Create your account

Your account is used to sign in securely. Your HealthProfile is created during the next step.

Account details

Use at least 8 characters and avoid common or entirely numeric passwords.

Already have an account? Sign in

By creating an account, you agree to the Terms and acknowledge the Privacy Policy.

Exact document for acceptance

Version 1.0 · Effective 17 August 2026

HealthLynk Terms of Service

Effective date: 17 August 2026 Last updated: 17 August 2026

These Terms of Service ("Terms") govern your access to and use of HealthLynk, including the HealthLynk website, web application, progressive web application and related services (collectively, the "Service").

The Service is operated by HealthLynk (Pty) Ltd, a private company incorporated in the Republic of South Africa ("HealthLynk", "we", "us" or "our").

By creating an account, starting a subscription or free trial, accepting these Terms electronically, or otherwise using the Service, you agree to these Terms.

If you do not agree to these Terms, you must not create an account or use the Service.

1. About HealthLynk

HealthLynk is a digital personal health information management platform.

Depending on the features and subscription plan available to you, HealthLynk may allow you to:

  • create and manage personal or family health profiles;
  • record healthcare encounters and health-history information;
  • upload and store prescriptions, test results, receipts and other health-related documents;
  • organise health information into a timeline;
  • manage health information on behalf of another person where you are lawfully authorised to do so;
  • invite another person to claim or access a profile relating to them;
  • share selected health information with authorised persons;
  • generate or download health-information summaries and exports; and
  • access other personal, family or care-related features made available from time to time.

The specific functionality available to you may depend on your subscription plan.

2. Important Medical Notice

IMPORTANT: HEALTHLYNK IS AN INFORMATION-MANAGEMENT PLATFORM. IT IS NOT A MEDICAL PRACTICE, HOSPITAL, PHARMACY, MEDICAL SCHEME, INSURER, EMERGENCY SERVICE OR SUBSTITUTE FOR A QUALIFIED HEALTHCARE PROFESSIONAL.

HealthLynk does not diagnose medical conditions, prescribe medication, provide medical treatment or determine whether particular medical information is accurate or clinically appropriate.

Information stored, displayed, summarised or exported through HealthLynk must not be treated as medical advice.

You must obtain appropriate advice from a qualified healthcare professional regarding diagnosis, treatment, medication or any other healthcare decision.

Do not use HealthLynk as an emergency service. If you or another person may be experiencing a medical emergency, contact the appropriate emergency services or healthcare provider immediately.

You should not rely on HealthLynk as the sole source of information required for urgent or critical medical care.

3. Eligibility and Accounts

You must be at least 18 years old and legally capable of entering into an agreement to create and control an independent HealthLynk account.

A profile relating to a child may be created or managed by a parent, legal guardian or other person who is legally competent to make decisions concerning that child.

When you create an account, you agree to:

  • provide accurate and current information;
  • maintain the security of your login credentials;
  • not share authentication credentials with unauthorised persons;
  • promptly notify HealthLynk if you believe your account has been compromised; and
  • take reasonable steps to prevent unauthorised access to your account.

You are responsible for activity performed through your account to the extent permitted by applicable law, except where such activity results from circumstances for which HealthLynk is legally responsible.

We may require you to verify your email address, identity or other information before certain features become available.

4. Health Profiles and Information About Other People

HealthLynk may allow you to create or manage a health profile for another person.

You may only provide personal or health information about another person when you have a lawful basis or appropriate authority to do so.

For example, this may include circumstances where:

  • the person has authorised you to manage information on their behalf;
  • you are the parent, guardian or other competent person authorised to act for a child;
  • you are otherwise legally authorised to act for the person; or
  • another lawful basis recognised under applicable law applies.

You must not create profiles, upload records or disclose health information about another person merely because you have access to that information.

HealthLynk may provide mechanisms allowing a person to claim a profile relating to them, verify their identity or email address, and establish an appropriate relationship with an existing profile.

Where a profile is claimed, control and access rights relating to that profile may change in accordance with the functionality of the Service and applicable law.

HealthLynk may maintain appropriate records or audit information relating to invitations, claims, access and sharing for security, accountability and legal compliance purposes.

5. Your Health Information and Uploaded Content

You retain your rights in information, records, documents, images and other content that you lawfully provide to HealthLynk ("User Content").

You grant HealthLynk the limited rights reasonably necessary to host, store, process, organise, reproduce, transmit and display User Content for the purpose of providing, securing, maintaining and improving the Service, subject to our Privacy Policy and applicable law.

This does not transfer ownership of your health records or documents to HealthLynk.

You are responsible for ensuring that, to the best of your knowledge:

  • information you enter is accurate;
  • documents you upload relate to the correct person or profile;
  • you have authority to upload or share the information;
  • your use of the information does not unlawfully infringe another person's rights; and
  • uploaded files do not intentionally contain malware or other harmful material.

HealthLynk does not independently verify the medical accuracy, authenticity, completeness or clinical significance of information supplied by users or third parties.

6. Sharing and Access

Certain HealthLynk features may allow you to share health information with family members, carers, healthcare professionals or other authorised persons.

You are responsible for choosing who may access information that you control.

Before sharing health information, you should confirm that:

  • you have selected the correct person;
  • the information is appropriate to share;
  • you have authority to share it; and
  • the recipient should reasonably have access to it.

