Privacy &
data protection.

1. Introduction

MedTech Special Device (Pty) Ltd ("MedTech Special Device", "we", "our", or "us") is committed to protecting your privacy and ensuring the responsible processing of your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), and all applicable South African data protection legislation.

This Privacy Policy applies to all personal information collected via our website (www.medtechspecialdevice.com), our Client Portal, quote request forms, event registrations, and any other interaction with MedTech Special Device. By using our services, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect personal information only to the extent necessary for legitimate business purposes. The categories of information we may collect include:

• Identity Data: Full name, job title, professional registration number.
• Contact Data: Email address, telephone number, physical and postal address.
• Organisational Data: Employer / institution name, organisation type, province and country.
• Transaction Data: Details of products and services you have enquired about or procured.
• Technical Data: IP address, browser type, device identifiers, cookies and usage data from our website.
• Communication Data: Records of correspondence with MedTech Special Device, including emails, support tickets, and enquiry forms.
• Marketing Preferences: Your preferences for receiving marketing and communications from MedTech Special Device.

3. How We Use Your Information

We process your personal information for the following purposes:

• To respond to enquiries, quote requests, and service requests.
• To manage client relationships and deliver contracted services.
• To process and manage service tickets via the Client Portal.
• To send relevant product information, event invitations, and healthcare insights with your consent, or where we have a legitimate interest.
• To comply with legal and regulatory obligations, including South African healthcare procurement legislation.
• To improve our website, products, and services through analytics.
• To prevent fraud and ensure the security of our systems.

4. Legal Basis for Processing

We process your personal information on one or more of the following lawful grounds:

• Consent: Where you have provided explicit consent, such as for a newsletter subscription.
• Contract: Where processing is necessary to perform a contract with you or your organisation.
• Legal obligation: Where we are required by law to process your information.
• Legitimate interest: Where we have a legitimate business interest that does not override your rights.

5. Sharing of Personal Information

MedTech Special Device does not sell, rent, or trade your personal information. We may share your information with:

• Service Providers: Trusted third-party IT, logistics, and support service providers who process data on our behalf and are bound by data processing agreements.
• Manufacturer Partners: Where necessary to fulfil your equipment order, warranty claim, or technical support request.
• Regulatory Authorities: As required by law, court order, or government regulation.
• Professional Advisers: Including lawyers, auditors, and insurers where necessary.

We require all third parties to implement appropriate security measures and to use your data only for the specified purpose.

6. International Data Transfers

Where personal information is transferred outside South Africa, for example to international manufacturer partners, MedTech Special Device ensures that adequate safeguards are in place, including contractual protections equivalent to those required under POPIA, as required by Section 72 of POPIA.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In general:

• Client and transaction records: 7 years, in line with South African tax and commercial record-keeping requirements.
• Service and maintenance records: Duration of the contract plus 5 years.
• Marketing and consent records: Until you withdraw consent or 3 years of inactivity.
• Website analytics data: 26 months.

8. Your Rights Under POPIA

As a data subject, you have the following rights:

• Right to Access: Request confirmation of whether MedTech Special Device holds your personal information and obtain a copy.
• Right to Correction: Request correction of inaccurate or outdated personal information.
• Right to Deletion: Request erasure of your personal information where no lawful ground for retention exists.
• Right to Object: Object to processing based on legitimate interest, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Complain: Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise any of these rights, contact our Information Officer at privacy@medtechspecialdevice.com.

9. Security of Your Information

MedTech Special Device implements appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption, access controls, regular security audits, and staff data protection training.

In the event of a data breach that poses a risk to your rights, MedTech Special Device will notify the Information Regulator and affected data subjects as required by POPIA within 72 hours of becoming aware of the breach.

10. Information Officer

MedTech Special Device's designated Information Officer, as required by POPIA, is responsible for overseeing data protection compliance.

Information Officer: Name on request
Email: privacy@medtechspecialdevice.com

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our services following any update constitutes acceptance of the revised policy.