Data Protection and Security Statement

1. Our Commitment

Maatla Healthcare (Pty) Ltd is a company registered with the Companies and Intellectual Property Commission (CIPC) in the Republic of South Africa. In this document, the words we, us, our and Maatla refer to Maatla Healthcare (Pty) Ltd. The words you and your refer to any person who visits our website, uses our services, or receives our messages.

This document applies across everything we operate, which includes our main website at maatlahealthcare.com, the Maatla Academy learning platform at academy.maatlahealthcare.com, the Maatla Facilities dashboard used by clinics, pharmacies and healthcare networks, and our WhatsApp and SMS reminder and check in services, including voice note messages.

Families trust Maatla with sensitive health information. We take that seriously. This statement explains, in plain language, the measures we use to protect your information. It supports our Privacy Policy and reflects our duty under POPIA to secure personal information.

2. Protecting Information in Storage and in Transit

Information sent between your device and our platforms is protected using secure connections. Information stored in our systems is held in secured, access controlled environments. Sensitive fields, including consent records, are managed carefully and access is limited.

3. Access Controls

We apply least privilege, which means each person and system gets only the access their role requires. In Maatla Facilities, nurses see only what their role needs, and cannot see billing or information outside their role. Administrative accounts use strong authentication, and access is removed promptly when someone leaves.

4. Consent and Lawful Use

We do not send live reminders or check ins without a recorded opt in consent, captured with a date and time. This consent gate is built into our messaging process, so a message cannot be sent to a person who has not agreed to receive it.

5. Secure Development and Operations

We test changes in a safe environment before they reach live patient data. Test modes and placeholders are removed before any real message or payment is processed. Secrets and keys are kept out of code and are not shared in messages or chats. We keep our systems and dependencies updated.

6. Backups and Availability

We keep backups so that information can be recovered if something goes wrong, and we work to keep the Services available. No online service can promise perfect availability, but we plan for recovery.

7. Monitoring and Logging

We log access and important changes to sensitive systems so that unusual activity can be noticed and investigated.

8. Our People

Our team is trained on their data protection duties. Access to personal information is limited to those who need it, and everyone is bound by confidentiality.

9. Working With Providers

Where we use operators and sub processors, such as messaging, hosting and payment providers, we choose them with care and require them to protect information and to process it only on our instructions.

10. Responding to a Breach

Contain the issue to limit any harm. Assess what information and which people are affected. Fix the cause and restore secure operation. Notify the Information Regulator and affected people where the law requires, as soon as reasonably possible. Learn from the incident and improve our controls.

11. Reporting a Concern

If you believe there is a security problem or that your information may be at risk, please tell us at once at info@maatlahealthcare.com so we can act quickly. We welcome responsible disclosure of security issues.

12. An Honest Limitation

No system, and no organisation, can be perfectly secure. We cannot guarantee that information will never be at risk, but we commit to strong, sensible protections and to acting quickly and honestly if something goes wrong.

13. Changes to This Statement

We may update, amend or replace this statement at any time, at our sole discretion. Because our services and the laws that govern them change, we may make these changes without giving you individual notice or separate communication.

Any change takes effect from the moment the updated version is published on our website or otherwise made available on our platforms. The version shown on our website at any given time is the version that applies. By continuing to visit our website, use our services, or receive our messages after a change has been published, you accept the updated version and are bound by it.

We encourage you to review this statement regularly so that you are aware of the current terms. Nothing in this clause removes any right you have under South African law that cannot lawfully be excluded.

14. How to Contact Us

If you have any question, request or concern about this document, please contact us using the details below.