Last updated: May 2025
1. Introduction
Revival Medical Aesthetics (“Revival”, “we”, “us”, or “our”) is a doctor-led medical and aesthetic practice based in Rivonia, Sandton, South Africa. We provide general practice, aesthetic treatments, IV wellness services, hair restoration, and related healthcare.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at revivalmed.co.za, contact us, book appointments, attend consultations, or receive treatment at our practice.
We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”), applicable health-sector regulations, and professional medical ethics. By using our website or services, you acknowledge that you have read this Privacy Policy.
2. Responsible party and information officer
The responsible party for your personal information is:
- Revival Medical Aesthetics
- Second floor Room B3, Health and Wellness Center, 353 Rivonia Blvd, Rivonia, Sandton, 2191
- Email: info@revivalmed.co.za
- Phone: +27 71 036 2777
For privacy-related enquiries, access requests, or complaints, please contact us using the details above. We will respond within a reasonable period as required by POPIA.
3. Personal information we collect
Depending on how you interact with us, we may collect the following categories of information:
- Identity and contact details: name, surname, date of birth, gender, ID or passport number (where required for medical records), address, email address, telephone number, and emergency contact details.
- Health and medical information: medical history, symptoms, diagnoses, treatment plans, prescriptions, clinical notes, photographs or clinical images (including before-and-after images where consent is given), test results, allergies, medication use, and information relating to aesthetic, general practice, IV therapy, or hair-loss treatments.
- Appointment and service information: booking details, treatment preferences, correspondence, feedback, and records of services received or quoted.
- Financial and billing information: payment records, invoices, medical aid details (if provided), and transaction references. We do not store full credit card numbers on our systems where payments are processed by secure third-party providers.
- Website and technical information: IP address, browser type, device information, pages visited, referral source, cookies, and similar usage data when you use our website.
- Marketing preferences: your choices regarding newsletters, promotional communications, and consent records.
Health and medical information is regarded as special personal information under POPIA. We only collect it where necessary for your care, with your consent, or where otherwise permitted by law.
4. How we collect personal information
We collect personal information directly and indirectly through:
- Consultations, assessments, and treatments at our practice
- Contact forms, email, telephone calls, WhatsApp, or other messaging platforms
- Online appointment or enquiry requests
- Account registration or patient intake forms (paper or electronic)
- Medical questionnaires, consent forms, and treatment-specific documentation
- Referrals from other healthcare providers (with appropriate consent where required)
- Laboratory, pharmacy, or allied health partners involved in your care
- Website cookies, analytics tools, and server logs
- CCTV or security systems at our premises, where signage is displayed
Where lawful and practicable, you may choose not to provide certain information. However, if you do not provide information necessary for safe clinical care, billing, or legal compliance, we may be unable to provide some or all of our services.
5. Why we use your personal information
We process personal information for purposes including:
- Providing medical, aesthetic, wellness, and related healthcare services
- Assessing suitability for treatments and maintaining accurate clinical records
- Communicating with you about appointments, follow-up care, and treatment outcomes
- Processing payments and managing accounts
- Complying with legal, regulatory, and professional obligations applicable to medical practitioners and healthcare providers
- Protecting the health and safety of patients, staff, and visitors
- Handling complaints, disputes, and insurance or medico-legal matters
- Improving our website, services, and patient experience
- Sending service-related notices and, where permitted, marketing about treatments, events, or promotions
- Preventing fraud, misuse, and unauthorised access to our systems
Our lawful grounds under POPIA may include your consent, performance of a contract, compliance with legal obligations, protection of legitimate interests (where your rights are not overridden), and, in relation to special personal information, grounds permitted for health information processing.
6. Clinical records and medical confidentiality
As a medical practice, we maintain confidential patient records in line with professional standards and applicable law. Clinical information is accessed only by authorised personnel who require it for your care, administration, or legal compliance.
Before-and-after photographs or case images are used only with your informed consent and for purposes you have agreed to, such as your treatment record, internal training, or marketing (where you have opted in).
7. Sharing and disclosure of personal information
We do not sell your personal information. We may share information with:
- Doctors, nurses, therapists, and administrative staff within Revival who need access for legitimate purposes
- Laboratories, pharmacies, hospitals, specialists, or other healthcare providers involved in your treatment (with consent where required)
- Medical aid schemes or insurers, if you submit a claim or authorisation
- IT service providers, cloud hosting, practice-management software, email, and payment processors under appropriate confidentiality and security agreements
- Professional advisers such as lawyers, auditors, or insurers where necessary
- Regulators, courts, or law enforcement when required by law or to protect rights, safety, and property
Where information is transferred to service providers outside South Africa, we take reasonable steps to ensure comparable protection, as required by POPIA.
8. Data retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, and clinical record-keeping requirements.
Medical records are generally retained in accordance with applicable health-profession and record-retention requirements. When information is no longer required, we securely delete or anonymise it, unless further retention is required by law.
9. Security
We implement appropriate technical and organisational safeguards to protect personal information against loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encrypted connections where appropriate, staff training, and confidentiality obligations.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
10. Cookies and website analytics
Our website may use cookies and similar technologies to enable functionality, remember preferences, and understand how visitors use our site. You can manage cookie settings through your browser. Disabling cookies may affect certain website features.
We may use analytics tools that collect aggregated, non-identifiable usage data to improve our website and services.
11. Direct marketing
We may send you information about our services, promotions, or health-related content where you have consented or where POPIA permits. You may opt out of marketing communications at any time by using the unsubscribe link in an email or contacting us directly. Opting out of marketing does not affect service-related or legally required communications.
12. Your rights under POPIA
Subject to POPIA and applicable exceptions, you have the right to:
- Be notified that your personal information is being collected and understand how it will be used
- Request access to personal information we hold about you
- Request correction or deletion of inaccurate, irrelevant, excessive, outdated, or unlawfully processed information
- Object to processing in certain circumstances
- Withdraw consent where processing is based on consent (without affecting prior lawful processing)
- Lodge a complaint with the Information Regulator (South Africa)
To exercise your rights, contact us at info@revivalmed.co.za. We may need to verify your identity before responding. We will handle requests within the timeframes required by law.
Information Regulator (South Africa): www.inforegulator.org.za
13. Children
Our services are primarily directed at adults. Where we provide care to minors, personal information is processed with appropriate consent from a parent or legal guardian and in the minor’s best interests, in accordance with POPIA and applicable law.
14. Third-party websites and links
Our website may contain links to third-party websites (for example, social media or map services). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal information.
15. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Material changes may also be communicated where appropriate.
16. Contact us
If you have questions about this Privacy Policy or how we handle your personal information, please contact us:
- Email: info@revivalmed.co.za
- Phone: +27 71 036 2777
- Address: Second floor Room B3, Health and Wellness Center, 353 Rivonia Blvd, Rivonia, Sandton, 2191
This Privacy Policy is provided for general information purposes. It does not constitute legal advice. For specific legal guidance, please consult a qualified attorney.