Where HealthLynk provides access controls, invitations, permissions or similar mechanisms, you must not attempt to bypass them.

A recipient's ability to view information through HealthLynk does not give that recipient ownership of the underlying information.

7. Privacy and Protection of Personal Information

HealthLynk processes personal information, including health information, in accordance with applicable data-protection law and our Privacy Policy.

Because health information is particularly sensitive, HealthLynk applies appropriate technical and organisational measures intended to protect personal information under its control.

Our Privacy Policy explains, among other things:

  • what personal information we collect;
  • why we collect and process it;
  • the lawful bases on which processing occurs;
  • how health and other sensitive information is handled;
  • how children's personal information is handled;
  • the circumstances in which information may be shared;
  • the service providers that may process information on our behalf;
  • international transfers, where applicable;
  • retention and deletion;
  • your rights regarding your personal information; and
  • how to contact our Information Officer.

Where applicable law requires consent for a particular processing activity, HealthLynk may request that consent separately.

Acceptance of these Terms does not remove any rights you have under applicable data-protection law.

8. Security

HealthLynk takes reasonable technical and organisational measures to protect the confidentiality and integrity of information entrusted to the Service.

However, no internet-based service can guarantee uninterrupted availability or absolute security.

You must also take reasonable precautions, including protecting your password, devices and email account from unauthorised access.

If you become aware of suspected unauthorised access to your HealthLynk account, contact us as soon as reasonably possible at:

Security contact: YangaSodoza@outlook.com

HealthLynk will handle security compromises involving personal information in accordance with applicable law.

9. Subscriptions

Some or all HealthLynk functionality may require a paid subscription.

Available plans, features, billing frequencies and current prices are displayed on the HealthLynk pricing page and during the subscription process.

Prices are stated in South African Rand unless otherwise indicated.

Before you confirm a subscription, HealthLynk will display the applicable:

  • subscription plan;
  • price;
  • billing frequency;
  • trial period, if any;
  • renewal arrangement;
  • applicable fees or charges; and
  • other material payment terms.

You must be given an opportunity to review the transaction and correct relevant information before completing your purchase.

10. Free Trials

HealthLynk may offer a free trial to eligible customers.

The length of the trial and the subscription price that will apply after the trial will be disclosed before you start the trial.

Where a free trial requires a payment method, you authorise HealthLynk and its payment service provider to establish the payment arrangement required for future recurring billing.

Unless otherwise stated during registration, a trial linked to a recurring subscription will automatically convert to the selected paid subscription at the end of the trial period unless you cancel before the trial expires.

You will not be charged the ordinary subscription fee during the free-trial period.

A payment provider or financial institution may, where applicable, perform a temporary or nominal payment-method verification or authorisation. Such verification is not the HealthLynk subscription fee.

HealthLynk may limit free trials to one trial per person, household, payment method or other reasonable eligibility criterion in order to prevent abuse.

11. Recurring Payments

Where you select a recurring subscription, you authorise the applicable recurring subscription amount to be collected according to the billing frequency disclosed when you subscribe.

HealthLynk currently intends to use PayFast by Network or another disclosed payment service provider to process online payments.

Payment-card information may be entered and processed through the payment provider's secure systems. HealthLynk may receive transaction references, payment tokens, payment status and other information reasonably required to administer your subscription.

HealthLynk does not require you to provide your full payment-card credentials directly to HealthLynk where the payment provider processes those credentials.

Your use of the payment provider may also be subject to that provider's applicable terms and privacy practices.

12. Renewals and Changes to Subscription Prices

Recurring subscriptions renew according to the billing frequency you selected unless they are cancelled.

If HealthLynk changes the price of an existing recurring subscription, we will provide reasonable notice before the new price applies where required.

A price change will not retrospectively increase an amount already paid for a completed billing period.

For prepaid annual subscriptions, a new subscription price will ordinarily apply from the next renewal unless otherwise agreed or required by law.

13. Cancellation

You may cancel a recurring HealthLynk subscription using the cancellation functionality provided through the Service or by contacting HealthLynk through the published support channel.

Cancelling a subscription stops future automatic renewals.

Unless applicable law, the Refund and Cancellation Policy, or the terms presented when you subscribed provide otherwise, you may continue using the paid features included in your subscription until the end of the period for which you have already paid.

If you cancel during a free trial before the first paid billing date, HealthLynk will not intentionally initiate the ordinary subscription charge after the trial.

Cancellation does not remove any statutory cooling-off, refund, cancellation or consumer rights that apply to you.

Our separate Refund and Cancellation Policy provides further information.

14. Failed or Reversed Payments

If a payment fails, is declined, reversed or cannot be collected, HealthLynk or its payment provider may attempt to process the payment again where permitted.

We may notify you and provide an opportunity to update your payment method.

If payment remains outstanding, HealthLynk may restrict or suspend paid functionality until the account is brought up to date.

Health information will be handled in accordance with our Privacy Policy and retention rules even where subscription access has expired or been suspended.

15. Access After a Subscription Ends

When your paid subscription ends:

  • access to paid features may be restricted;
  • some functionality may become read-only or unavailable;
  • you should use available export functionality to retain copies of information you require; and
  • retention or deletion of information will be governed by the Privacy Policy, applicable law and any retention periods communicated to you.

