Privacy Policy

Last updated: September 2026. EHSA protects personal and health information under POPIA and applicable law.

What We Collect

  • Contact details you provide (name, email, phone) when enquiring or registering.
  • Health information required for care delivery, stored in local-first systems with sovereign sync.
  • Usage data (pages visited, device info) to operate and secure the platforms.

POPIA Compliance

We process personal information lawfully, minimally, and for explicit purposes. Health data is encrypted in transit and at rest, access is role-based, and data residency remains under African control. You may request access, correction, or deletion of your personal information via the contact page.

How We Use Information

  • Delivering healthcare and portal services you request.
  • Operating, securing, and improving our platforms.
  • Meeting legal and regulatory obligations.

We do not sell personal information.

Cookies

We use strictly necessary cookies for authentication and security (e.g. portal sessions). Analytics, where enabled, is aggregated and never tied to patient health records. You can block cookies in your browser; the Secure Portal requires session cookies to function.

Contact

Privacy queries: contact EHSA. Also see our Terms of Service.