Evia Health

Introduction

Evia Health (Pty) Ltd ("Evia Health", "we", "our", "us") is committed to protecting the privacy and personal information of our patients, customers, and users in accordance with the Protection of Personal Information Act, 2013 (POPIA), the Consumer Protection Act, 2008, the Pharmacy Act, 1974 (Act No. 53 of 1974), and all applicable South African legislation governing privacy, healthcare, and pharmacy services. This Privacy Policy sets out how we collect, use, disclose, and safeguard personal information. By engaging with Evia Health, including through our website, apps, WhatsApp platform, or in-person services, you consent to the practices described in this policy.

Purpose of Processing Personal Information

We collect and process personal information to:

Dispense, deliver, and manage chronic and acute medication;
Fulfil prescriptions and coordinate with healthcare professionals;
Register and manage user accounts;
Facilitate billing, payment processing, and claim submissions;
Provide reminders, updates, and relevant service notifications;
Comply with applicable laws and health regulations, including the Pharmacy Act and Good Pharmacy Practice (GPP) standards;
Conduct analytics to improve service delivery.

Lawful Basis for Processing

We process your personal information on one or more of the following lawful bases:

With your consent;
To perform a contract with you (e.g., medicine supply);
To comply with legal obligations (e.g., under Section 22A of the Medicines and Related Substances Act, 1965);
To protect vital interests (e.g., emergency medical info);
For legitimate business and healthcare interests.

Categories of Personal Information Collected

Depending on the service, we may collect:

Identity details (name, ID/passport, contact info);
Health and prescription data;
Medical aid and financial information;
Location and delivery details;
Online interaction data (via cookies or portals).

Disclosure and Sharing of Personal Information

We may share personal information with:

Licensed healthcare providers (e.g., doctors);
Medical schemes or insurers (for claims);
Delivery service providers;
Software and IT providers (e.g., platform integration);
Regulatory bodies, if legally required under the Pharmacy Act, Medicines and Related Substances Act, or POPIA.

We ensure that all third-party service providers are POPIA-compliant and sign data processing agreements.

Children’s Information

Evia Health does not knowingly collect personal information from persons under the age of 18 (eighteen) years, without verified parental or guardian consent, as required under POPIA and Good Pharmacy Practice (GPP) standards.

International Data Transfers

Where data is stored or processed outside South Africa, we ensure compliance with POPIA Section 72 through appropriate safeguards, including standard contractual clauses.

Retention of Personal Information

We retain personal information only as long as necessary to fulfil the purpose for which it was collected or as required by law, including obligations under the Pharmacy Act and related regulations.

Your Rights

You have the right to:

Request access to the personal information we hold about you;
Request correction or deletion of your personal data;
Object to processing under certain circumstances;
Withdraw consent at any time;
Lodge a complaint with the Information Regulator.

To exercise these rights, please contact us at scripts@evia.health.

Cookies and Tracking

We may use cookies or similar technologies on our website or portals to enhance user experience. You can disable cookies via browser settings.

Direct Marketing

If you opt-in to receive marketing, we may send you promotional messages about our services. You may unsubscribe at any time via the provided link or by contacting us directly.

Security Measures

We implement appropriate technical and organisational security measures to protect your personal information from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website or upon request.

Contact Us

Evia Health (Pty) Ltd
33 Fricker Road, Illovo, Johannesburg, South Africa
Email: scripts@evia.health
Phone: 010 634 3842
Information Regulator Website: https://inforegulator.org.za