Ending a subscription does not necessarily mean that all information is immediately deleted.

Where you request deletion of personal information, HealthLynk will assess and process the request in accordance with applicable law and the Privacy Policy.

16. Refunds and Consumer Rights

Refunds are governed by HealthLynk's Refund and Cancellation Policy and applicable South African law.

Nothing in these Terms is intended to waive, restrict or exclude any right that cannot lawfully be waived, restricted or excluded.

Where a statutory cooling-off period or cancellation right applies to a transaction, HealthLynk will honour that right in accordance with applicable law.

17. Acceptable Use

You must not use HealthLynk to:

  • gain unauthorised access to another person's information;
  • impersonate another person;
  • create deceptive or fraudulent profiles;
  • upload information you have no lawful authority to process;
  • harass, threaten, exploit or unlawfully monitor another person;
  • distribute malware or malicious software;
  • interfere with the security or operation of the Service;
  • bypass authentication, access controls or other security measures;
  • probe or test vulnerabilities without written authorisation;
  • scrape, harvest or systematically extract information except through functionality expressly provided for that purpose;
  • use the Service for an unlawful purpose; or
  • assist another person in doing any of the above.

HealthLynk may investigate suspected misuse and take proportionate action where necessary to protect users, the Service or other persons.

18. Suspension and Termination

HealthLynk may temporarily restrict or suspend an account where reasonably necessary because of:

  • a serious or repeated breach of these Terms;
  • suspected fraud;
  • unlawful activity;
  • unauthorised access;
  • a security threat;
  • non-payment for paid services;
  • misuse that threatens another person's privacy or safety;
  • a legal or regulatory requirement; or
  • conduct that materially threatens the integrity of the Service.

Where reasonably possible and appropriate, we will provide notice and an opportunity to remedy the issue before permanent termination.

Immediate action may be taken where reasonably necessary to address fraud, security incidents, unlawful conduct or a material threat to another person's rights.

Termination does not affect rights or obligations that arose before termination.

19. Service Availability and Maintenance

HealthLynk aims to provide a reliable service but does not guarantee that the Service will always be available without interruption.

The Service may occasionally be unavailable because of maintenance, upgrades, security work, infrastructure failures, internet or telecommunications problems, third-party outages or circumstances outside our reasonable control.

Where reasonably possible, planned maintenance that is likely to cause significant disruption will be communicated appropriately.

Because access to technology can be interrupted, HealthLynk should not be used as the sole repository for information required during an immediate medical emergency.

20. Changes to the Service

HealthLynk may improve, modify, replace or discontinue features as the Service develops.

Where a change materially reduces a paid service during an active paid subscription, HealthLynk will provide reasonable notice where practicable and any remedy required by applicable law.

We may make changes without prior notice where urgently necessary for security, legal compliance or protection of users.

21. Intellectual Property

The HealthLynk platform, software, branding, interfaces, designs, documentation and other intellectual property belonging to HealthLynk or its licensors remain the property of their respective owners.

These Terms grant you a limited, personal, non-exclusive, non-transferable and revocable right to use the Service for its intended purpose while your account is authorised to access it.

You may not copy, reverse engineer, reproduce, sell, licence or commercially exploit the Service except where expressly permitted by law or with HealthLynk's written permission.

This section does not give HealthLynk ownership of your User Content.

22. Third-Party Services

HealthLynk may rely on third-party service providers for functionality such as payment processing, communications, infrastructure and other operational services.

A third-party service may be subject to its own terms and privacy practices.

HealthLynk remains responsible for its own obligations under applicable law and does not use this section to exclude responsibility that cannot lawfully be excluded.

23. Important Limitation Regarding Health Information

PLEASE READ THIS SECTION CAREFULLY.

HealthLynk provides tools for storing, organising, accessing and sharing information.

HealthLynk does not warrant that:

  • information entered by a user is medically accurate;
  • an uploaded document is complete or authentic;
  • a health profile contains every relevant medical record;
  • a healthcare provider has reviewed information stored in HealthLynk; or
  • information available through HealthLynk is sufficient for diagnosis or treatment.

Before making a healthcare decision, medication decision or other decision that may materially affect a person's health, you should verify relevant information with an appropriately qualified healthcare professional.

24. Limitation of Liability

PLEASE READ THIS SECTION CAREFULLY BECAUSE IT AFFECTS LEGAL RIGHTS AND ALLOCATES CERTAIN RISKS.

To the maximum extent permitted by applicable law, HealthLynk will not be responsible for loss caused solely by:

  • inaccurate information supplied by a user or unauthorised third party;
  • a user's decision to disregard professional medical advice;
  • a user's unauthorised disclosure of another person's information;
  • misuse of login credentials where HealthLynk was not legally responsible for the compromise; or
  • use of the Service for a purpose for which it was not designed.

HealthLynk does not exclude or limit liability where doing so would be unlawful.

In particular, nothing in these Terms excludes liability for gross negligence or any other liability or consumer right that cannot lawfully be excluded or limited under South African law.

Any limitation of liability in these Terms must be interpreted subject to applicable consumer-protection and other mandatory law.

