Privacy Policy

This policy sets out what the practice of Dr Sanjay Lalloo does with your personal information when you visit this website or send an appointment request. We handle your information under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

---

Dr Sanjay Lalloo, Specialist Ophthalmic Surgeon, is the responsible party for your personal information under POPIA.

2. What we collect

---

Information you give us

When you complete the appointment request form, we receive:

• Your first name and surname
• Your telephone number
• Your email address, where you choose to give one
• The reason for your visit, where you select one
• Any notes you add to the form

You choose what to write. The form asks for your name and phone number so that the practice can call you back. Everything else remains optional.

Information we receive automatically

Our hosting provider records standard server logs when a browser loads a page. These logs include an IP address, the browser and device type, the pages requested and the time of the request. We use them to keep the site running and secure.

Cookies and tracking

This website sets no cookies. We run no analytics, no advertising trackers and no social media pixels. Nobody builds a profile of you from your visit here.

3. Health information

---

The reason for your visit tells us something about your health. POPIA classifies health information as special personal information under section 26 and sets stricter conditions for it. Section 32 allows a health care professional to process such information where this serves your treatment.

We treat anything you tell us about your eyes or your health as confidential medical information, subject to the ethical rules of the Health Professions Council of South Africa.

4. Why we use it

---

We use the information you send in order to:

• Telephone or email you to arrange and confirm an appointment
• Answer the question you asked
• Prepare for your consultation
• Keep the records that the law requires a medical practice to keep

We rely on your consent when you submit the form, and on section 32 of POPIA where the information concerns your health and your treatment.

We do not sell your information. We do not rent or trade it. We send no marketing unless you ask us to.

5. Who else sees it

---

The staff who arrange appointments for Dr Lalloo read your request. Beyond the practice, these providers handle information on our behalf or receive it because of how the web works:

Some of these providers store information outside South Africa. Section 72 of POPIA permits such a transfer where the recipient operates under laws or binding agreements that protect your information in a comparable way. We rely on the contractual terms these providers publish.

We disclose your information to anyone else only where you ask us to, where another treating practitioner needs it for your care, or where a court or a law obliges us.

6. How long we keep it

---

We keep an appointment request while we deal with it and for a reasonable period afterwards so that the practice has a record of the enquiry.

Where you become a patient, your clinical records fall under the National Health Act 61 of 2003 and the guidance of the Health Professions Council of South Africa. Those rules require a practice to keep a patient record for at least six years from the date of the last entry, and longer for a patient who was a minor at the time.

We delete what we no longer need.

7. How we protect it

---

• Every page loads over an encrypted HTTPS connection, and browsers refuse an unencrypted one
• A content security policy limits what the page may load and where it may send anything
• Only the people who run the practice reach the dashboard holding form submissions, and that account uses two-factor authentication
• Paper and clinical records stay under the practice's own confidentiality controls

No website can promise perfect security. If a breach ever puts your information at risk, POPIA obliges us to notify you and the Information Regulator, and we will.

8. Your rights

---

POPIA gives you the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete information we no longer have reason to keep
• Object to how we use your information
• Withdraw your consent, which stops future use but does not undo what we did before
• Complain to the Information Regulator

Write to admin@pmbeyedoctor.co.za or telephone 033 812 2350 to exercise any of these. We may ask you to confirm who you are before we release information about you. Clinical records carry their own access rules under the National Health Act, and we will explain these where they apply.

9. Children

---

A parent or guardian should complete the appointment form on behalf of anyone under 18. We treat a child's information with the extra care that section 34 of POPIA requires.

10. Changes to this policy

---

We update this page when the practice changes how it handles your information. The date at the top shows when we last revised it. Read it again before you send a new request.

11. Contact us

---

Ask us anything about this policy by email at admin@pmbeyedoctor.co.za, by telephone on 033 812 2350, or in person at the rooms.

See also our Terms and Conditions.