POPIA Consent

1. Responsible Party. iScript Health (Pty) Ltd, trading as iScript (BHF Practice No. 0558419), is the responsible party as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information Collected. We collect your name, email address, HPCSA registration number, contact number, practice details, and banking information for the purposes of account administration and payment processing.

3. Purpose of Processing. Your personal information is processed for: (a) provider onboarding and verification; (b) payment of consultation fees; (c) communications about platform updates; (d) HPCSA compliance monitoring.

4. Sharing of Information. We do not sell your personal information. We may share it with: (a) HPCSA for verification; (b) payment processors; (c) regulatory authorities if required by law.

5. Retention. We retain your data for the duration of your provider relationship and for 5 years thereafter as required by medical records legislation.

6. Your Rights. You have the right to access, correct, or request deletion of your personal information. Contact privacy@iscript.co.za to exercise these rights.

7. Consent. By ticking the consent box during onboarding, you provide explicit consent to the processing described in this notice.

⚠️ This document is a working draft pending formal legal review scheduled post-launch.