25. Organisational, Care and Sponsored Access

HealthLynk may make specialised plans or access arrangements available to healthcare organisations, care organisations, employers, sponsors, non-profit organisations or other entities.

Those services may be subject to additional agreements, data-processing terms, service-level arrangements or programme-specific conditions.

If an additional written agreement applies, that agreement will prevail over these Terms to the extent of any direct conflict concerning the specialised service.

Nothing about organisational access creates a doctor-patient or other healthcare-professional relationship between HealthLynk and the person whose information is managed.

26. Complaints

If you have a complaint relating to the Service, billing, your account or these Terms, please contact:

Email: YangaSodoza@outlook.com Telephone: 074 663 3106

We will make reasonable efforts to investigate and respond to complaints.

Nothing in these Terms prevents a consumer from exercising any right to approach an appropriate court, the National Consumer Commission, the Information Regulator or another competent regulatory or dispute-resolution body where applicable.

Privacy and personal-information complaints should be directed to the contact identified in our Privacy Policy.

27. Electronic Communications

You agree that HealthLynk may communicate with you electronically regarding:

  • your account;
  • security;
  • authentication;
  • subscriptions and payments;
  • important changes to the Service;
  • legal or policy updates; and
  • other operational communications necessary to provide the Service.

Marketing communications will be handled separately in accordance with applicable law and your communication preferences.

Electronic communications may be delivered through email, in-product notices or other contact mechanisms associated with your account.

28. Changes to These Terms

HealthLynk may update these Terms when reasonably necessary to reflect:

  • changes to the Service;
  • new functionality;
  • legal or regulatory requirements;
  • security requirements; or
  • changes to our business practices.

The current version will be made available through the HealthLynk website.

For material changes that significantly affect your rights or obligations, we will provide reasonable notice before the changes take effect where appropriate.

If applicable law requires your renewed consent to a change, HealthLynk will request that consent.

29. Governing Law

These Terms are governed by the laws of the Republic of South Africa.

Any dispute may be submitted to a court or other competent authority having jurisdiction.

Nothing in these Terms limits any right a consumer or data subject has to approach an appropriate regulator, ombud, tribunal or other body under applicable law.

30. General

If any provision of these Terms is found to be unlawful or unenforceable, the remaining provisions will continue to apply to the extent permitted by law.

A failure by HealthLynk to enforce a provision on one occasion does not automatically waive the right to enforce that provision later.

HealthLynk may not transfer obligations in a manner that unlawfully reduces your consumer rights.

These Terms, together with the policies and additional terms expressly incorporated into them, constitute the agreement governing use of the Service.

Supplier Information

The following information identifies the supplier responsible for the HealthLynk Service.

Legal name: HealthLynk (Pty) Ltd Legal status: Private Company Country and place of registration: Republic of South Africa Company registration number: 2026/646559/07 Office bearer / Director: Yanga Sodoza Physical business address: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570 Address for service of legal documents: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570 Website: healthylynk.com Email: YangaSodoza@outlook.com Telephone: 074 663 3106 VAT status: Not currently VAT registered

Current subscription prices, plan characteristics, billing frequencies and applicable charges are displayed on the Pricing page and again during checkout before a transaction is confirmed.

Online subscription payments are processed using the payment service provider identified during checkout.

Related Policies

These Terms should be read together with the following HealthLynk documents where applicable:

  1. Privacy Policy / POPIA Privacy Notice
  2. Refund, Cancellation and Subscription Policy
  3. PAIA Manual
  4. Medical Disclaimer
  5. Cookie Policy
  6. Security and Data Protection Statement

If a provision of these Terms conflicts with a mandatory requirement of applicable South African law, the mandatory legal requirement will prevail.

HealthLynk (Pty) Ltd Your health information. Organised around you.

Exact document for acceptance

Version 1.0 · Effective 17 August 2026

HealthLynk Privacy Policy and POPIA Privacy Notice

Version: 1.0 Effective date: 17 August 2026 Last updated: 17 August 2026

HealthLynk (Pty) Ltd respects the privacy of the people who use our services and recognises that health information requires a particularly high level of care.

This Privacy Policy and POPIA Privacy Notice ("Privacy Policy") explains how HealthLynk collects, uses, stores, shares, protects and otherwise processes personal information when you use HealthLynk.

It should be read together with our Terms of Service and other applicable policies.

1. Who We Are

HealthLynk is operated by:

Legal name: HealthLynk (Pty) Ltd Registration number: 2026/646559/07 Country of registration: Republic of South Africa Director: Yanga Sodoza Website: healthylynk.com Telephone: 074 663 3106 Email: YangaSodoza@outlook.com Physical business address: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570

For purposes of the Protection of Personal Information Act 4 of 2013 ("POPIA"), HealthLynk will generally act as the responsible party for personal information processed through the HealthLynk consumer platform where HealthLynk determines why and how that information is processed.

In some organisational or care-service arrangements, another organisation may determine the purposes for which certain information is processed. In such circumstances, the parties' respective privacy responsibilities may also be governed by an additional written agreement.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through the HealthLynk website, application, progressive web application, support channels and related services.

