Privacy Policy

Effective Date: February 15, 2026

POPIA Compliance: This policy is designed to meet the requirements of the Protection of Personal Information Act (No. 4 of 2013) of South Africa.

1. Introduction

Elapha ("we", "us", "our") provides a telehealth platform connecting patients with healthcare professionals. We are committed to processing your personal information responsibly and legally.

2. What Information We Collect

Personal Identifiers: Name, ID number, Date of Birth.
Contact Details: Email address, phone number, and physical address.
Medical Information: Under POPIA, this is "Special Personal Information." We collect health history, medical aid numbers, and clinical notes.
Professional Data: For doctors, we verify HPCSA registration and license numbers.

3. How We Use Your Data

Your data is processed only to provide medical services, verify medical aid coverage, process payments, and improve platform safety. We do not sell your personal data to third parties.

4. Data Storage and Sovereignty

Your data is stored securely using encrypted cloud services. While some processing may happen on global servers, we ensure all service providers comply with POPIA's security standards for cross-border data transfer.

5. Security Measures

We use SSL encryption, secure database access protocols, and regular audits to ensure your sensitive health information remains confidential.

6. Your Rights under POPIA

You have the right to access your data, request corrections, or object to processing. To exercise these rights, contact our Information Officer at privacy@elapha.co.za.