POPIA & PRIVACY
Privacy Policy
Responsible party: Dr D Moodley Inc· Last updated: 1 July 2026
This Privacy Policy explains how Dr D Moodley Inc, trading in part as PVT, collects, uses, stores and protects personal information. As a medical practice, PVT handles health information with particular care and confidentiality and processes personal information in accordance with applicable South African privacy requirements, including the Protection of Personal Information Act, 4 of 2013 (POPIA).
Who is responsible for your information
The responsible party for personal information processed through PVT is Dr D Moodley Inc, a private medical practice registered in South Africa.
Privacy requests should be directed to the practice using the verified contact details published on the PVT website. The confirmed Information Officer details should be added to this page before final publication.
What information we collect
PVT may collect information that is reasonably necessary to provide medical care and operate the practice, including:
- Identity and contact information: your name, date of birth, phone number, email address and, where required for pathology or another lawful purpose, an ID or passport number.
- Medical information: your medical history, symptoms, examination findings, test results, diagnoses, prescriptions, referrals and treatment information.
- Booking information: information you provide when requesting an appointment, including your preferred location and any optional information you choose to provide about your reason for booking.
- Payment and claim information: payment records, invoices and medical scheme details where you choose to provide them for claiming purposes.
- Website information: technical or usage information generated by the website platform and any security or analytics tools that are enabled.
How and why we use your information
Personal information is processed where reasonably necessary to provide medical care, arrange appointments, communicate with you, request and receive investigations, provide results, issue prescriptions or referrals where clinically appropriate, maintain medical records, prepare invoices and comply with legal or professional obligations.
Information supplied for a booking or clinical purpose should not be reused for unrelated marketing without an appropriate lawful basis or permission.
Who we may share information with
PVT does not sell patient information. Where necessary for your care or the lawful operation of the practice, relevant information may be shared with an accredited pathology laboratory, healthcare professionals involved in your care, authorised service providers, medical schemes where you request claim-related processing, or authorities where disclosure is required by law.
Only information reasonably necessary for the relevant purpose should be shared.
Medical confidentiality and information security
Health information may constitute special personal information under POPIA and is treated as confidential. Dr D Moodley Inc uses reasonable administrative, technical and organisational safeguards to reduce the risk of unauthorised access, loss, misuse or disclosure.
Access to patient information should be limited to people who require it for an authorised purpose.
Medical aid, invoices and claims
PVT may provide a detailed invoice for submission to a medical scheme where applicable. If you choose to submit a claim or provide medical scheme information, the information necessary for that purpose may be processed accordingly.
What appears on a medical aid statement is determined by the medical scheme and its claims process. Patients may ask the practice about billing and privacy before submitting a claim.
Website forms, cookies and analytics
The PVT booking form should collect only information reasonably necessary to respond to a booking request. Visitors should avoid placing unnecessary sensitive clinical detail into general website forms.
Cookies, analytics or security technologies may be used where configured and lawful. These tools should not be intentionally configured to collect unnecessary sensitive medical information.
How long we keep information
Personal and medical information is retained for as long as required for the purpose for which it was collected and for any additional period required by applicable law, professional rules or medical-record retention obligations.
When information is no longer required, it should be securely deleted, destroyed or de-identified where appropriate.
Your rights under POPIA
Subject to applicable law and medical-record requirements, you may ask whether the practice holds personal information about you, request access to that information, request correction of inaccurate information, object to certain processing, or raise a concern about how your information has been handled.
Some requests may be limited where the practice is legally or professionally required to retain information or where another lawful ground applies.
Privacy queries and policy updates
Privacy questions or requests should be directed to Dr D Moodley Inc using the verified practice contact details published on the PVT website.
This policy may be updated when the practice, website, service providers or legal requirements change. The date shown at the top of the page indicates the latest revision.