POPIA Privacy Notice
Protection of Personal Information Act (POPIA) — Patient Privacy Notice
Your Privacy Matters to Us
Dr. Lizmare Bronn’s Medical Dermatology Practice (Dr Bronn Incorporated) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This notice explains what we collect, why we collect it, and how we keep it safe.
1. Who We Are
| Responsible Party | Dr. Bronn Incorporated |
| Practice Registration | PN 0211494 |
| Address | Paarl: 211 Main Road, Paarl Hermanus: B-block, First Floor, Arundel Medical Centre, Hermanus |
| Information Officer | Dr. Lizmare Bronn |
2. Personal Information We Collect
We may collect and process the following categories of personal information:
- Identity information: full name, ID/passport number, date of birth, gender
- Contact details: residential address, telephone number, email address
- Medical and health information: medical history, diagnoses, treatment records, prescriptions, laboratory results
- Financial information: medical aid details, account numbers, billing records
- Next-of-kin and emergency contact details
- Referral and correspondence records from other healthcare providers
3. Why We Collect Your Information
Your personal information is collected and processed for the following purposes:
- To provide medical care, diagnosis, treatment, and follow-up services
- To comply with applicable law, including the National Health Act and HPCSA regulations
- To process medical aid claims and manage billing and payment
- To maintain accurate patient records and clinical documentation
- To communicate with you regarding appointments, results, and treatment plans
- To refer you to other healthcare providers where clinically necessary
4. Lawful Basis for Processing
We process your personal information only where we have a lawful basis to do so, including:
- Your consent (given voluntarily and which may be withdrawn at any time)
- The conclusion or performance of a healthcare service agreement
- Compliance with a legal obligation (e.g. HPCSA, National Health Act, Tax Administration Act)
- Protecting your vital interests or those of another person in a medical emergency
- Our legitimate interests in operating a safe and compliant medical practice
5. Sharing of Your Information
We do not sell your personal information. We may share it only where necessary with:
- Medical aid schemes and administrators for claims processing and authorisation
- Specialist physicians, hospitals, or other healthcare providers for referral purposes
- Regulatory bodies (HPCSA, Department of Health) as required by law
- Legal and compliance advisers bound by professional confidentiality obligations
- Third-party service providers (including GoodX for billing, appointment scheduling and electronic medical records; Heidi Health for generation of clinical notes) under written data processing agreements
Any party that receives your information is required to handle it lawfully and securely.
6. Your Rights Under POPIA
As a data subject (patient), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate, incomplete, or outdated information
- Object to the processing of your personal information
- Request deletion or destruction of your information (subject to legal retention periods)
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with the Information Regulator of South Africa
Information Regulator: inforeg@justice.gov.za | +27 10 023 5207
7. Retention of Information
We retain patient records for the periods prescribed by the National Health Act and HPCSA guidelines — generally a minimum of six years from the date of the last entry, or until a minor patient turns 21. Once no longer required, records are securely destroyed or de-identified.
8. How We Protect Your Information
We implement appropriate technical and organisational safeguards to protect your personal information against loss, unauthorised access, disclosure, or destruction. All practice staff who handle patient information are bound by confidentiality obligations and receive appropriate training.
9. Updates to This Notice
This notice may be updated periodically. The most current version will be displayed at reception and on this page. Material changes will be communicated to patients directly.
10. Contact Us
To exercise any of your rights, submit an access request, or raise a concern about the processing of your personal information, please contact our Information Officer:
| Information Officer | Dr Lizmare Bronn |
| drlbronn@paarlskin.co.za | |
| Telephone | 021 872 7737 |
| Physical Address | Main Office: 211 Main Road, Paarl |
POPIA Notice v1.0 | Effective Date: June 2026