1. Introduction

1.1. This Privacy Policy tells you how we will process and protect your personal information. It should be read together with our Terms and Conditions that apply, as seen above. 

1.2. MED DEV (“MEDDEV”, “we”, “us” or “our”) collects and processes the personal information of anyone who accesses our website and/or chooses to become our customer as well as from you day-to-day dealings with us (“you” or “your”).

1.3. By providing us with your Personal Information, you:

1.3.1. agree to this Policy and authorise us to process such information as set out herein; and

1.3.2. authorise MEDDEV, our Service Providers and other third parties to Process your Personal Information for the purposes stated in this Policy.

1.4. Personal Information, in terms of the Protection of Personal Information Act, 4 of 2013 (“POPIA”), means “information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person”. South Africa’s Constitution, Act 108 of 1996, provides that everyone has the right to privacy. This includes the right to protection against the unlawful collection, retention, dissemination and use of your personal information.

1.5. Because of the sensitivity of some personal information, we ensure that the way we process your Personal Information complies fully with POPIA and have implemented reasonable organisational and technical controls as a result.

1.6. Our Privacy Policy terms may change from time to time. When we change them, the changes will be made on our website. Please ensure that you visit our website and regularly read this Privacy Policy

2. Collection of Personal Information

2.1. We may collect or obtain Personal Information about you in the following ways:

2.1.1. Through direct or active interactions with you;

2.1.2. In the course of our relationship with you;

2.1.3. Through automated or passive interactions with you;

2.1.4. When you visit / or interact with our website or our various social media platforms;

2.1.5. From third parties;

2.1.6. Public sources;

2.1.7. Employment applications;

2.1.8. Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.

2.2. Types of Personal Information we may collect:

2.2.1. Identity information;

2.2.2. Contact information;

2.2.3. Financial information;

2.2.4. Transaction information;

2.2.5. Technical information;

2.2.6. Usage Information;

2.2.7. Location information; and

2.2.8. Marketing and communications information.

3. Legal Basis for Processing

3.1. When we process your personal information in connection with the purposes set out in this Privacy Statement, we may rely on one or more of the following legal bases, depending on the purpose for which the processing activity is undertaken and the nature of our relationship with you:

3.1.1. Your consent to the processing of your Personal Information;

3.1.2. Processing of the information is necessary for the performance of a contract or of a legal obligation;

3.1.3. Processing is necessary for the protection of our and your legitimate interests.

4. Purposes of Processing

4.1. We will primarily use your Personal Information only for the purpose for which it was originally collected. We will use your Personal Information for a secondary purpose only if such purpose constitutes a legitimate interest and is compatible with the primary purpose for which the Personal Information was collected.

4.2. You agree that we may process your Personal Information for the following, but not limited to, purposes, as relevant to our relationship with you:

4.2.1. Operating our business;

4.2.2. Complying with compulsory requirements under relevant laws;

4.2.3. to retain and make information available to you on our website;

4.2.4. to maintain and update our supplier database;

4.2.5. to establish and verify your identity on the website;

4.2.6. fraud prevention;

4.2.7. recruitment;

4.2.8. complying with information requests from the Information Regulator;

4.2.9. transfer of information to an associated third party of supplier;

4.2.10. to conduct market research surveys and other marketing activities; and

4.2.11. for security, administrative and legal purposes.

4.3. We may also collect and process aggregated data, which may include historical or statistical data for any purpose, including for know-how and research purposes.

4.4. We will not intentionally collect and process the Personal Information of a child unless we have the permission of a guardian or competent person (as defined by POPIA).

5. Sharing of Personal Information

5.1. In order for us to carry out our obligations and for legitimate business purposes, we may need to pass your personal information on to third parties, such as our service providers. This Privacy Policy records your consent to us passing your Personal Information onto those third parties.

5.2. We will ensure that your Personal Information is processed in a lawful manner and that the third parties or we do not infringe your privacy rights. In the event that we ever outsource the processing of your Personal Information to a third party operator, we will ensure that the operator processes and protects your Personal Information using reasonable technical and organisational measures that are equal to or better than ours.

5.3. We may also disclose your Personal Information to third parties if we are under a duty to disclose or share such information in order to comply with any legal obligation or to protect the rights, property or safety of MEDDEV, its customers and others.

6. International Transfer of Personal Information

6.1. We will not ordinarily transfer any Personal Information collected from you outside the borders of South Africa.

6.2. In the event that we transfer or store your Personal Information outside South Africa, we will take all steps reasonably necessary to ensure that the third party who receives your Personal Information is subject to a law or binding agreement which provides an adequate level of protection.

7. Data Security

7.1. We have implemented appropriate technical and organisational security measures to protect your Personal Information that is in our possession against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, in accordance with applicable law.