It applies to information concerning:

  • account holders;
  • people whose health profiles are stored on HealthLynk;
  • children whose profiles are lawfully managed by a parent, guardian or other competent person;
  • family members and other people connected through HealthLynk;
  • people invited to claim a profile;
  • authorised carers or persons with whom information is shared;
  • customers and subscribers;
  • representatives of organisations using HealthLynk; and
  • visitors to our website.

A person whose information is processed is referred to in this Policy as a "data subject".

3. Personal Information We May Process

The personal information HealthLynk processes depends on the features you use.

3.1 Account and identity information

This may include your:

  • name and surname;
  • email address;
  • telephone number;
  • date of birth;
  • authentication and verification information;
  • account identifiers;
  • account status; and
  • subscription information.

3.2 Profile and family information

HealthLynk may process information relating to:

  • personal profiles;
  • family relationships;
  • parent, guardian, dependant or manager relationships;
  • invitations to another person;
  • profile-claim status;
  • permissions and access relationships; and
  • information required to determine who may lawfully manage or access a profile.

3.3 Health and medical information

Depending on what users choose to record or upload, HealthLynk may process information concerning:

  • medical history;
  • healthcare encounters;
  • visits to doctors, clinics, hospitals and other healthcare providers;
  • medical conditions or health events;
  • prescriptions and medicines;
  • tests and test-related information;
  • healthcare professionals;
  • treatment-related information;
  • discharge information;
  • ongoing healthcare information;
  • health-related notes;
  • uploaded medical records, images or documents; and
  • other health information voluntarily recorded through the Service.

Health information is treated as special personal information and receives additional protection.

3.4 Documents and files

Users may upload documents such as:

  • prescriptions;
  • test results;
  • medical reports;
  • referral documents;
  • healthcare receipts;
  • proof-of-payment or related documents; and
  • other health-related records.

The contents of an uploaded document may themselves contain personal information or special personal information.

3.5 Payment and subscription information

When paid subscriptions are available, we may process information such as:

  • selected subscription plan;
  • billing frequency;
  • transaction amount;
  • payment status;
  • payment reference;
  • payment-provider identifiers;
  • recurring-payment or token references; and
  • subscription start, renewal, cancellation and expiry information.

Full payment-card details are intended to be processed by our authorised payment provider rather than stored directly by HealthLynk.

3.6 Technical and security information

We may process technical information reasonably necessary to operate and secure HealthLynk, including:

  • IP address;
  • browser and device information;
  • session information;
  • login activity;
  • timestamps;
  • security events;
  • application and server logs;
  • authentication events;
  • failed-access attempts; and
  • information used to detect fraud, abuse or unauthorised access.

3.7 Communications

If you communicate with HealthLynk, we may process your:

  • name;
  • contact details;
  • support request;
  • correspondence;
  • complaint;
  • feedback; and
  • other information you provide during the communication.

4. Special Personal Information

HealthLynk is specifically designed to help people manage health-related information.

Health information is sensitive and is treated as special personal information under POPIA.

HealthLynk will only process special personal information where an appropriate legal basis and authorisation exists under applicable law.

Where HealthLynk relies on your consent to process health information, that consent must relate to the relevant processing activity.

You may withdraw consent where the law gives you that right. Withdrawal does not necessarily affect processing that was lawful before withdrawal, and it may mean that HealthLynk can no longer provide functionality that depends on processing the relevant information.

HealthLynk does not treat acceptance of general website cookies, marketing messages or unrelated functionality as consent to process health information.

5. Children's Personal Information

HealthLynk may allow a parent, legal guardian or other legally competent person to manage a profile relating to a child.

Personal information relating to children receives additional protection.

HealthLynk will process a child's personal information only where permitted under applicable law, including where prior consent has been provided by a competent person or another lawful basis applies.

A person creating or managing a child's profile must have the legal authority to do so.

Where appropriate, HealthLynk may require confirmation or evidence of the relationship or authority relied upon.

A competent person may, subject to applicable law, request access to, correction of, restriction of, or cessation of processing involving the child's personal information.

HealthLynk will not intentionally encourage children to disclose more personal information than is reasonably necessary for the functionality being provided.

6. Where We Obtain Personal Information

Most personal information processed through HealthLynk is provided directly by the account holder.

We may also receive personal information from another person where HealthLynk functionality allows that person to lawfully manage information on somebody else's behalf.

For example, information may be supplied by:

  • a parent or guardian managing a child's profile;
  • a family member authorised to manage another person's profile;
  • a profile manager;
  • a person sending a profile-claim invitation;
  • the person claiming a profile;
  • an authorised organisation or care provider where an applicable agreement permits this; or
  • a payment or technical service provider.

Where information is obtained from somebody other than the data subject, HealthLynk will process that information only where there is an appropriate legal basis to do so.

7. Why We Process Personal Information

HealthLynk processes personal information only for defined and lawful purposes.

Providing the HealthLynk Service

We process information to create accounts, authenticate users, maintain health profiles, store records and documents, display health timelines, generate exports, manage family relationships and provide other requested HealthLynk functionality.

Managing Profiles for Other People

We process information where necessary to enable appropriately authorised people to create, maintain or assist with profiles belonging to family members, children, dependants or other persons.

Profile Invitations and Claims

We process identity, contact and relationship information to send invitations, verify recipients, permit a person to claim a profile relating to them and reduce the risk of duplicate or unauthorised profiles.

