Legal

Privacy Notice

Version 1.1 · 14 September 2026 · Website only

This notice explains what personal information Veritas Medical (Pty) Ltd collects through this website, why we collect it, who receives it and what rights you have. It is issued in terms of section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who is responsible for your information

Responsible party
Veritas Medical (Pty) Ltd, trading as Veritas Healthcare Complex
Registration number
2025/414352/07
Physical & postal address
11 Beach Road, Mossel Bay, Western Cape, 6506, South Africa
Information Officer
Dr Geber Middel, Co-Founder & Managing Director, registered with the Information Regulator.
Contact for privacy queries
gebermiddel@veritasmedical.co.za · +27 79 496 2931

2. What this notice covers — and what it does not

This notice covers this website only. It does not cover health records, clinical information or any personal information collected in the course of providing healthcare services.

Health information is special personal information under section 26 of POPIA and is subject to stricter conditions, alongside the National Health Act and the applicable professional rules.

3. What we collect

Information you give us

If you complete an enquiry form on this website, we collect the information you enter into it:

  • your name;
  • your email address;
  • your telephone number;
  • the message you write;
  • the category of enquiry you select, where the form offers one; and
  • your confirmation that you consent to us holding these details.

If you contact us by email or telephone using the details published on this site, we hold whatever you choose to tell us in that correspondence.

Information collected automatically

This website uses Google Analytics to understand how it is used — which pages are viewed, for how long, how visitors arrive here and roughly where in the world they are. When a page loads, Google Analytics records:

  • the pages you visit, and the time and length of your visit;
  • the website or link that referred you here;
  • your browser, type of device, screen size and language; and
  • your approximate location — city, region and country — which Google works out from your IP address.

To recognise a returning browser, Google Analytics sets two cookies on your device: _ga, which tells one visitor apart from another, and _ga_…, which keeps track of the current visit. Both expire after two years. These are the only cookies this site sets.We use Google Analytics only to measure how the site is used. We do not use it to identify you, and we do not combine it with anything you submit through the enquiry form.

Two other things happen automatically when a page loads. Typefaces are requested from Google Fonts, which discloses your IP address to Google. And the server hosting this site keeps standard web logs. Those logs are kept by our hosting provider under its own retention policy. We do not use them to identify individual visitors.

4. Why we collect it, and on what basis

We collect enquiry details for one purpose: to read and respond to your enquiry, and to keep a record of that correspondence. We do not use them for marketing, and we do not sell or rent them to anyone.

Our lawful basis is your consent, given by ticking the consent box before submitting the form (section 11(1)(a) of POPIA). Where we reply to you and keep the correspondence, we also rely on our legitimate interest in handling enquiries properly (section 11(1)(f)).

We use Google Analytics for a separate purpose: to measure how the website is used, so that we can see what visitors look for and improve the site. The basis is our legitimate interest in running an effective website (section 11(1)(f)). You may object to this, and you can stop it yourself at any time — see section 11.

5. Whether you have to provide it

Supplying this information is entirely voluntary. You are under no obligation to use the form. The only consequence of not providing it is that we will not be able to respond to you — you may contact us by telephone or email instead, using the details on the Get in Touch page.

Analytics information is collected automatically as you browse, but you can prevent its collection — see section 11.

6. Who receives your information

Your information is seen by, or passes through:

  • The Veritas founders and the staff handling enquiries.Submissions are delivered to the enquiry inbox monitored by Dr Geber Middel.
  • Web3Forms, the service that receives the form submission and relays it to that inbox. Web3Forms acts as an operator on our behalf — see section 7.
  • Nkosi (nkosi.co.za), our South African email hosting provider, which stores the resulting message in the enquiry mailbox.
  • Google, which receives your IP address when the page requests typefaces, and which operates Google Analytics and holds the analytics information described in section 3. How Google uses information from websites that use its services is explained at policies.google.com/technologies/partner-sites.

We may also disclose information where the law requires it, or to our professional advisers under a duty of confidentiality.

7. Enquiry forms and Web3Forms

When you submit an enquiry through a form on this website, we collect the personal information you enter into it — your name, email address, telephone number and the contents of your message, as set out in section 3.