8. Data Retention

8.1. We will retain your personal information for as long as is necessary to fulfil the purpose for which it was collected unless a longer retention period is required to comply with legal obligations or another legitimate obligation, unless we have your consent to process it indefinitely.

9. Data Accuracy

9.1. The Personal Information provided to us should be accurate, complete and up-to-date. Should Personal Information change, the onus is on the provider of such data to notify us of the change and provide us with the accurate data.

10. Data Minimisation

10.1. We will restrict its processing of Personal Information to data which is sufficient for the fulfilment of the primary purpose and applicable legitimate purpose for which it was collected.

11. Your Rights under this Privacy Policy

11.1. You have the right to have your personal information processed lawfully. Your rights include the right:

11.1.1. to be notified that your Personal Information is being collected or that your Personal Information has been accessed or acquired by an unauthorised person e.g. where a hacker may have compromised our computer system;

11.1.2. to find out whether we hold your Personal Information and to request access to your Personal Information;

11.1.3. to request us, where necessary, to correct, destroy or delete your Personal Information;

11.1.4. to object, on reasonable grounds, to the processing of your Personal Information;

11.1.5. to object to the processing of your Personal Information for purposes of direct marketing, including by way of unsolicited communications;

11.1.6. not to be subject, in certain circumstances, to a decision which is based solely on the automated processing of your Personal Information;

11.1.7. to submit a complaint to the Regulator if you believe that there has been interference with the protection of your Personal Information; and

11.1.8. to institute civil proceedings against us if you believe that we have interfered with the protection of your Personal Information.

12. Direct Marketing

12.1. We may process Personal Information for the purpose of direct marketing and providing you with information that may be of interest to you. We will only send you direct marketing materials if you have specifically opted-in to receive these materials, or if you are a customer of ours, at all times in accordance with applicable laws

12.2. You may unsubscribe at any time.

12.3. If you opt out of receiving marketing related communications from us, we may still send you administrative messages which is necessary as part of services.

13. Contact Details of the Information Regulator and Queries

13.1. You may contact our Information Officer at: info@meddev.co.za

13.2. You may contact the Information Regulator at:

13.2.1. Information Regulator

https://www.justice.gov.za/inforeg/index.html

Tel: 012 406 4818

Fax: 086 500 3351

Email: inforeg@justice.gov.za

The Site may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information as mentioned above. Personal information cannot be collected via cookies and other tracking technology; however, if you previously provided personally identifiable information, cookies may be tied to such information. 

By accessing meddev.co.za, you agreed to use cookies in agreement with the MEDDEV Privacy Policy. Most interactive websites use cookies to let us retrieve the user’s details for each visit. Cookies are used by our website to enable the functionality of certain areas to make it easier for people visiting our website. Some of our affiliate/advertising partners may also use cookies.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Cookies and similar tracking technology

A cookie is a piece of text that gets entered into the memory of your browser by a website, allowing the website to store information on your machine and later retrieve it.

Our Site, products, and services may use cookies, unique device identifiers (like Apple ID For Advertisers on iOS devices, and Android Advertising ID on Android devices), and other tracking technologies (collectively, “Cookies“) to distinguish you from other users and better serve you when you return to the Site, product, or service, and to monitor and analyse the usage of the Site, product, or service. Cookies also enable us and our third party partners to track and target the interests of our users to enhance the onsite or in-product experience through content, features, and advertisements.

We, along with our service providers, may also use other Internet technologies, such as Flash technologies, Web beacons or pixel tags, and other similar technologies, to deliver or communicate with cookies and track your use of the Site, product, or service, as well as serve you ads and personalize/customize your experience when you are using our Site, product, or service and/or when you are on other websites where those cookies can be accessed. We may also include Web beacons in email messages, newsletters, and other electronic communications to determine whether the message has been opened and for other analytics, personalization, and advertising. As we adopt additional technologies, we may also gather additional information through other methods.

As explained above, we occasionally share information you have provided to us with service providers, who will de-identify the information and associate it with cookies that enable us to reach you. We may also help these service providers place their own cookies, by deploying a cookie that is associated with a ‘hashed’ value associated with interest-based or demographic data, to permit advertising to be directed to you on other websites, applications or services.

Most browsers automatically accept cookies, but you can modify your browser setting to decline cookies by visiting the Help portion of your browser’s toolbar. If you choose to decline cookies, please note that your ability to sign in, customize, or use some of the interactive features of our Site, product, or service may be impeded, and the advertisements you see may not be as relevant to you.

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

When visitors use the contact form on the site we collect the data shown in the contact form, and also the visitor’s IP address and browser user agent string to help spam detection.

