medapi
Sign In
Back to Home

Privacy Policy

Version 1.0.0 · Effective 14 December 2024

MedAPI Privacy Policy

About

This Privacy Policy applies to all of the services offered by Assista HealthTech and its affiliates and partners ("the Platform", "we", "our" or "us"), and research partners ("Studies"). This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our websites, apps, APIs, prompts, support centers, chat and services (collectively, "Services"). This Privacy Policy doesn't apply to services that have separate privacy policies that do not incorporate this Privacy Policy.

This Privacy Policy doesn't apply to:

  • The information practices of other companies and organizations that provide the services managed through our platform
  • Services offered by other companies or individuals, including products or sites they offer

1. Personal Information

We collect information that alone or in combination with other information in our possession could be used to identify you ("Personal Information"). This information enables MedAPI to provide the services and interact with partner service providers.

1.1 Personal Information You Provide

  • Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history (collectively, "Account Information").

  • User Content: When you use our Services, we may collect Personal Information that is included in the input, file uploads, or feedback that you provide to our Services ("Content").

  • Communication Information: If you communicate with us, we may collect your name, contact information, and the contents of any messages you send ("Communication Information").

  • Social Media Information: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, YouTube and LinkedIn. When you interact with our social media pages, we will collect Personal Information that you elect to provide to us, such as your contact details (collectively, "Social Information"). In addition, the companies that host our social media pages may provide us with aggregate information and analytics about our social media activity.

  • Cookies: We use cookies to operate and administer our Services, and improve your experience on it. A "cookie" is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website.

  • Health Information: We collect health information that you provide access to from third parties, receipts, emails, prescriptions, service provider notes and any other sources that you approve.

2. Provision of Services

We may use Personal Information for the following purposes:

  • To provide, administer, maintain and/or analyze the Services;
  • To improve our Services and conduct research;
  • To communicate with you;
  • To develop new programs and services;
  • To prevent fraud, criminal activity, or misuses of our Services, and to ensure the security of our IT systems, architecture, and networks; and
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

3. Studies

By accepting this policy you consent to the use of Aggregated or De-Identified Information for research and analytics purposes. We may aggregate or de-identify Personal Information and use the aggregated information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes.

In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy.

4. Disclosure and Sharing

We may disclose or share your personal information with the following parties:

4.1 Authorized Recipients

  • Administrators: Our system administrators and service providers have access to your information to ensure the system availability and information management.

  • Customer Service: Our customer service partners have access to your information to assist you with any queries or service issues.

  • Partners and Service Providers: MedAPI is a technology platform and does not directly provide any healthcare services. Partners and customers that make use of the platform have access to your personal data to perform their roles.

  • Health Aides: For certain Platform packages, you may choose to have personal health aides or concierge have access to your data to enable them to provide you services selected.

  • Guarantor and Medical Contact: Your selected guarantors, medical contacts or other persons you share with will have access to your personal information.

  • Health Funders: We may share your personal information with your health funders, insurance companies and funds to assist you with claims and health funding.

  • Third Party Data and Payment Processors: We may from time to time have third party data processors and payment processors. They will have access to your personal information for the purposes of processing payment or other data processing.

4.2 Disclosure Without Notice

In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us.

  • Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively a "Transaction"), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.

  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.

  • Affiliates: We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with us. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.

5. Minors

This service is provided to persons 16 years or older. Minors below 16 must be enrolled under a parent account. You have the responsibility to maintain and manage the information for minors. The information is only gathered for the purpose of accurately recording and using the Services.

6. Security

We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

We take reasonable steps to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data that we hold. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email.

In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

7. Retention

We'll retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.

How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.

8. Data Transfer

Your data may be maintained in commercial data centers around the world on our "cloud services architecture". We will only transfer Personal Information pursuant to a legally valid transfer mechanism.

9. Changes to This Policy

We change this Privacy Policy from time to time. We always indicate the date the last changes were published and will maintain archive versions for your review.

If changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.

10. Contact Us

You can contact us:

Data Controller: info@medapi.co.za

Version 1.0.0 — Effective December 14, 2024