1. Who We Are
Chyna (Pty) Ltd ("Chyna", "we", "us", "our") is a South African digital health platform that connects patients with licensed HPCSA-registered medical practitioners. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African health legislation.
Our registered address is in South Africa. For privacy-related enquiries, contact us at privacy@chyna.co.za.
2. Information We Collect
We collect the following categories of personal information:
- Identity information: Full name, date of birth, ID number, gender
- Contact information: Email address, phone number, delivery address
- Health information: Medical history, symptoms, treatment responses, prescription records
- Payment information: Billing details (processed securely via third-party payment providers — we do not store card details)
- Usage data: How you interact with our platform, device type, IP address
Health information is classified as special personal information under POPIA and is treated with the highest level of protection.
3. Why We Collect Your Information
We process your personal information for the following purposes:
- To connect you with a licensed medical practitioner for consultation
- To facilitate the prescribing and delivery of SAHPRA-approved medications
- To maintain medical records as required by law
- To process payments and manage your account
- To communicate with you about your treatment and appointments
- To improve our platform and services
- To comply with our legal and regulatory obligations
4. How We Protect Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. This includes:
- End-to-end encryption of all health data in transit and at rest
- Strict access controls — only your treating doctor can access your health records
- Regular security audits and penetration testing
- Secure, locally hosted servers in South Africa
5. Sharing Your Information
We do not sell your personal information. We only share your information in the following circumstances:
- With your doctor: To facilitate your consultation and treatment
- With pharmacies: To dispense your prescription medication
- With couriers: Solely for delivery of your medication (name and address only)
- With payment processors: To complete transactions securely
- As required by law: Where we are legally compelled to disclose information
6. Your Rights Under POPIA
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Object to the processing of your information
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at privacy@chyna.co.za.
7. Data Retention
We retain your health records for a minimum of five (5) years after your last consultation, as required by the National Health Act and HPCSA guidelines. Payment records are retained for seven (7) years in accordance with tax legislation. You may request deletion of non-health data at any time.
8. Cookies
Our website uses essential cookies to ensure functionality and to improve your experience. We do not use tracking cookies or share browsing data with advertisers. You can disable cookies in your browser settings, though this may affect certain features.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions or to exercise your rights, please contact our Information Officer at privacy@chyna.co.za or write to us at our registered address.