How we handle your information

This notice is given at the point of collection, as required by section 18 of POPIA.

Who is responsible

AVB Financial Solutions is the responsible party for the information collected on this site.

What we collect, and why

Name and surname	To identify you at the appointment.
Cell number	To reach you about this appointment.
Email address	To confirm the booking and send your reference.
South African ID number	To match you to the correct clinical record, and because a health record has to be tied to a verified identity. It is required for every booking. We keep the number itself, encrypted, and we also keep a one-way fingerprint of it so the same identity cannot be registered twice.
Date of birth and sex	Derived from your ID number, because both matter clinically.

Who else sees it

Only the clinic's own staff. We do not sell your information and we do not share it with anyone for their own purposes.

Your rights

Under sections 23, 24 and 25 you may ask what we hold about you, correct it, or ask us to delete it. If you have an account, view everything we hold. If you booked as a guest, use Find my booking and the same options appear there.

You may also ask who has looked at your ID number. Every time it is read back by a member of staff, that is recorded.

How long we keep it

Booking records are retained for 5 years, after which they are automatically anonymised. Your ID number is erased at that point, or sooner if you ask us to delete your information. Verification codes are deleted once used or expired.

Security

Access is over HTTPS. ID numbers are encrypted with a key held outside the database, so a copy of the database alone cannot reveal them. The fingerprint used for matching is produced by a keyed one-way function and cannot be turned back into a number.

Complaints

You may complain to the Information Regulator (South Africa) at inforeg@justice.gov.za.