Privacy Poliy

Last updated: 9 August 2026

1. Introduction

All Care Medical respects your privacy and is committed to processing personal information responsibly and securely.

This Privacy Notice explains how All Care Medical collects, uses, stores, shares and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Promotion of Access to Information Act 2 of 2000 (“PAIA”), and other applicable South African laws.

This notice applies when you:

  • visit the All Care Medical website;
  • submit an online enquiry;
  • contact All Care Medical by email or another approved channel;
  • enquire about mobile nursing services;
  • enquire about education or training;
  • receive services from All Care Medical; or
  • otherwise interact with the business.

POPIA establishes minimum requirements for the lawful processing and protection of personal information by public and private bodies. Justice

2. Who is responsible for your information?

For purposes of POPIA, the responsible party is:

Business name: All Care Medical
Responsible practitioner: Lyndel Joubert
Practice number: 1263374
Service area: Durban South, KwaZulu-Natal
Website: allcaremedical.co.za
Privacy email: privacy@allcaremedical.co.za
Online enquiries: allcaremedical.co.za/contact/

Information Officer

Information Officer: Lyndel Joubert
Email: privacy@allcaremedical.co.za

All Care Medical does not publish the Information Officer’s private residential address or personal telephone number on this website.

The Information Officer is responsible for overseeing compliance with POPIA and PAIA. Information Officers must be registered with the South African Information Regulator before formally taking up their duties. Empowered Compliance Monitor

3. Personal information we may collect

The information collected depends on how you interact with All Care Medical.

Contact information

We may collect:

  • your full name;
  • email address;
  • contact number, where you choose to provide it;
  • preferred contact method;
  • general location or suburb;
  • the nature of your enquiry;
  • communication history.

Nursing-service information

Where reasonably necessary to assess or provide a nursing service, we may collect:

  • requested service;
  • patient name and contact details;
  • general care requirements;
  • prescriptions;
  • medication information;
  • referrals;
  • allergies;
  • relevant medical history;
  • treatment plans;
  • wound-care information;
  • vascular-access information;
  • treating healthcare-professional details;
  • clinical observations and nursing records.

Health information is special personal information under POPIA and must be processed with particular care and only where lawful and necessary.

Education and training information

For education, training, assessment or moderation enquiries, we may collect:

  • organisation name;
  • professional role;
  • training topic;
  • intended audience;
  • approximate number of attendees;
  • preferred format or location;
  • assessment or moderation information;
  • attendance and programme records.

Administrative and payment information

Where applicable, we may collect:

  • billing information;
  • invoice details;
  • payment confirmation;
  • medical-scheme information where relevant;
  • records required for legal, tax or professional purposes.

Please do not submit bank-card details through the website contact form or by ordinary email.

Website information

The website may automatically collect limited technical information such as:

  • internet protocol address;
  • device and browser type;
  • pages visited;
  • visit date and time;
  • referring website;
  • cookie preferences;
  • website-performance information.

4. How we collect information

We may collect personal information:

  • directly from you;
  • through the website enquiry form;
  • through email or another approved communication channel;
  • during a telephone conversation initiated through an enquiry;
  • from a parent, guardian, family member or authorised representative;
  • from a referring doctor, oncologist or other healthcare professional;
  • from a hospital, pharmacy or healthcare organisation;
  • from a training provider or employer;
  • automatically through cookies and website technologies.

Where information is received from another person, All Care Medical will process it only where there is a lawful and appropriate reason to do so.

5. Why we process personal information

Personal information may be processed to:

  • respond to enquiries;
  • contact you using your chosen contact method;
  • assess whether a requested service is suitable;
  • arrange mobile nursing visits;
  • verify prescriptions, referrals or treatment plans;
  • provide authorised nursing care;
  • communicate with relevant treating healthcare professionals;
  • maintain clinical and nursing records;
  • provide patient and family education;
  • arrange training, assessment or moderation services;
  • manage invoices and payments;
  • comply with legal, professional and regulatory obligations;
  • respond to complaints or safety concerns;
  • maintain website functionality and security;
  • prevent fraud, misuse or unauthorised access.

Information will not be used for an unrelated purpose unless there is a lawful reason or you are appropriately informed.