To deliver those messages reliably, this website uses Web3Forms, a third-party form processing service. By submitting a form you acknowledge that your submission is transmitted through Web3Forms' servers for the sole purpose of routing the message to our enquiry inbox. Web3Forms acts as an operator within the meaning of POPIA, processing the information on our instructions and not for its own purposes.

Submissions are transmitted over an encrypted connection (HTTPS/TLS). Web3Forms' servers are located in the United States, so submitting the form involves a transfer of your personal information outside South Africa — see section 8.

Web3Forms handles submissions under its own privacy policy, published at web3forms.com/privacy, which governs how long anything is held on their systems. Our own copy of your enquiry is kept as described in section 9.

We use what you send strictly to respond to your enquiry, to provide information you have asked for, or to maintain a business relationship with you. We do not sell, rent or distribute your personal information.

You may ask what we hold about you, ask us to correct or delete it, or object to our processing — your rights are set out in full in section 11. For a PAIA request, for access to our PAIA manual, or for any question about how your information is handled through Web3Forms, contact our Information Officer, Dr Geber Middel, at gebermiddel@veritasmedical.co.za or +27 79 496 2931.

8. Transfers outside South Africa

Web3Forms and Google both operate outside South Africa, so submitting the form involves a transfer of your personal information to another country within the meaning of section 72 of POPIA. Web3Forms' servers are in the United States; Google serves typefaces from its global infrastructure. Nkosi, which hosts the enquiry mailbox, is a South African provider.

That transfer happens because you consent to it when you tick the consent box and submit the form, which is a basis section 72 allows. Each recipient also publishes its own data protection terms governing what it may do with the information. If you would rather your details were not transferred, contact us by telephone or email instead — the details are in section 1 and on the Get in Touch page.

Google Analytics information is also processed by Google outside South Africa, including in the United States, whenever you browse the site — not only when you submit the form. Google handles it under its published data protection terms. If you would rather it were not collected or transferred, you can prevent it as described in section 11.

9. How long we keep it

We keep enquiry correspondence for five years from our last exchange with you, after which it is deleted. POPIA requires that records not be kept longer than necessary for the purpose they were collected for, unless another law requires otherwise; five years reflects the period over which an enquiry may still be relevant to a continuing business relationship. You may ask us to delete your details sooner — see section 11.

Google Analytics keeps the detailed record of visits for no more than 14 months, the longest period its settings allow, after which only aggregated statistics that identify no one remain. The cookies on your device expire after two years unless you delete them sooner.

10. How we protect it

Section 19 of POPIA requires appropriate, reasonable technical and organisational measures. In respect of this website:

  • form submissions are sent over an encrypted connection (HTTPS/TLS);
  • the website holds no database of its own — nothing you submit is stored on this site, and there is no login, account or customer record here to be breached;
  • the only cookies are the two Google Analytics cookies described in section 3, and the site carries no advertising;
  • the enquiry form carries validation and a spam trap, so that what reaches the inbox is what you actually sent;
  • access to the enquiry mailbox is limited to the founders and the staff handling enquiries; and
  • if personal information is accessed or acquired by an unauthorised person, we will notify the Information Regulator and the people affected, as section 22 requires.

No system is completely secure. Please do not send sensitive health information through the enquiry form — it is a general enquiry channel, not a clinical one.

11. Your rights

Under POPIA you have the right to:

  • ask what personal information we hold about you, and receive a copy;
  • ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
  • object to our processing, on reasonable grounds, in terms of section 11(3);
  • withdraw your consent at any time, which does not affect processing already carried out; and
  • complain to the Information Regulator.

To exercise any of these, contact the Information Officer at the address in section 1. Requests for access are dealt with under the Promotion of Access to Information Act — see our PAIA manual.

You can stop Google Analytics collecting information about your visits without contacting us: install Google's opt-out browser add-on from tools.google.com/dlpage/gaoptout, or block or delete cookies in your browser settings. The site works fully either way.

12. Complaining to the Information Regulator

You may lodge a complaint with the Information Regulator (South Africa):

Address
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
POPIA complaints
POPIAComplaints@inforegulator.org.za
PAIA complaints
PAIAComplaints@inforegulator.org.za
Website
inforegulator.org.za

13. Changes to this notice

We may update this notice as the platform develops. The version and date appear at the top of this page. Material changes will be brought to the attention of anyone affected.