Privacy Policy

Last updated: January 2026

Mkhize NP Physiotherapy Inc. ("we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Health Professions Act 56 of 1974.

1. Information We Collect

We collect personal information that you voluntarily provide to us, including:

• Identity Information: Name, surname, ID number, date of birth, gender
• Contact Information: Phone number, email address, physical address
• Medical Information: Medical history, current conditions, medications, allergies, treatment records
• Medical Aid Information: Medical aid name, membership number, dependant details
• Emergency Contact Information: Name, relationship, and contact details of your emergency contact

2. How We Use Your Information

We use your personal information for the following purposes:

• To provide physiotherapy assessment, treatment, and care
• To communicate with you regarding appointments and treatment
• To submit claims to your medical aid on your behalf
• To comply with legal and regulatory requirements
• To contact your emergency contact in case of emergency
• To improve our services based on feedback

3. Legal Basis for Processing

We process your personal information based on:

• Your consent provided during registration
• The necessity to perform our contractual obligations to you
• Compliance with legal obligations under healthcare legislation
• Our legitimate interest in providing quality healthcare services

4. Sharing Your Information

We may share your personal information with:

• Your medical aid scheme for claims processing
• Other healthcare providers involved in your care (with your consent)
• Regulatory bodies as required by law (e.g., HPCSA)
• Our professional advisors where necessary

We will never sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes secure storage of physical records and encrypted electronic systems.

6. Data Retention

In accordance with the Health Professions Act and HPCSA guidelines, we retain patient records for a minimum of 5 years from the date of last consultation for adults, and until the age of 21 for minors. After this period, records may be securely destroyed.

7. Your Rights Under POPIA

You have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to the processing of your information
• Lodge a complaint with the Information Regulator
• Withdraw your consent at any time

8. Cookies and Website Data

Our website may use cookies to improve your browsing experience. These cookies do not collect personal health information. You can disable cookies in your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Information Officer:

• Email: enquiries@mkhizephysio.co.za
• Phone: 064 519 6710 (PMB) | 061 584 0716 (Hammarsdale)
• Address: 191 Boshoff Street, Pietermaritzburg, 3201