Privacy Policy

Ramsaroop Medical Centre & Aesthetic Clinic ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly, lawfully and transparently in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

This policy explains what information we collect through our website drramsaroop.co.za, why we collect it, how we use it, and the rights you have in relation to it.

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number and postal/delivery address when you enquire, book, or place an order.
• Order details — items purchased, order value, delivery preferences and correspondence relating to your order.
• Payment information — all card payments are processed by our third-party payment provider, PayFast. We never see or store your card details on our systems.
• Health information — clinical and medical history is only collected in the clinical setting (in-person or during a scheduled consultation), never through this website. It is stored under strict medical confidentiality separate from the website systems.
• Technical information — limited device, browser and usage information collected via cookies (see our Cookie Policy).

We process your personal information to:

• Respond to enquiries and manage appointment bookings.
• Process orders from our online store and arrange delivery or collection.
• Provide medical services in a clinical setting and maintain patient records as required by law.
• Meet our legal, tax, accounting and healthcare regulatory obligations.
• Improve the security and functionality of our website.

We only process information on a lawful basis — your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interests.

Our website uses only essential cookies (such as your shopping cart and admin session). We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.

Personal information is stored on reputable cloud infrastructure with encryption in transit (HTTPS/TLS) and at rest. Access is restricted to authorised personnel only, and administrative access to the store is protected by email/password authentication.

Clinical records are kept separately in accordance with HPCSA guidelines and applicable medical record-keeping laws (generally at least six years, longer where the law requires).

We retain other personal information only for as long as necessary for the purposes for which it was collected, or as required by law.

We use a small number of trusted service providers to run our practice and website:

• PayFast — secure online payment processing.
• RecoMed — online medical appointment bookings.
• GlowFlow — aesthetic clinic booking platform.
• Couriers & delivery partners — where you have asked us to deliver an order.

Each of these operates under their own privacy terms and is required to protect your information. We do not sell your personal information to anyone.

You have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct or update information that is inaccurate.
• Request deletion of information we no longer need to keep.
• Object to the processing of your information in certain circumstances.
• Lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

To exercise any of these rights, please contact our Information Officer using the details below.

Information Officer: Dr Sophie Ramsaroop

• Email: reception@drramsaroop.co.za
• Phone: 031 1000 459
• Address: 261 Underwood Road, Glen Park, Sarnia, Pinetown 3610

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the "Last updated" date below.