Privacy Policy
Last Updated: April 2026
1. Introduction
Welcome to MyFacility. We respect your privacy and are committed to protecting your personal information. This Privacy Policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and outlines how we collect, use, and protect data when you use our SaaS Practice Management System.
2. Our Role in Data Processing
Under POPIA, MyFacility acts as an Operator when processing patient health information on behalf of the Medical Practice. The Medical Practice acts as the Responsible Party. We do not own, control, or directly use patient data for our own purposes.
3. Information We Collect
- Account Information: Name, practice details, email, phone number, and billing information when you subscribe to our services.
- Patient Data: Information entered into the EHR by practitioners, including demographics, clinical notes, lab results, and medical aid details.
- Usage Data: System logs, IP addresses, and cookie data to ensure platform security and optimize user experience.
4. How We Use the Information
We use the collected data strictly to:
- Provide, operate, and maintain the MyFacility platform.
- Process medical aid claims and generate laboratory request forms as instructed by the practitioner.
- Provide technical support and respond to inquiries.
- Ensure compliance with legal and regulatory obligations.
5. Data Security
We implement rigorous technical and organizational measures to protect your data against unauthorized access, loss, or destruction. This includes 256-bit AES encryption in transit and at rest, secure local South African server hosting, and strict role-based access controls.
6. Your Rights
As a user, you have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, please contact our Information Officer.
7. Contact Us
If you have questions about this Privacy Policy or our POPIA compliance, please contact us at:
Email: help@myfacility.co.za
Phone: +27703390291