Last Updated: August 2025
InsureSPR Health (“we,” “our,” “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) of South Africa, and applicable international data protection standards.
1. Information We Collect
We may collect the following categories of information:
- Personal Identification Information: Name, ID number, contact details, date of birth.
- Health Information: Medical history, scan results (including DXA body composition and osteoporosis assessments), and related clinical information.
- Payment Information: Billing details and transaction records.
- Digital Information: IP address, cookies, and browsing activity on our website.
2. How We Use Your Information
We process your personal information for purposes including:
- Providing healthcare and diagnostic services.
- Communicating results, reminders, and follow-up care.
- Managing appointments and patient accounts.
- Complying with legal, regulatory, or professional obligations.
- Improving our services and website functionality.
- Marketing our health services (with your explicit consent).
3. Lawful Basis for Processing
We process your information based on one or more of the following grounds:
- Consent (you agree to specific uses of your information).
- Contractual necessity (to provide you with requested services).
- Legal obligation (compliance with POPIA, HPCSA, and other laws).
- Legitimate interests (to enhance service quality and protect patient safety).
4. Data Sharing and Disclosure
We may share your information with:
- Healthcare professionals directly involved in your care.
- Service providers assisting with billing, IT, or data hosting (bound by confidentiality).
- Regulatory authorities where legally required.
- We do not sell, rent, or trade your information to third parties.
5. International Data Transfers
If your data is transferred outside South Africa, we ensure adequate protection in line with GDPR and other international data protection standards.
6. Data Retention
We retain personal and health records only as long as required by law, medical guidelines, or for legitimate business purposes. When no longer needed, data will be securely deleted or anonymized.
7. Security Measures
We implement administrative, technical, and physical safeguards to protect your personal information, including:
- Encryption of sensitive data.
- Secure servers and restricted access.
- Regular audits and compliance checks.
8. Your Rights
Under POPIA and international data protection laws, you have the right to:
- Access your personal information.
- Request correction or deletion of inaccurate data.
- Withdraw consent at any time.
- Object to processing for direct marketing.
- Lodge a complaint with the Information Regulator (South Africa) or your local data authority.
9. Cookies and Website Tracking
Our website uses cookies to improve user experience, analyze site traffic, and personalize content. You may manage cookie preferences through your browser settings.
10. Contact Us
If you have any questions or wish to exercise your privacy rights, please contact us:
InsureSPR Health
Address: 18 Aimee street Ruitorhof EmedCentre
Email:health@insuresprhealth.co.za Phone: 083 4507861
🔒 Your privacy and trust are important to us. We are committed to handling your data responsibly and transparently.