1.1 Introduction and scope
1.1.1 The Website is managed by clinical research unit known as the Knowledge Translation Unit under the management and control of the Health Foundation of South Africa (NPC), registration number 2011/128044/08, a non-profit company registered in accordance with the company laws of the Republic of South Africa (respectfully the “KTU” and the “HFSA” or collectively “we” or “us” or “our“).
1.1.2 We are committed to protecting and respecting your privacy. We strive to ensure that our use of your Personal Information is lawful, reasonable, and relevant to our business activities, with the ultimate goal of improving our services and your experience.
1.2 Your consent to the Processing of your Personal Information
2. What is Personal Information?
2.1 “Personal Information” refers to personal information about an identifiable person. Your Personal Information may include your name and surname, age, date of birth, ID number, contact details (eg your home address, postal address, email address or phone number), employee number, employment history, training history, physical location, gender, language, social media account details and profile pictures. Other information which might be Personal Information may include:
2.1.1 “device and device event information“: We may collect information such as your IP address, unique device identifier, the nature of the Access Device which you used to access the Website, the geographic location from which you accessed our site, hardware model and settings, operating system type and version, browser language, system activity, and crashes;
2.1.2 “log information“: When you use the Website, we may automatically collect and store certain information in server logs when you access the Website, which may include your site activity information, such as details of how, when and for how long you accessed the Website, what links you went to, what information available on the Website (“Content“) you accessed, the amount of Content viewed and the order of that Content and the amount of time spent on the specific Content.
2.1.3 “profile information“: We may collect and Process information and usage data per profile to make targeted recommendations to that profile when logged in to and using the Website; and
2.1.4 “location information“: We may use various technologies to determine your actual location, such as geographical data from your access device (which is usually based on the GPS or IP location).
2.2 Personal Information does not include information that has been de-identified to the extent that it cannot be re-identified again.
3. When will we Process your Personal Information?
3.1 In addition to paragraph 4 below, Personal Information may be Processed by us in several ways, including, when:
3.1.1 you access, use, refer to, view and/or make use of the Website, Content or Services;
3.1.2 you submit your Personal Information to us for any other reason; and
3.1.3 you contact us, by email or telephonically or otherwise, with any queries.
4. How we collect your Personal Information
4.1 We may collect your Personal Information in three ways, namely:
4.1.1 actively from you;
4.1.2 passively from your Access Device when you use the Website; and
4.1.3 passively from our affiliates and third party service providers.
4.2 Active collection from you
4.2.1 We may collect Personal Information from you by asking you specific questions and by permitting you to communicate directly with us, for example via email, feedback forms, site comments and forums.
4.2.2 If you contact us, we may keep a record of that correspondence.
4.2.3 The information we may actively collect from you may include your:
22.214.171.124 identifying information (eg your name, surname, unique identifier, date of birth, profile picture and physical location);
126.96.36.199 contact details (eg email address and phone number); and
188.8.131.52 any other information which we may request from you, and which you provide, from time to time.
4.3 Passive collection from your Access Device
4.3.1 We passively collect some of your Personal Information from the Access Device which you use to access and navigate through the Website, using various technological means, for instance, using server logs to collect and maintain log information.
4.3.3 A cookie is a small piece of data (an alphanumeric identifier) which our computer system transfers to your Access Device through your web browser when you visit the Website and which is stored in your web browser. When you visit the Website again, the cookie allows the site to recognise your browser. Cookies may store user preferences and other information.
4.3.5 The information which we may passively collect from your Access Device may include your identifying information, contact details, device and device event information, site activity information, log information, telephony log information, location information, unique application numbers and any other information which you permit us, from time to time, to passively collect from your Access Device.
4.4 Passive collection from our affiliates and third party service providers
4.4.1 We collect some Personal Information passively from our affiliates, business partners, Companies and third party service providers, purely to supplement information which you have already agreed to give us.
5. How we use your Personal Information
5.1 We use the information we collect to provide, maintain, and improve the Website, to provide current, and develop new, Services, and to protect us, our services and our users. We constantly strive to improve our users’ experience, and so we also use the information we collect in order to offer you information and Content which is more appropriately tailored for you as far as reasonably possible.
