Scope and website operator

This privacy policy applies to the Renal Clinic website and to personal information submitted through the contact and enquiry functions on this site. The website operator is Astros Marketing (Pty) Ltd, 2 Makro Place, Sunnyrock 1401.

Renal Clinic is a nephrology practice and in-centre dialysis clinic in Pretoria East. This policy covers information relating to website use, appointment enquiries and related administration. It should be read together with any consent forms, practice notices and healthcare record requirements that may apply when a patient attends the practice.

Information we collect

We collect personal information that is reasonably necessary for communication, appointment handling, site operation and lawful record keeping. The information collected will depend on what a user chooses to submit and how the website is used.

Contact details such as name and surname.
Information provided in an enquiry or booking request.
Referral related details submitted by a referring doctor or by the patient.
Technical information such as browser type, device information, IP address and basic site usage data.
Any documents or messages voluntarily sent through the website contact process.

Please do not submit unnecessary medical detail through the website. Where clinical information is needed, the specialist decides what is relevant after seeing the patient or reviewing the referral.

How personal information is used

Personal information is used for legitimate practice and website purposes, and only to the extent reasonably required. This includes responding to enquiries, arranging consultations, managing referrals, maintaining website security and meeting legal or professional duties.

To respond to direct booking requests or general contact messages.
To process referrals and route enquiries to the appropriate practice channel.
To keep internal administrative records related to communications.
To protect the website against misuse, unauthorised access or technical faults.
To comply with legal obligations, including duties under POPIA where applicable.

Submitting an enquiry does not create a doctor-patient relationship on its own and does not confirm treatment. Clinical care decisions are made by the specialist after consultation and review of the patient’s circumstances. If urgent care is needed, attend the nearest emergency unit.

Sharing of information

Personal information is not sold. Information may be shared only where this is necessary for the operation of the website, the administration of enquiries, the delivery of healthcare services, or where disclosure is required or permitted by law.

This may include website service providers, secure hosting or technical support providers, and practice administration processes involved in handling a booking or referral. Information may also be shared with healthcare professionals involved in a patient’s care where appropriate and lawful, or where the patient has requested or authorised such communication.

Where third parties process personal information on behalf of the website operator or practice, reasonable steps are taken to require confidentiality and appropriate security safeguards.

Storage, security and retention

Reasonable technical and organisational measures are used to protect personal information against loss, unauthorised access, misuse, alteration or unlawful disclosure. No online system can be guaranteed completely secure, but appropriate safeguards are applied in line with the nature of the information processed.

Access controls for authorised personnel only.
Routine monitoring and technical maintenance of website systems.
Secure handling processes for contact form submissions and records.
Retention of information only for as long as reasonably necessary, or as required by law and healthcare record obligations.

Website traffic and system data may be logged for security, fraud prevention and troubleshooting. Records linked to patient care may need to be kept for longer periods in line with applicable legal and professional requirements.

Your rights and contact process

Subject to POPIA and any other applicable legal limits, a person may request access to personal information, ask for correction of inaccurate information, object to certain processing, or request deletion where there is no lawful basis to keep the information. Some requests may be limited where healthcare record duties or other legal obligations apply.

If you would like to make a privacy related request or enquiry, please use the enquiry form on the contact page. We may need to verify identity before acting on a request. If a concern cannot be resolved directly, a complaint may be referred to the relevant regulatory authority in South Africa where permitted by law.

This policy may be updated from time to time to reflect operational, legal or regulatory changes. The latest version published on this website will apply from the date it is posted.