SOAR Health Centre respects your privacy. This notice explains what personal information we collect, why we collect it, and how we keep it safe. It is drafted to meet the requirements of the Protection of Personal Information Act (POPIA), but it is not a substitute for professional legal advice.
Who we are
SOAR Health Centre is a multidisciplinary perioperative and recovery practice. Our Information Officer is responsible for overseeing data protection.
Identity and contact details (name, date of birth, phone, email).
Identification numbers where clinically or administratively necessary (ID / passport number).
Health information (medical history, medications, allergies, vitals, procedure plans, clinical notes, cognitive or physiological screening results).
Medical aid and billing details where relevant.
Appointment and referral details.
Why we process your information
To provide medical assessment, prehabilitation, care coordination and treatment.
To manage appointments, referrals and follow-up.
To communicate with you about your care.
To meet legal, regulatory and professional record-keeping obligations.
To improve our services and clinical safety.
Lawful basis
We process health information because it is necessary for medical treatment and the provision of healthcare by or under the responsibility of professionals bound by confidentiality. We process other personal information on the basis of your consent, performance of a care agreement, or legal obligation.
Who we share it with
SOAR practitioners and staff who are directly involved in your care.
Your referring doctor, surgeon, or treating practitioner where clinically necessary.
Our third-party service providers who process data on our behalf (for example secure cloud hosting, clinical AI transcription, and SMS communication). We require these providers to keep your information confidential.
Where required by law, professional bodies, or a court order.
Where your data is stored
Most clinical records are stored on secure cloud infrastructure. Some information may be processed outside South Africa; we take reasonable steps to ensure adequate safeguards are in place.
How we protect your information
Access to clinical records is restricted to authorised staff.
We use encryption, password protection and access controls.
We retain data only for as long as clinically or legally necessary.
We maintain procedures for responding to suspected data breaches.
Your rights
You have the right to:
Access the personal information we hold about you.
Correct or update inaccurate or incomplete information.
Request deletion of your information, subject to legal retention obligations.
Withdraw consent where processing is based on consent.
Object to processing in certain circumstances.
Lodge a complaint with the Information Regulator (South Africa).
How to make a request
Email info@soarhealth.co.za with the subject “POPIA request” and tell us what you need. We may ask you to verify your identity.
Changes to this notice
We may update this notice from time to time. The version posted on our website is the current version.