POPIA Compliance Statement

Meditech24 is committed to complying with the Protection of Personal Information Act (POPIA) of South Africa. We respect your right to privacy and are dedicated to protecting your personal information.

Our appointed Information Officer is responsible for ensuring POPIA compliance: Name: Thabo Molefe Email: dpo@meditech24.co.za Phone: +27 (84) 640-1113

We only process personal information when we have a lawful basis to do so, including: - Your consent - Performance of a contract (providing our services) - Compliance with legal obligations - Protection of your legitimate interests - Pursuit of our legitimate business interests

We collect personal information only for specific, explicitly defined, and legitimate purposes. These include: - Providing telemedicine services - Processing payments - Improving our platform - Sending relevant communications - Complying with legal requirements We do not process your information for purposes incompatible with those listed.

Given the nature of healthcare, we process special personal information including health data. We implement additional safeguards: - Enhanced encryption for health records - Restricted access to medical information - Additional consent requirements - Compliance with healthcare regulations

POPIA grants you the following rights: 1. **Right to Access:** Request confirmation of what personal information we hold about you 2. **Right to Correction:** Request correction of inaccurate information 3. **Right to Deletion:** Request deletion of your information (subject to legal requirements) 4. **Right to Object:** Object to processing of your personal information 5. **Right to Complain:** Lodge a complaint with the Information Regulator

We implement appropriate technical and organizational measures to secure your personal information: - Encryption (at rest and in transit) - Access controls - Regular security audits - Staff training - Incident response procedures - Data backup and recovery

In the event of a data breach that poses a risk to your rights, we will: - Notify the Information Regulator as soon as reasonably possible - Notify you if the breach is likely to result in risk to you - Take immediate steps to address the breach

When transferring personal information outside South Africa, we ensure the recipient country has adequate data protection laws or implement appropriate safeguards such as binding corporate rules or standard contractual clauses.

If you believe we have not handled your personal information properly, you may lodge a complaint with: The Information Regulator (South Africa) Email: inforeg@justice.gov.za Website: www.justice.gov.za/inforeg