The Privacy Notice explains how Cresta Eyecare inc. t/a Vision Optometrists obtains, uses and discloses your personal information, in accordance with the requirements of the Protection of Personal Information Act (“POPIA”).
At Vision Optometrists we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.
It is VISION Optometrist’s policy to respect your privacy regarding any information we may collect and process while operating on our website or through any dealings with us at our physical store.
All employees are required to sign and adhere to an Employee Consent and Confidentiality Agreement.
- The policy applies to any and all actions we take regarding your personal information including:
- The collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
- Dissemination by means of transmission, distribution or making available in any other form; or
- Merging, linking, as well as restriction, degradation, erasure or destruction of information.
Who we are:
Vision Optometrists is a personal liability company. We run our practice according to the requirements set by the Health Professionals Act of 1974 and are subject to the authority of the Health Professionals Council of South Africa (HPCSA). Our business is to practice Optometry within the scope and ambit of our competence and training, as defined from time to time. We are bound by a number of ethical rules issued by the HPCSA, most notably the duty to preserve patient confidentiality, unless legislation or a court order compels us to breach this duty. Requesters should note that commercial information and financial information may be withheld on the grounds of sections 63-70 of the PAIA
The type of personal information we collect:
We collect and process your personal information mainly for;
Correct identification, account accuracy, medical aid claims, to be able to contact you in relation to services delivered, to understand your needs to deliver services accordingly and to assist with diagnoses and treatments.
To do this we may need the following;
- Name, identity number, medical aid details, e-mail address, telephone numbers, address
- Information relating to the race, sex, pregnancy, age, ocular history, physical or mental health conditions, medication, well-being, disability, language.
- The biometric information of the person in the form of prescriptions, lens centration photo (which captures the spectacle wearer’s face), ocular photos, images and scans
- Security camera footage
How we get the personal information and what we use it for:
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- For accurate medical and ocular history taking, as regulated and enforced by the Health Professionals Counsel of South Africa (HPCSA) and supplemented by the POPI Act.
- To more accurately, diagnose, treat or manage any symptoms, signs, diseases, syndromes, abnormalities, etc… as per minimum standards of care set out by the HPSCA.
- Medical Aid claims. For Vision Optometrists to claim on the member’s behalf or for the individual client/patient to be able to submit to their medical aid.
- For communication purposes. We strive to inform all clients/patients as to the status of their order, collection, follow-up periods, outstanding balances and other account queries.
- Financial history with regards to any purchases made at, or through Vision Optometrists for warranty, guarantee, debt collecting purposes and fraud prevention.
- For newsletter communication and promotions.
Processing of your information is necessary for pursuing the legitimate interest of Vision Optometrist as stipulated by sections 11 and 27 of the POPI act as well as regulation set out by the HPSCA (see below).
We also receive personal information indirectly, from the following sources in the following scenarios:
- Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.
We may share this information with:
- Medical professionals, such as, but not limited to; Ophthalmologist, General Practitioners, Optometric colleagues for the purposes of second opinions, shared history taking (where applicable) and continued practitioner development, training, learning and teaching.
- Optical frame, lens and contact lens suppliers for the purpose of ordering your optical devices.
- Medical Aid (where applicable) to facilitate claiming on the patients’ behalf or when invoices and receipts are made up to allow manual claim by the patient
We will ensure that anyone to whom we pass your personal information agrees to treat your information with the same level of protection as we are obliged to.
When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal information that we remain responsible for, is kept secure.
All reasonable steps are taken by Vision Optometrists to de-identify you from your data as well as supplying only the minimum data required to service our client/patient to the best of our capabilities.
When will we process your personal information:
In terms of the Protection of Personal Information Act (POPIA), the justification ground which we base our processing on consist out of the following:
- The data subject or a competent person where the data subject is a child consents to the processing. Kindly note that you have the right to withdraw your consent;
- The processing is necessary to carry out actions for the conclusion or performance of a contract to which the data subject is a party;
- The processing complies with an obligation imposed by law on the business;
- The processing protects a legitimate interest of the data subject;
- The processing is necessary for the proper performance of a public law duty by the business;
- The processing is necessary for pursuing the legitimate interests of the business or of a third party to whom the information is supplied.
How we store your personal information:
Your information is securely stored on a server on site, protected by real-time, up-to-date firewalls and anti-virus software. Where necessary, off-site, cloud-based severs are used for long term storage and back-up; these services comply with the South African POPI Act.
Since we are eco-conscious at Vision Optometrists we try and keep minimal hard-copies of documents on site and if this is done, documentation is kept secured in locked cabinets. All redundant and unused physical documentation gets shredded on a weekly basis.
We keep your information for a minimum 6 years or until the age of consent (21), as stipulated by the HPSCA and the POPI ACT.
When necessary, the information will be disposed of correctly in line with the company’s Data Destruction Policy as well as applicable legislation, ensuring the proper destruction and removal of data in such a way that it will no longer be accessible or retrievable.
Like most website operators, VISION Optometrists collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. VISION Optometrist’s purpose in collecting non-personally identifying information is to better understand how VISION Optometrist’s visitors use its website. From time to time, VISION Optometrists may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
VISION Optometrists also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on http://www.thevisioncompany.co.za blog posts. VISION Optometrists only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below.
Gathering of Personally-Identifying Information
Certain visitors to VISION Optometrist’s websites choose to interact with VISION Optometrists in ways that require VISION Optometrists to gather personally-identifying information. The amount and type of information that VISION Optometrists gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at http://www.thevisioncompany.co.za to provide a username and email address.
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Links To External Sites
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites, products or services.
www.thevisioncompany.co.za uses Google AdWords for remarketing
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
VISION Optometrists may collect statistics about the behaviour of visitors to its website. VISION Optometrists may display this information publicly or provide it to others. However, VISION Optometrists does not disclose your personally-identifying information.
To enrich and perfect your online experience, VISION Optometrists uses “Cookies”, similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.
Your data protection rights:
You are entitled to access your personal data by sending a written request to Davor Jadrijevic at firstname.lastname@example.org or Junilla Gabel-Smit at email@example.com. We may charge you a fee for this service as set out in terms of Condition 8 of POPIA.
You may also request Vision Optometrists to correct or supplement any of your personal data which Vision Optometrists will undertake as soon as practical.
You may request the destruction of your personal data. Davor Jadrjevic, our Information Officer, and Junilla Gabel-Smit, our Deputy Information Officer will consider your request in light of any other laws or regulations prohibiting Visiom Optometrists from destroying your personal data.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us Davor Jadrijevic at firstname.lastname@example.org if you wish to make a request.
How to complain:
If you have any concerns about our use of your personal information, you can make a complaint to us by contacting us at email@example.com
You can also complain to the Information Regulator if you are unhappy with how we have used your Information.
Their contact details are as follows:
The Information Regulator (South Africa)
33 Hoofd Street
Forum III, 3rd Floor Braampark
P.O Box 31533
Braamfontein, Johannesburg, 2017
Complaints email: complaints.IR@justice.gov.za