other web sites may send their own cookies to collect your data or solicit personal information. We do not control the privacy policies of those third-party websites.

  13. Amending this policy
    1. We may update this policy from time to time by publishing a new version on our website.
    2. You can also obtain the current version of this policy at any time by emailing a request to our Information Officer whose contact details are set out below.
  14. Contact information of our information officer

    For any queries or requests regarding this Manual or our Privacy Policy, please contact our Information Officer whose contact details are as follows:

    Information Officer:
    Deputy Information Officer:
    Email: compliance@busamed.co.za
    Physical address: 260 Peter Mokaba Ridge Road, Berea, Durban, 4007
    Web address: https://www.busamed.co.za/