This notice explains the personal information collected through Mediwell’s website forms and how it should be handled. It is intended to support transparent processing under South African privacy principles, including POPIA.
Information collected
Website forms may collect a name, phone number, email address, service requested, preferred area or date, message and consent to be contacted. Technical information may be collected by hosting, security and analytics systems. Avoid submitting unnecessary clinical detail through a general form.
Purpose
Mediwell uses enquiry information to respond, route the request to the appropriate service, arrange appointments, maintain records of communication, secure the website and improve service delivery. Information should not be used for unrelated marketing without an appropriate legal basis or consent.
Storage and service providers
Form submissions are stored in the site’s FormCraft system so authorised administrators can manage leads. Hosting, email, security, analytics and booking providers may process information on Mediwell’s behalf. Access should be limited to people who need it for their role.
Retention
Information should be retained only as long as needed for the purpose, legal obligations, dispute handling and legitimate record requirements. Mediwell should document retention periods for website leads and delete or anonymise records when no longer required.
Security
Mediwell should use access controls, strong authentication, software updates, backups and incident-response procedures. No internet system can be guaranteed completely secure. Do not send emergencies or highly sensitive information through a general web form.
Your choices and rights
Subject to applicable law, a person may ask what information is held, request correction or deletion, object to certain processing or withdraw consent where consent is the basis. Some records may need to be retained by law or for healthcare record duties.
Contact
Call 011 300 2900 or use the contact page for a privacy request. Mediwell should publish the responsible Information Officer’s confirmed name and email once approved.
Cookies and analytics
The website may use essential, analytics and third-party cookies. A cookie preference mechanism should be maintained where required, with non-essential tracking controlled by the user’s choice.
