Legal & policies
Privacy Notice
This notice explains what personal information the practice collects, why, how long it is kept and what rights you have under the Protection of Personal Information Act, 2013 (POPIA).
Last reviewed: February 2026
Who is responsible for this information
The responsible party is the practice of Dr Tabane Moagi, Specialist Orthopaedic Surgeon, Ferncrest Hospital, 2nd Floor, Suite 4, 3584 Moumo Street, Tlhabane, 0309.
- Email: info@drmoagi.co.za
- Telephone: 014 004 0075
- Information Officer: [CONFIRM]
- Registered practice number: [CONFIRM]
- Website: https://drmoagi.co.za
What information the practice collects
- Identifying information: name, ID or passport number, date of birth, address.
- Contact information: telephone number, email address, preferred contact method.
- Health information: symptoms, diagnoses, imaging, operation notes and clinical correspondence.
- Funding information: medical aid scheme, membership number, plan and authorisation numbers.
- Website information: pages visited and technical data, as described in the Cookie Notice.
Why the practice needs it
Health information is special personal information under POPIA. The practice processes it to provide medical care to you, which POPIA permits where processing is necessary for the proper treatment of the person concerned. Identifying, contact and funding information is processed to make appointments, obtain pre-authorisation and submit accounts.
Where you complete a form on this website, the practice processes what you send in order to respond to your enquiry, on the basis of the consent you give when submitting the form.
Who it may be shared with
- Netcare Ferncrest Hospital and Life Peglerae Hospital, for admission and surgery.
- Anaesthetists, radiologists, pathologists and physiotherapists involved in your care.
- Your medical aid scheme or its administrator, for authorisation and payment.
- Your referring doctor and any specialist to whom you are referred.
- Service providers listed in the Sub-Processor Schedule, under written agreement.
The practice does not sell your personal information and does not use it for advertising to others.
Cross-border transfers
Some technology providers store data outside South Africa. Where that happens, the practice relies on section 72 of POPIA and requires the recipient to be bound by comparable protections. Details are set out in the Sub-Processor Schedule.
How long records are kept
Health records are retained in line with the requirements of the Health Professions Council of South Africa: generally at least six years from the date they became dormant, and longer for minors and certain categories of record. Financial records are kept for the period required by tax legislation. Website enquiry records are kept for [CONFIRM] unless they become part of a clinical record.
Security
The practice takes reasonable technical and organisational measures to protect your information, including access control, encryption in transit and restricted access to clinical records. No system is completely secure, and the practice will notify you and the Information Regulator of a compromise where POPIA requires it.
Your rights
- To be told what personal information the practice holds about you.
- To ask for information that is wrong to be corrected, or information no longer needed to be deleted.
- To object to processing on reasonable grounds.
- To withdraw consent for marketing at any time, without affecting your care.
- To complain to the Information Regulator.
To exercise any of these rights, contact the rooms at info@drmoagi.co.za or 014 004 0075. Requests for access to records follow the process in the PAIA Manual.
Children
Where a patient is under 18, information is processed with the consent of a parent or guardian, except where the law allows a child to consent to their own treatment.
Complaints to the Information Regulator
If you believe the practice has not handled your personal information lawfully, you may complain to the Information Regulator of South Africa: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 — complaints.IR@inforegulator.org.za.
Changes to this notice
This notice may be updated. The date at the top of the page shows when it was last reviewed, and the current version always applies.