6. Lawful grounds for processing

Depending on the circumstances, All Care Medical may process information where:

  • you have provided valid consent;
  • processing is necessary to respond to your request;
  • processing is required to provide an agreed service;
  • processing is necessary to perform or conclude an agreement;
  • processing is required by law;
  • processing protects your legitimate interests;
  • processing protects the legitimate interests of All Care Medical or another party without unjustifiably affecting your rights;
  • processing is necessary for lawful healthcare, nursing or treatment-related purposes.

Where processing depends on consent, you may withdraw that consent. Withdrawal will not invalidate lawful processing that occurred before it was withdrawn.

7. Health information

All Care Medical may process health information only where it is relevant, lawful and reasonably necessary for the service concerned.

Health information may be used to:

  • assess clinical suitability;
  • confirm service requirements;
  • provide and document nursing care;
  • monitor the patient’s condition;
  • communicate with relevant treating professionals;
  • address patient-safety concerns;
  • comply with clinical and professional recordkeeping duties.

Do not use the general enquiry form for detailed medical records

Please do not submit the following through the public website contact form:

  • identity documents;
  • complete medical records;
  • prescriptions;
  • laboratory reports;
  • wound photographs;
  • detailed cancer histories;
  • payment-card details;
  • account passwords.

Where further clinical information is required, All Care Medical will explain how it should be provided.

8. Children’s information

Personal information concerning a child will be processed only where legally permitted and with appropriate authorisation from a parent, guardian or other competent person, unless another lawful basis applies.

The website enquiry form is not intended for unsupervised use by children.

9. Sharing personal information

All Care Medical does not sell personal information.

Information may be disclosed where necessary and lawful to:

  • doctors, oncologists and other treating healthcare professionals;
  • hospitals, pharmacies, laboratories or healthcare facilities;
  • medical schemes or funders where applicable and authorised;
  • professional advisers;
  • accountants or administrative service providers;
  • website, hosting, email and secure technology providers;
  • training organisations or institutions;
  • professional bodies or regulators;
  • emergency services where necessary to protect life or safety;
  • courts, law-enforcement authorities or government bodies where legally required.

Service providers processing information on behalf of All Care Medical must be subject to appropriate confidentiality and security requirements.

10. International processing

Some website, email, cloud-storage or technology providers may process information outside South Africa.

Where personal information is transferred outside South Africa, All Care Medical will take reasonable steps to ensure that the transfer is lawful and that suitable protection is in place.

11. Retention of information

Personal information will be retained only for as long as reasonably necessary to:

  • fulfil the purpose for which it was collected;
  • provide and document nursing services;
  • comply with legal, tax, professional or clinical obligations;
  • respond to complaints;
  • resolve disputes;
  • establish, exercise or defend legal claims;
  • maintain necessary business records.

Different types of records may have different legally or professionally required retention periods.

When information is no longer required, it will be securely deleted, destroyed, anonymised or de-identified, unless continued retention is required or permitted by law.

12. Security safeguards

All Care Medical takes reasonable technical and organisational measures to protect personal information against:

  • loss;
  • damage;
  • unauthorised destruction;
  • unlawful access;
  • misuse;
  • alteration;
  • unauthorised disclosure.

Measures may include:

  • strong passwords;
  • multi-factor authentication;
  • controlled access to records;
  • secure devices and email accounts;
  • restricted access to patient information;
  • confidentiality obligations;
  • secure backups;
  • anti-spam and malware controls;
  • secure disposal procedures;
  • incident-response processes.

No email, website or electronic-storage service can be guaranteed to be completely secure. Visitors should not send sensitive medical documents through ordinary email unless specifically instructed to do so.

13. Suspicious or fraudulent messages

All Care Medical will never ask you by email to provide:

  • account passwords;
  • one-time passwords;
  • online-banking login information;
  • complete payment-card details;
  • website or hosting credentials.

Be cautious of unexpected emails claiming to come from All Care Medical, especially where they contain urgent payment requests, unfamiliar attachments or login links.

If you receive a suspicious message, do not open attachments or click links. Contact All Care Medical through the website’s published contact form or by starting a new email to:

privacy@allcaremedical.co.za

Do not reply directly to the suspicious message.