Sharing and Permissions

Where a user chooses to share information, we process the information necessary to establish, manage and revoke authorised access.

Subscription and Payment Administration

We process account, subscription and payment-related information to start subscriptions, administer trials, confirm payments, manage recurring billing, process cancellations and maintain financial records.

Security

We process appropriate technical and account information to authenticate users, prevent fraud, investigate suspicious activity, secure accounts, protect personal information and maintain the integrity of the Service.

Communications

We use contact information to send verification messages, security notices, account notifications, subscription communications, requested support responses and other service-related communications.

Legal and Regulatory Compliance

We may process information where reasonably necessary to comply with applicable laws, respond to lawful requests, protect legal rights, handle regulatory matters or maintain records required by law.

Service Reliability and Improvement

We may process appropriate operational and technical information to diagnose errors, measure service performance, improve accessibility, improve security and develop the Service.

Where possible and appropriate, HealthLynk will use aggregated or de-identified information for these purposes rather than identifiable health information.

8. Our Grounds for Processing Personal Information

Depending on the processing activity, HealthLynk may process personal information because:

you have consented to the processing;

processing is necessary to perform an agreement with you or take steps requested by you before entering into an agreement;

processing is required to comply with an obligation imposed by law;

processing protects a legitimate interest of the data subject;

processing is necessary to pursue a legitimate interest of HealthLynk or another person where permitted by law; or

another authorisation recognised by POPIA or other applicable law applies.

HealthLynk will not rely on a general lawful basis for ordinary personal information where additional legal requirements apply to special personal information or children's information.

9. Family Profiles, Managed Profiles and Profile Claims

HealthLynk is designed to accommodate situations where one person lawfully assists another person with managing their health information.

A profile manager does not become the owner of another person's personal information merely because they created or managed the profile.

Where HealthLynk allows a profile to be claimed by the person to whom it relates, we may process information necessary to:

  • identify the relevant profile;
  • send and validate the invitation;
  • verify the invited email address or other identifier;
  • prevent duplicate profiles;
  • record the claim;
  • change access relationships; and
  • maintain appropriate security and audit information.

The ability of a manager to access a claimed profile may change after the claim according to the permissions established through HealthLynk and applicable law.

10. Sharing Personal Information

HealthLynk does not make health profiles publicly available.

Personal information may be disclosed only where reasonably necessary and lawfully permitted.

This may include disclosure to:

People You Authorise

Information may be shared with a family member, carer, healthcare professional or other person where you deliberately use HealthLynk's sharing functionality or otherwise authorise the disclosure.

Service Providers

HealthLynk may use trusted service providers to perform services such as:

  • cloud hosting and storage;
  • email delivery;
  • payment processing;
  • application infrastructure;
  • security;
  • backup and recovery;
  • technical monitoring; and
  • other operational services.

These service providers may process information on HealthLynk's behalf only for authorised purposes and subject to appropriate contractual and security obligations.

Payment Providers

When subscription payments are enabled, payment-related information may be exchanged with PayFast by Network or another payment service provider disclosed at checkout.

Legal and Regulatory Recipients

Information may be disclosed where HealthLynk is legally required to do so, including where necessary to respond to a valid court order, regulatory requirement or other lawful process.

Business Transactions

If HealthLynk undergoes a legitimate corporate restructuring, investment, merger, acquisition or transfer of business, information may be disclosed where reasonably necessary for that transaction and subject to appropriate confidentiality, security and legal safeguards.

HealthLynk will not permit a business transaction to be used as a means of circumventing data-protection obligations.

11. Our Service Providers and Operators

Where another organisation processes personal information on HealthLynk's behalf as an operator, HealthLynk requires appropriate security and confidentiality protections.

HealthLynk's infrastructure may use reputable technology providers, including cloud infrastructure and communication providers.

Before public launch, HealthLynk will maintain an appropriate internal record of material service providers and the categories of information each provider may process.

Where required, further information about material operators may be provided on request or through an updated version of this Privacy Policy.

12. Payment Information

HealthLynk uses PayFast by Network for subscription payment processing.

Where payment details are entered through PayFast, the payment provider processes those payment credentials according to its own security and privacy requirements.

HealthLynk may receive information required to administer the transaction, such as payment status, amount, merchant reference, transaction identifier, payment token or recurring-payment status.

HealthLynk does not require access to a user's complete payment-card number where the payment service provider can process the payment without providing those credentials to HealthLynk.

13. Cookies and Similar Technologies

HealthLynk may use cookies or similar browser technologies required to:

  • maintain secure sessions;
  • authenticate users;
  • protect against security threats;
  • remember necessary settings; and
  • provide core website functionality.

Where non-essential analytics or other optional cookies are introduced, HealthLynk will provide appropriate information and consent choices where required.

Further information will be available in the HealthLynk Cookie Policy.

14. Service Communications and Marketing

HealthLynk may send communications necessary to provide the Service, including:

  • verification codes;
  • profile invitations;
  • security alerts;
  • account notifications;
  • payment and subscription notices;
  • important service changes; and
  • responses to support requests.

These operational messages are different from direct marketing.

HealthLynk will handle electronic direct marketing in accordance with applicable law and will provide an appropriate method to object or unsubscribe where required.

Health information will not be used to target advertising to users.

