Sub-Processor Schedule

Why this schedule exists

POPIA requires the practice to ensure that any operator processing personal information on its behalf does so lawfully and securely, under a written agreement. This schedule lists the categories of provider involved.

Website and communication providers

• Website hosting and delivery — serves the pages of this website. Processing may take place outside South Africa.
• Database and form storage — stores consultation requests submitted through this website.
• Email delivery — sends notifications to the rooms and confirmations to you.
• WhatsApp (Meta Platforms) — where you choose to contact the practice by WhatsApp, that message is processed by Meta under its own terms.
• Google Maps — where the embedded map is loaded on the contact pages.

Practice and clinical providers

• Practice management and billing software.
• Netcare Ferncrest Hospital and Life Peglerae Hospital.
• Radiology, pathology and anaesthetic providers involved in your care.
• Medical aid schemes and their administrators.
• Medical accounts and debt administration providers.

Cross-border processing

Some technology providers store or process information outside South Africa. Where that happens the practice relies on section 72 of POPIA, and requires the recipient to be subject to laws or binding agreements giving comparable protection.

Safeguards

• Written agreements requiring confidentiality and security measures.
• Access limited to what the provider needs to perform its function.
• Notification obligations where a compromise occurs.

Keeping this list current

The named providers used by the practice are recorded internally and confirmed as [CONFIRM]. This schedule is reviewed when providers change. Contact the rooms if you need details of a specific provider.