5.2 We may use your Personal Information:
5.2.1 to retain and make available to you information on the Website;
5.2.2 to maintain and update our databases;
5.2.3 to fulfil your requests for certain Services;
5.2.4 to diagnose and deal with technical issues and user support queries and other user queries, such as problems with our server, determine the optimal and fastest route for your Access Device to use in connecting with the Website, and administer, maintain and secure the Website;
5.2.6 to conduct market research surveys, product research and development;
5.2.7 to provide you with the latest information about our Services, provided you have agreed to receive such information;
5.2.8 to communicate with you;
5.2.9 to compile non-personal statistical information about browsing habits, click patterns and access to the Website;
5.2.10 to improve the Website, analyse trends and administer the Website, including requesting feedback on Content and Services and products, address any issues and liaise with users in that regard;
5.2.11 to keep a record of our communications with you and your communications with us;
5.2.12 to fulfil any contractual obligations we may have to you or any third party;
5.2.13 to improve your user experience and the overall quality of our services;
5.2.14 to customise the Website to your preferences and tailor information and/or Content for you to ensure that it is presented in the most effective manner for you and for your Access Device;
5.2.16 to compile and use statistical information about you and other users and their access to and use of the Website, browsing habits, click-patterns, preferences, and demographics which we may use to develop, provide and improve the Website, including, recommendations to users and tailoring information and Content for users;
5.2.17 to compile, use, disclose and trade with non-personal statistical information about our users and their access to and use of the Website, browsing habits, click-patterns, preferences, demographics which we may use to develop, provide and improve the Website and our products and services, including targeted advertising to user groups. Please note that the information referred to in this paragraph 5.2.17 is aggregate information about our users which has de-identified personal information such that it cannot be linked back to identify you;
5.2.18 for security, administrative and legal purposes;
5.2.19 for customer/patient relations; and
5.2.20 other activities and/or purposes which are lawful, reasonable and adequate, relevant and not excessive in relation to provision of the Content, Services and/or Website, our business activities or such other purpose for which it was collected.
5.3 We will get your permission before collecting or using your Personal Information for any other purpose.
6. Compulsory information and consequences of not sharing with us
In the paragraph above, you agree and accept that there is certain compulsory information you must provide us with if you want to enjoy all of the features and functionality on the Website and if you want to access our Services. If you decide not to provide us with such compulsory information, you agree that we may limit certain features and functionality on the Website and limit your access to some of the Services.
7. Sharing of your Personal Information
7.2 You agree and consent that your Personal Information may be shared under the following circumstances:
7.2.1 to our employees, service providers, contractors, dealers and agents if and to the extent that they need to know that information in order to Process it for us and/or to provide services for or to us, such as hosting, development and administration, technical support and other support services. We will authorise any information processing done by a third party on our behalf by entering into written agreements with those third parties governing our relationship with them and containing confidentiality and non-disclosure provisions. Such persons may be disciplined, their contracts terminated or other appropriate action taken if they fail to meet their obligations;
7.2.3 in order to provide services to our customers;
7.2.4 in order to protect our rights, property or safety or that of our customers, employees, contractors, dealers and agents and any other third party;
7.2.5 in order to mitigate any actual or reasonably perceived risk to us, our customers, employees, service providers, contractors, agents or any other third party;
7.2.6 to governmental agencies, exchanges and other regulatory or self-regulatory bodies if we are required to do so by law or if we reasonably believe that such action is necessary:
184.108.40.206 to comply with the law or with any legal process;
220.127.116.11 to protect and defend the rights, property or safety of us, our affiliates or our customers, employees, contractors and agents or any third party;
18.104.22.168 to protect the rights, property or safety of members of the public (if you provide false or deceptive information about yourself or misrepresent yourself as being someone else, we may proactively disclose such information to the appropriate regulatory bodies and/or commercial entities).
7.3 We may use your Personal Information to compile profiles for statistical purposes and may freely trade with such profiles and statistical data, provided that the profiles or statistical data cannot be linked back to you.
7.4 We will get your permission before disclosing your Personal Information to any third party for any other purpose.
8. Storage and transfer of your Personal Information
8.1 We store your Personal Information:
8.1.1 on our servers; and
8.1.2 on the servers of our third party service providers, such as IT systems or hosting service providers, namely, Thinkific and Train Track. In this event, we will ensure that we have entered into written contracts that require such third party service providers to secure the integrity and confidentiality of Personal Information in its possession by taking appropriate, reasonable technical and organisational measures.