15. Sale of Personal Information

HealthLynk does not sell users' personal information or health information to advertisers, data brokers or other third parties.

HealthLynk's business model is based on providing HealthLynk services and subscriptions, not selling identifiable health information.

If HealthLynk's business model changes in a way that materially affects how personal information is processed, this Privacy Policy will be updated and any additional consent required by law will be obtained before that processing takes place.

16. International Processing and Transfers

HealthLynk is a South African company and is subject to South African data-protection requirements.

Some service providers may operate infrastructure, support systems or other facilities in more than one country.

Where HealthLynk transfers personal information to a recipient outside South Africa, the transfer will only take place where the requirements of applicable law, including POPIA, are satisfied.

This may involve ensuring that the recipient is subject to appropriate legal, contractual or other binding protections; obtaining consent where legally appropriate; or relying on another permitted basis.

Because health information and children's information require additional protection, HealthLynk will assess cross-border processing involving these categories particularly carefully.

Primary HealthLynk production-data hosting location: AWS af-south-1. Structured application and health data is stored in PostgreSQL/RDS. Uploaded documents and generated exports use private S3 storage. Transactional email uses Amazon SES. PayFast processes subscription payments and returns payment references/statuses required for billing administration.

Tracked infrastructure item: confirm final AWS operator/subprocessor and any cross-border transfer details before production publication. This notice does not assert unverified operator locations.

17. How Long We Keep Personal Information

HealthLynk does not intend to retain personal information indefinitely merely because it has been collected.

Information will generally be retained for as long as reasonably necessary to:

  • provide the Service;
  • maintain an active account or profile;
  • fulfil the purpose for which the information was collected;
  • comply with contractual obligations;
  • resolve disputes;
  • maintain appropriate security or audit records; or
  • comply with applicable law.

Health and profile information stored by a user will ordinarily remain available while the relevant profile and account remain active, subject to the user's rights, the rights of other data subjects, applicable law and HealthLynk's retention rules.

Where personal information is no longer lawfully required, HealthLynk will delete, destroy or appropriately de-identify it as required.

Some information may need to remain for a limited additional period in secure backups, security records, transaction records or legal records before being deleted according to established retention procedures.

Temporary generated files, such as downloadable exports, may be automatically removed after a limited availability period even though the underlying records remain in the user's HealthLynk profile.

A subscription ending does not necessarily mean that all personal information is immediately deleted. After a 7-day PAST_DUE grace period, access may become READ_ONLY. READ_ONLY data is retained for 12 months, with notices before deletion, and is permanently deleted after that retention period unless another lawful retention reason applies.

The launch storage limits are 2 GiB per HealthProfile and 25 MiB per uploaded file. Supported launch file types are PDF, JPEG, PNG and WebP.

18. Account Closure and Deletion Requests

Users may request account closure through functionality made available by HealthLynk or through our support contact.

Account closure and deletion of personal information are related but not necessarily identical actions.

Before deleting information, HealthLynk may need to consider:

  • whether the information relates to another data subject;
  • whether another authorised manager or claimed profile is affected;
  • whether retention is required by law;
  • whether records are reasonably required for legal or contractual purposes; and
  • whether the requester has authority to request deletion.

Where HealthLynk is no longer authorised to retain personal information, it will delete or destroy the information as required by applicable law.

19. Security

HealthLynk recognises that the confidentiality and integrity of health information are fundamental to the Service.

HealthLynk maintains reasonable technical and organisational safeguards appropriate to the nature of the information processed and the risks involved.

These safeguards may include measures relating to:

  • authentication and access control;
  • account verification;
  • encrypted communications;
  • secure infrastructure configuration;
  • separation of user access;
  • logging and monitoring;
  • backup and recovery;
  • vulnerability and dependency management;
  • restricted administrative access;
  • secure software-development practices; and
  • incident response.

Security measures are reviewed as HealthLynk and the risks facing the Service develop.

No internet-connected service can provide an absolute guarantee against every possible security incident, but HealthLynk will continuously work to maintain safeguards appropriate to the sensitivity of the information entrusted to it.

Users also have a responsibility to protect their passwords, email accounts and devices from unauthorised access.

20. Personal Information Security Compromises

Where HealthLynk has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, HealthLynk will investigate and take appropriate steps to contain and address the incident.

HealthLynk will notify the Information Regulator and affected data subjects where and in the manner required by applicable law.

Notifications to affected people will, where required, provide information reasonably necessary to help them protect themselves against potential consequences of the compromise.

21. Your Privacy Rights

Subject to applicable law and appropriate identity verification, you may have the right to:

  • ask whether HealthLynk holds personal information about you;
  • request access to personal information HealthLynk holds about you;
  • request correction of inaccurate, incomplete, misleading or outdated information;
  • request deletion or destruction of information HealthLynk is no longer authorised to retain;
  • object to certain processing;
  • withdraw consent where processing depends on consent;
  • request restriction or cessation of processing where provided by law;
  • lodge a complaint about HealthLynk's processing of your information; and
  • lodge a complaint with the Information Regulator.

Some requests may be subject to lawful limitations, including requirements relating to the rights and privacy of other people.

HealthLynk may require reasonable proof of identity before providing access to sensitive information.

