Legal
Privacy Policy
Effective date: 26 July 2026
Dr Gerhard van Niekerk respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect information obtained through www.drgerhardvanniekerk.com, our appointment and enquiry channels, and related communications. This policy has been prepared in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African legislation.
1. Responsible party
For purposes of POPIA, the responsible party is: Dr Gerhard van Niekerk 1 Morkel Street, Somerset West, 7130, South Africa Telephone: 082 775 7442 Email: info@drgerhardvanniekerk.com Website: www.drgerhardvanniekerk.com Questions or requests relating to your personal information may be sent to the email address above.
2. Information we may collect
Depending on how you interact with us, we may collect: • Your name and surname • Telephone number and email address • Information included in an appointment request or enquiry • Preferred appointment dates and treatment interests • Communications exchanged with the practice • Information required to administer an appointment • Medical or health information that you voluntarily provide • Photographs provided for consultation, treatment or progress-assessment purposes • Payment or medical-aid information, where applicable • Technical information such as your IP address, browser type, device information and website activity • Cookie and analytics information Please do not submit detailed medical information through an unsecured website contact form or ordinary email unless specifically requested by the practice. Medical emergencies should not be reported through the website.
3. Special personal information
Health and medical information is classified as special personal information under POPIA. Where medical or health information is collected, it will be processed only when necessary for consultation, diagnosis, treatment, aftercare, patient administration, legal compliance or another lawful medical purpose. Medical information will be handled confidentially and will only be accessible to authorised healthcare professionals, practice personnel or approved service providers who require access to perform their duties.
4. Information concerning children
Where a patient is under the age of 18, we may require the involvement or consent of a parent, legal guardian or other legally competent person, depending on the patient's age, the nature of the treatment and applicable law. We do not knowingly use information concerning children for advertising or unrelated marketing purposes.
5. How we collect information
We may collect information: • Directly from you when you contact us • When you request or book an appointment • During a consultation or treatment • Through telephone, email, WhatsApp or other authorised communication channels • Through forms available on the website • From a parent, guardian or authorised representative • From another healthcare provider with your consent or where permitted by law • Automatically through cookies and similar website technologies • From service providers assisting with website hosting, booking, payment processing or practice administration
6. Why we process your information
We may process your information to: • Respond to enquiries • Arrange, confirm, reschedule or cancel appointments • Provide consultations, medical services and aesthetic treatments • Assess treatment suitability and patient safety • Maintain accurate clinical and administrative records • Provide treatment instructions, follow-up care and appointment reminders • Communicate treatment-related information • Process accounts and payments • Comply with healthcare, tax, professional and legal obligations • Protect patients, staff, the practice and its legal rights • Manage complaints or queries • Improve the website and patient experience • Prevent fraud, misuse or security threats • Send marketing communications where you have consented or where otherwise lawfully permitted We will not sell your personal information.
7. Lawful grounds for processing
We process personal information only where there is a lawful basis for doing so, including: • Your consent • The conclusion or performance of an agreement with you • Compliance with a legal or professional obligation • Protection of your legitimate interests • Protection of the legitimate interests of the practice or a third party • The provision of medical treatment or management of healthcare services • Another ground permitted under POPIA or applicable law You may withdraw consent where processing is based on consent. Withdrawal will not affect processing that took place lawfully before consent was withdrawn.
8. Sharing of information
Your information may be shared, where reasonably necessary, with: • Authorised members of the practice • Healthcare professionals involved in your care • Laboratories, pharmacies or other medical service providers • Appointment, communications and patient-management service providers • Website hosting, technology and security providers • Payment processors, accountants, auditors and professional advisers • Medical schemes, where applicable and authorised • Regulators, professional bodies, law-enforcement authorities or courts where required by law • Other parties where you have provided consent Service providers acting on our behalf are expected to maintain appropriate confidentiality and security and may process information only for the agreed purpose.
9. Website hosting and external services
The website may use third-party services for hosting, appointment management, maps, embedded content, social media, analytics or communications. These providers may collect technical information when you interact with their services. Their handling of information may also be governed by their own privacy policies. Links to external websites or social-media platforms are provided for convenience. We are not responsible for the privacy practices or content of websites not controlled by the practice.
10. Cookies
The website may use cookies and similar technologies to: • Enable essential website functions • Remember user preferences • Understand website traffic and performance • Improve website functionality • Protect the website against misuse You can control or delete cookies through your browser settings. Disabling certain cookies may affect how the website operates. Where required, non-essential cookies will be used only after you have made an appropriate cookie selection.
11. Marketing communications
We may send news, treatment information or promotional communications where you have consented or where permitted by law. You may unsubscribe at any time by using the unsubscribe option provided in the communication or by contacting us at info@drgerhardvanniekerk.com. Withdrawing from marketing communications will not prevent us from sending essential appointment, treatment, safety or administrative messages.
12. International transfers
Some website, cloud-storage, communications or technology providers may process information outside South Africa. Where information is transferred internationally, we will take reasonable steps to ensure that the recipient is subject to appropriate privacy protections, contractual safeguards or laws providing an adequate level of protection, as required by POPIA.
13. Information security
We take reasonable and appropriate technical and organisational measures to protect personal information against: • Loss or destruction • Unauthorised access • Unlawful use or disclosure • Accidental alteration • Security breaches Access is limited to authorised persons who require the information for legitimate professional or operational purposes. Although reasonable safeguards are used, no electronic transmission or storage system can be guaranteed to be completely secure. If a security compromise affecting your personal information occurs, we will take appropriate action and provide notifications where required by law.
14. Retention of information
We retain personal information only for as long as it is needed for the purpose for which it was collected or for the period required by healthcare, tax, professional, contractual or other applicable legal obligations. Clinical records may need to be retained for prescribed minimum periods. Once information is no longer required, it will be securely deleted, destroyed or de-identified, subject to applicable law.
15. Your rights
Subject to POPIA and other applicable laws, you may request to: • Confirm whether we hold personal information about you • Access your personal information • Correct or update inaccurate or incomplete information • Object to certain processing • Request deletion or destruction where legally permitted • Withdraw previously provided consent • Ask about the parties that have had access to your information • Lodge a complaint regarding the processing of your information Certain records cannot be deleted immediately where their retention is required by healthcare, tax, professional or other laws. To exercise your rights, contact info@drgerhardvanniekerk.com. We may ask you to verify your identity before processing the request.
16. Complaints
We encourage you to contact the practice first so that we can attempt to address your concern. You also have the right to submit a complaint to the South African Information Regulator: Information Regulator South Africa Website: www.inforegulator.org.za Email: complaints.IR@inforegulator.org.za The Information Regulator's contact information may change. Please consult its official website for the latest details.
17. Accuracy of information
Please ensure that information submitted to the practice is accurate and notify us if your contact details, medical information or other relevant information changes.
18. Changes to this policy
We may update this Privacy Policy when our services, website practices or legal obligations change. The latest version will be published on this website with its effective date. Material changes may also be communicated through another appropriate channel.
19. Contact us
For privacy questions, objections, access requests or corrections, please contact: Dr Gerhard van Niekerk Email: info@drgerhardvanniekerk.com Telephone: 082 775 7442 Address: 1 Morkel Street, Somerset West, 7130, South Africa