14. Security compromises

Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, All Care Medical will investigate and take appropriate action.

Where required, affected people and the Information Regulator will be notified as soon as reasonably possible. The Regulator’s guidance provides that affected data subjects should receive information that enables them to reduce potential harm. Empowered Compliance Monitor

15. Cookies

The website may use cookies and similar technologies for:

  • essential website functionality;
  • security;
  • remembering privacy preferences;
  • measuring website performance;
  • understanding how visitors use the website;
  • enabling external services such as maps.

Essential cookies

Essential cookies support basic website functions and may operate without optional consent where legally permitted.

Optional cookies

Analytics, embedded-media, mapping or other non-essential cookies should operate according to the preferences selected through the cookie notice or consent tool.

You may adjust cookie preferences through the website’s cookie settings or through your browser.

16. Embedded services

The website may contain embedded services such as Google Maps, videos or external forms.

These services may collect technical information or place cookies when activated. External providers process information according to their own privacy terms.

Where a consent tool is in use, an optional embedded service may remain blocked until the relevant cookie choice has been made.

17. Direct marketing

All Care Medical will send direct electronic marketing only where permitted under POPIA.

Consent to receive marketing must be separate from consent required to respond to a healthcare or training enquiry.

You may unsubscribe or object to direct marketing at any time.

The Information Regulator has published specific guidance on direct marketing and unsolicited electronic communications under POPIA. Empowered Compliance Monitor

18. Your rights

Subject to applicable law, you may request to:

  • confirm whether All Care Medical holds personal information about you;
  • access your personal information;
  • correct inaccurate, incomplete or outdated information;
  • request deletion or destruction where legally permitted;
  • object to certain processing;
  • withdraw consent where processing relies on consent;
  • object to direct marketing;
  • request information about relevant third-party access;
  • submit a complaint to the Information Regulator;
  • request access to records under PAIA.

Some requests may be restricted where retaining or processing information is required by law, professional obligations, patient-safety requirements or the rights of another person.

19. Exercising your rights

To submit a privacy request, email:

Information Officer: Lyndel Joubert
Email: privacy@allcaremedical.co.za

Alternatively, use the website contact form and choose:

Privacy or personal-information enquiry

For security reasons:

  • do not attach an identity document to your first email;
  • do not send detailed medical records through the general contact form;
  • do not send passwords or one-time passwords;
  • wait for instructions about appropriate identity verification.

All Care Medical may request reasonable proof of identity before providing access to, changing or deleting personal information. This helps prevent fraudulent requests.

20. PAIA requests

PAIA provides a formal process for requesting access to certain records held by a private body.

Requests relating to access to records may be submitted to the Information Officer at:

Email: privacy@allcaremedical.co.za

All Care Medical’s PAIA Manual will be made available through the website or on request once completed.

The Information Regulator provides a PAIA Manual template for private bodies that includes key Information Officer and access-request details. Empowered Compliance Monitor

21. Complaints

Please contact All Care Medical first so that the concern can be considered and, where possible, resolved.

Information Officer: Lyndel Joubert
Email: privacy@allcaremedical.co.za

You may also lodge a complaint with the South African Information Regulator.

Information Regulator South Africa

POPIA complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Toll-free: 0800 017 160

The Information Regulator provides separate channels for general enquiries and complaints concerning possible unlawful processing of personal information. Empowered Compliance Monitor

22. Third-party websites

The website may contain links to external websites or services.

All Care Medical does not control the privacy, security or content practices of third-party websites. Visitors should review the privacy information of an external service before submitting personal information.

23. Changes to this Privacy Notice

This Privacy Notice may be updated when business practices, services, technology or legal requirements change.

The latest version will be published on this page and identified by its “Last updated” date.

24. Contact

For privacy and personal-information enquiries:

All Care Medical
Information Officer: Lyndel Joubert
Email: privacy@allcaremedical.co.za
Website contact form: allcaremedical.co.za/contact/
Service area: Durban South, KwaZulu-Natal

For security reasons, do not send identification documents, prescriptions, medical records, detailed health information, passwords or payment-card information in your initial email.