22. How to Exercise Your Privacy Rights

Privacy requests may be submitted to:

HealthLynk (Pty) Ltd Email: YangaSodoza@outlook.com Telephone: 074 663 3106 Address: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570

Please provide enough information for us to identify the relevant account or record and understand the request.

Do not send unnecessary medical information merely to identify yourself.

Where a prescribed POPIA or PAIA procedure applies, HealthLynk may ask you to complete the appropriate form.

23. Information Officer

HealthLynk's Information Officer is responsible for overseeing HealthLynk's compliance with applicable personal-information and access-to-information requirements.

Information Officer: Yanga Sodoza (Director / Head of Private Body) Email: YangaSodoza@outlook.com Telephone: 074 663 3106

The Information Officer's details will be updated after the applicable registration process has been completed.

24. Information Concerning Another Person

HealthLynk's family and managed-profile functionality may mean that more than one person's rights are relevant to a particular record.

Having access to another person's profile does not give a user an unrestricted right to use, disclose, alter or delete that person's information.

When considering a request affecting another person's information, HealthLynk may need to verify:

  • the identity of the requester;
  • the identity of the data subject;
  • the relationship between them;
  • the requester's authority;
  • existing profile claims and permissions; and
  • the rights and legitimate interests of all affected persons.

HealthLynk may decline or limit a request where granting it would unlawfully interfere with another person's rights.

25. Automated Decision-Making and Artificial Intelligence

HealthLynk is primarily an information-management platform.

HealthLynk does not currently use a person's health information to make solely automated decisions that determine medical treatment, medical eligibility, insurance eligibility, employment eligibility or similar decisions producing significant legal or personal consequences.

If HealthLynk introduces artificial-intelligence, automated extraction, summarisation or decision-support features in future, the privacy and safety implications of those features will be assessed before deployment.

Where such functionality materially changes the processing of personal information, this Privacy Policy will be updated and additional notice or consent will be provided where required.

Automated functionality will not turn HealthLynk into a healthcare professional and must not be relied upon as a substitute for professional medical advice.

26. De-Identified and Aggregated Information

HealthLynk may create statistical or aggregated information for purposes such as understanding service usage, capacity planning, reliability, security and product improvement.

Where information is de-identified, HealthLynk will take appropriate steps to prevent it from being used to identify an individual.

HealthLynk will not represent identifiable health information as anonymous merely because obvious identifiers such as a name have been removed.

Research involving identifiable or re-identifiable health information will not automatically be treated as ordinary product analytics and will be subject to any additional legal, ethical and consent requirements that apply.

27. Organisational and Care Accounts

HealthLynk may offer services to healthcare organisations, care organisations, sponsors, non-profit organisations or other entities.

The privacy roles of HealthLynk and the organisation may depend on the particular service.

For example, an organisation may in some circumstances be the responsible party for information it instructs HealthLynk to process, while HealthLynk acts as its operator.

HealthLynk may remain a responsible party for separate processing that HealthLynk independently determines, such as account security, platform administration or HealthLynk's own legal obligations.

Where appropriate, these responsibilities will be addressed in additional data-processing or service agreements.

28. Links and Third-Party Services

HealthLynk may contain links to services operated by other organisations.

A third-party service is responsible for its own privacy practices where HealthLynk does not determine that processing.

Users should review the relevant third party's privacy information before providing personal information directly to that service.

29. Changes to This Privacy Policy

HealthLynk may update this Privacy Policy when the Service, our processing activities, service providers, legal obligations or privacy practices change.

The current version will be published on the HealthLynk website with its effective date and version number.

Where a change materially affects how sensitive information is processed or otherwise requires additional notice or consent, HealthLynk will take appropriate steps before the new processing begins.

Previous versions may be retained for governance and accountability purposes.

30. Complaints

We encourage you to contact HealthLynk first if you believe your personal information has been handled incorrectly so that we can investigate the matter.

HealthLynk privacy contact

HealthLynk (Pty) Ltd Registration Number: 2026/646559/07 Email: YangaSodoza@outlook.com Telephone: 074 663 3106 Address: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570

You also have the right to lodge a complaint with the Information Regulator (South Africa).

Information about complaints and the Regulator's current contact details are available through the Information Regulator's official website and eServices portal.

Information Regulator general enquiries: enquiries@inforegulator.org.za Telephone: 010 023 5200 Website: inforegulator.org.za

31. Relationship With Our Other Policies

This Privacy Policy should be read together with:

  1. the HealthLynk Terms of Service;
  2. the Refund, Cancellation and Subscription Policy;
  3. the PAIA Manual;
  4. the Cookie Policy;
  5. the Medical Disclaimer; and
  6. the Security and Data Protection Statement.

Where applicable law provides a data subject with greater protection than this Policy, the applicable legal requirement will prevail.

32. Contact HealthLynk

For privacy, account or personal-information enquiries:

HealthLynk (Pty) Ltd Registration Number: 2026/646559/07 Director: Yanga Sodoza Website: healthylynk.com Email: YangaSodoza@outlook.com Telephone: 074 663 3106 Business address: 131 Eoan Ave, Eden Heights, Scottsdene, Kraaifontein, Cape Town, Western Cape, South Africa, 7570

HealthLynk (Pty) Ltd Your health information. Organised around you.