All rights, including copyright, trade mark and other intellectual property rights embodied in any logos, text, images, video, audio or other material on this website are owned by or licensed to us. All data and information communicated to or from the website including its database also belongs solely to us or our licensors. You agree to sign all documents as we may reasonably require in order to assign any rights that you may acquire in the content of our website. You agree also to waive any moral rights in such content. You are permitted to view, print or store electronically a copy of any information on our website, including these Terms, solely for your personal, lawful, non-commercial use. Unauthorised use, reproduction, modification and/or distribution is strictly prohibited and constitutes an unlawful infringement of our intellectual property rights.

You are not permitted to use the content of our website, our logos or any product or other images that appear on our website without our prior written consent. Unauthorised use, reproduction, modification and/or distribution is strictly prohibited and constitutes an infringement of our or our licensors’ intellectual property rights.

Med Dev (CC) Registration Number 2006/166603/23 (“the Company”) is committed to compliance with the Protection of Personal Information Act. No. 4 2013 (“POPIA”).

In this agreement, the following words bear the meanings associated with them below:

“Personal Information” means information relating to an identifiable, living, natural person, including:

1. Financial information related to a person, including information provided by the Customer, or information obtained from a Credit Bureaux or from CIPC (the Companies and Intellectual Property Commission);
2. Any identifying number, symbol, email address, physical address, telephone number, location information, online identifier or other particular assignment to the person; and/or
3. The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about that person.

“Data Subject” means each director of the Customer and each shareholder of the Company that is a natural person.

WHEREAS:

In the course of the Company’s customer verification and credit vetting processes, the Company will collect and process Personal Information related to Data Subjects.

The Company is committed to ensuring that any processing of Personal Information related to Data Subjects is limited to the express purposes of opening and management of an account for the Customer and that such processing is compliant with POPIA.

IT IS HEREBY AGREED THAT:

1. The Customer consents to the Company:
   
   a. performing a credit search on the Customer’s record, as well as the record of Data Subjects, with one or more of the registered Credit Bureaux when assessing the Customer’s Application for Credit (and at any other time in the Company’s discretion);

   
   b. recording the existence of the Customer’s account with any Credit Bureau; and/or
   
   c. recording and transmitting details of how the Customer has performed, and how the account is conducted by the Customer in meeting its obligations on the account.
   
   

2. The Customer acknowledges and agrees that any information regarding its credit worthiness, defaults in payment to the Company, and details of it account with the Company is conducted may be disclosed to any other creditor of the Customer or any registered Credit Bureaux, after 21 (twenty-one) days’ notice having been given to the Customer.
   
   
3. The Customer consents to the collection, processing and storage of Personal Information by the Company related to Data Subjects, for the purposes of both the opening and ongoing management of a customer account.
   
   
4. The Customer warrants and represents that:
   
   a. it has concluded a contract with each Data Subject; and that in terms of such contract, the Customer has obtained the consent from such person to the processing of Personal Information by suppliers in the credit vetting process; and
   
   b. the processing of Personal Information by the Company is necessary for the legitimate interests of the Company in the Company’s credit vetting process.
   
   
5. The Customer warrants that all Personal Information supplied to the Company is accurate, up to date, is not misleading and that it is complete in all respects.
   
   
6. The Customer undertakes to immediately advise the Company of any changes to the relevant Personal Information of a Data Subject, but not limited to, a change of ownership or control in the Customer.
   
   
7. The Company undertakes:
   
   a. to act in accordance with POPIA in relation to the collection, processing and storing of Personal Information related to the Customer. The processing of Personal Information by the Company will be limited to the purposes set out herein and will not be excessive;
   
   b. not to disclose the Customer’s Personal Information unless it is legally or contractually required or for its legitimate business purposes; and
   
   c. to use reasonable efforts in order to ensure that Personal Information related to Data Subjects in its possession or processed on its behalf is:
   i. kept confidential;
   ii. stored in a secure manner; and
   iii. processed in terms of the provisions of POPIA, and, for the purposes for which the Company has been authorized;
   
   d. to take reasonable steps to identify risks associated with the processing of the Customer’s information and establish safeguards against any such identified risks; and
   
   e. to take reasonable steps to ensure that the Customer is notified in the event of a breach of the confidentiality of the Customers Personal Information.
   
   
8. The Customer has a right to lodge a complaint with the information Regulator if the Customer if it is of the view that its rights in terms of POPIA have been breached. The contact details of the information Regulator are:
   
   Telephone Number: 012 406 4818.
   Address: 33 Hoofd Street Forum II, 3rd Floor Braampark, Johannesburg, 2001.
   E-mail Address: IR@justice.gov.za / inforg@justice.gov.za.