Last updated: 1 June 2026 · Effective: 1 June 2026
On Call Alerts is committed to protecting the privacy of every individual whose information passes through our platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have under the Protection of Personal Information Act, 4 of 2013 (POPIA).
By using the On Call Alerts mobile application, web portal, or any related services (collectively, the "Service"), you acknowledge that you have read and understood this policy. Please read it carefully. If you do not agree with any part of this policy, you should not use the Service.
POPIA compliance: On Call Alerts processes personal information in accordance with POPIA and the conditions for lawful processing set out therein. Our Information Officer can be contacted at the address provided in Section 14.
On Call Alerts is the responsible party (as defined in POPIA) for the personal information collected through the Service. References to "On Call Alerts", "we", "us" or "our" in this policy refer to the company operating the Service.
Our principal place of business is in South Africa. For contact details, including how to reach our Information Officer, please refer to Section 14.
This policy applies to:
This policy does not apply to the personal information of patients. Patient privacy is addressed separately in Section 5.
4.1 Healthcare professional account information
When a healthcare professional is registered on the Service by their institution, we collect and store the following information:
We collect only the minimum information necessary to verify professional identity, enable secure authentication, and support regulatory compliance. We do not collect home addresses, personal phone numbers, personal email addresses, financial details, or any other categories of personal information beyond those listed above.
4.2 Activity and audit log data
The Service automatically records actions performed by registered users, including:
These records are created for operational, safety, and regulatory audit purposes and are associated with the registered user's account.
4.3 Device and technical data
When you use the mobile application or web portal, we may automatically collect limited technical information such as device type, operating system version, app version, and push notification token. This information is used solely to deliver the Service reliably and to diagnose technical issues.
4.4 Contact form submissions
If you submit an enquiry via our website contact form, we collect the information you voluntarily provide (such as your name, work email, hospital name, and role) in order to respond to your enquiry.
On Call Alerts does not collect, store, or process personally identifiable patient information of any kind.
Page alerts created through the Service contain only clinical and operational details necessary for triage and response — such as the patient's age, gender, location within the facility, clinical presentation, and priority level. No patient names, identity numbers, addresses, contact numbers, email addresses, medical aid details, or any other data that could identify an individual patient are entered into or stored by the Service.
Institutions and users are responsible for ensuring that page alerts are created in accordance with this requirement and with applicable healthcare privacy legislation, including POPIA and the National Health Act.
We use the personal information we collect for the following purposes:
We do not use your personal information for direct marketing without your explicit consent, and we do not sell or rent personal information to third parties under any circumstances.
Under POPIA, we process personal information on the following grounds:
All personal information collected by On Call Alerts is processed and stored on cloud infrastructure hosted exclusively within the Republic of South Africa, with a service provider that is compliant with the Protection of Personal Information Act (POPIA). We do not transfer personal information outside of South Africa.
We implement appropriate technical and organisational security measures to protect personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
No method of electronic storage or transmission is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a security compromise involving personal information, we will notify affected parties and the Information Regulator as required by POPIA.
We retain personal information only for as long as it is necessary for the purposes described in this policy, or as required by applicable law:
When personal information is no longer required, it is securely deleted or anonymised in accordance with our data retention procedures.
As a data subject under POPIA, you have the following rights in relation to your personal information:
To exercise any of these rights, please contact our Information Officer using the details in Section 14. We will respond to all requests within a reasonable time and in accordance with POPIA.
Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · inforeg@justice.gov.za
We do not sell, trade, or otherwise transfer your personal information to third parties for their own purposes. We may share personal information in the following limited circumstances:
Our website and web portal may use cookies and similar tracking technologies. Cookies are small text files placed on your device to help us provide and improve the Service. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
Essential cookies required for the secure operation of the web portal are placed on the basis of contractual necessity. Non-essential cookies are only placed with your prior consent.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via the application or by email.
We encourage you to review this policy periodically. Continued use of the Service after any changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to raise a concern about how we handle your personal information, please contact our Information Officer:
We take all privacy concerns seriously and will endeavour to acknowledge your request within five (5) business days and resolve it within thirty (30) days, unless the matter is unusually complex.
If you are not satisfied with our response, you have the right to escalate your complaint to the Information Regulator of South Africa (see contact details in Section 10).