8.2 From time to time, the KTU and the HFSA and their service providers may need to transfer to and/or store your Personal Information on servers in a jurisdiction other than where it was collected, and we hereby notify you, and you acknowledge, that such jurisdiction may not have comparable data protection legislation.
8.3 If the jurisdiction to which Personal Information is transferred does not have laws which provide for the protection of Personal Information in a manner which is at least similar to the protections afforded under South African law, we will take reasonably practicable steps to ensure that your Personal Information is adequately protected in that jurisdiction.
9.1 We take appropriate reasonable technical and organisational measures to secure the integrity of Personal Information, using accepted technological standards to prevent unauthorised access to or disclosure of your Personal Information, and protect your Personal Information from misuse, loss, alteration or destruction.
9.2 See paragraph 7.2.1 regarding measures to protect the information which is provided to others on a need-to-know basis.
9.3 We also create a back-up of your information for operational and safety purposes.
9.4 Even by taking the above measures when Processing Personal Information, we do not guarantee that your Personal Information is 100% secure. Subject to the provisions of this clause 9.4, as far as the law allows, we will not be liable for any loss, claim and/or damage arising from any unauthorised access, disclosure, misuse, loss, alteration or destruction of Personal Information.
In the above paragraph, you acknowledge that you know and you accept that technology is not absolutely secure and there is a risk that your Personal Information will not be secure when Processed by means of technology. We do not promise that we can keep your Personal Information completely secure. You will not be able to take action against us if you suffer losses or damages in these circumstances.
10. Retention of your Personal Information
10.1 We may keep Personal Information for as long as you continue to access the Website, Content and/or Services or for as long as reasonably necessary or until you contact us and ask us to destroy the retained information.
10.2.1 we are required by law, a code of conduct or a contract with you to keep it;
10.2.2 we reasonably need it for lawful purposes related to our functions and activities;
10.2.3 we reasonably need it for evidentiary purposes;
10.2.4 you agree to us keeping it for a specified further period; and/or
10.2.5 it is permitted by law.
11. Keeping your Personal Information updated and correct
11.1 Where required by law, we take reasonable steps to ensure that your Personal Information is accurate, complete, not misleading, and up to date.
11.2 We also acknowledge that you may have rights of access to, and the right to rectify, your Personal Information, and rights to object to the Processing of your Personal Information in certain circumstances.
11.3 You must let us know if any information we have about you is incorrect, incomplete, misleading or out of date, by notifying us at the contact details set out in paragraph 17. If you have already registered for a Service or to use the Website in some other way, you can at a later stage modify some of the Personal Information you have included in your profile by logging in and accessing the account created by you on the Website.
11.4 Where required by law, we will take reasonable steps to correct or update the relevant information accordingly having regard to the purpose for which the information was collected or used.
13. Third party sites
13.1 To the extent allowed by law, we are not responsible for the privacy practices of a third party site to which there may be a link on the Website, or for any claims, loss or damage arising from these.
We are not liable if you suffer losses or damages when visiting third party websites by following a link to that website from the Website. You accept that there may be risks when you use such third party websites, and you do so at your own risk.
14. How to protect your Personal Information
14.1 People have different privacy concerns. Our goal is to be clear about what information we collect so that you can make meaningful choices about what you make available. For example, you may:
14.1.1 set your browser to block all cookies, including cookies associated with our services, or to indicate when a cookie is being sent by us (see paragraphs 4.3.2 to 4.3.5 above);
14.1.2 request us to indicate what Personal Information of yours we have on our systems;
14.1.3 request us to correct or update your personal information (see paragraph 11) or to destroy or delete your personal information (subject to paragraph 10);
14.1.4 object to any unlawful processing of your Personal Information;
14.1.5 request that your Personal Information is deleted if it is no longer required for the purposes for which it was collected or required by us in terms of any applicable law, subject to paragraph 10; or
14.1.6 refuse the processing of your Personal Information for direct marketing purposes.
14.2 As far as the law allows, we may charge a fee for attending to any of your requests above and may also refuse to carry out any of your requests in whole or in part.
15. Consumer Protection Act, Protection of Personal Information Act and other laws
15.2.1 does or purports to limit or exempt us from any liability (including, without limitation, for any loss directly or indirectly attributable to our gross negligence or wilful default or that of any other person acting for or controlled by us) to the extent that the law does not allow such a limitation or exemption;
15.2.2 requires you to assume risk or liability for the kind of liability or loss, to the extent that the law does not allow such an assumption of risk or liability; or