Privacy Policy
Last updated: August 2026
Peak Physiotherapy ("we", "us", "our") is a physiotherapy practice at 354 Fred Nicholson St, Mayville, Pretoria. We respect your privacy and are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have over it. It applies both to visitors browsing this website and to patients receiving treatment at the practice.
Who we are
Peak Physiotherapy is an independent outpatient physiotherapy practice, HPCSA Practice Number 1297422. For any privacy queries or to exercise any of the rights described below, contact us at james@peakphysio.co.za.
The information we collect
We collect a few different categories of information, depending on how you interact with us:
- Website enquiries. If you contact us through a form, email, or WhatsApp, we collect what you provide, typically your name, phone number, email address, and the content of your message.
- Booking information. When you book an appointment, we collect the details needed to schedule and manage that appointment, including your contact details and the reason for your visit.
- Patient health information. Once you become a patient, we collect and record clinical information necessary to assess and treat you, this includes your medical history, examination findings, treatment notes, and progress records. This is classified as special personal information under POPIA and is handled with additional care, described further below.
- Billing and medical aid information. Where applicable, we collect the details needed to bill your medical aid scheme directly, including your membership number and relevant claim information.
- Website usage information. Our website may collect limited technical information automatically, such as your browser type, device type, and how you navigate the site. This is covered in more detail in our Cookie Policy.
Why we collect it
We use your information to:
- Respond to enquiries and arrange appointments
- Provide physiotherapy assessment, treatment, and ongoing clinical care
- Keep clinical records as required by law and professional standards (HPCSA)
- Process billing, including direct medical aid claims where applicable
- Communicate with you about your care, such as appointment reminders
- Understand and improve how our website is used
- Meet our legal, regulatory, and professional obligations
Our legal basis for processing your information
Under POPIA, we only process personal information where we have a valid legal basis to do so. Depending on the situation, this may be: your consent (for example, when you submit a website enquiry or agree to treatment), the performance of a contract or the steps needed to enter into one (for example, arranging your care as a patient), compliance with a legal obligation (such as HPCSA record-keeping requirements), or our legitimate interests in running the practice responsibly, provided this doesn't override your own rights and interests.
Health information as special personal information
POPIA classifies health information as "special personal information," meaning it carries additional legal protection beyond ordinary personal information. We only collect and process your health information where it's genuinely necessary for your assessment, treatment, and ongoing care, or where required by law. Access to your clinical records within the practice is limited to those directly involved in providing or supporting your care.
How we protect your information
We take reasonable technical and organisational measures to safeguard the personal information we hold, appropriate to its sensitivity. Website enquiry submissions are transmitted securely and directed only to james@peakphysio.co.za. No method of electronic transmission or storage is completely secure, but we work to protect your information against loss, misuse, and unauthorised access.
Who we share your information with
We do not sell your personal information, to anyone, for any purpose. We may share it in these limited circumstances:
- With your medical aid scheme, where necessary to process a claim on your behalf
- With a referring or treating healthcare provider, where relevant to your ongoing care and with your knowledge
- With service providers who support the practice's operations (for example, hosting or administrative tools), who are only given the information needed to perform their role
- Where required by law, such as in response to a valid legal or regulatory request
Cookies and website analytics
This website uses a cookie consent banner, and analytics cookies only load if you actively accept them. You're free to decline, and doing so doesn't affect your ability to use the site or book an appointment. Full detail on exactly what we use and why is in our Cookie Policy.
How long we keep your information
We retain clinical records for the period required by South African healthcare record-keeping standards and applicable law, this is a longer retention period than for general website enquiries, in keeping with recognised requirements for health practitioners. General enquiry and booking information not connected to an ongoing patient record is kept only for as long as reasonably necessary for the purpose it was collected for.
Your rights under POPIA
As a data subject, you have the right to:
- Request access to the personal information we hold about you
- Request correction of information that's inaccurate, incomplete, or out of date
- Object to certain processing of your information, in specific circumstances
- Request that we stop processing your information where there's no longer a valid basis to continue
To exercise any of these rights, contact us at james@peakphysio.co.za. We may need to verify your identity before responding, to make sure we're not disclosing information to the wrong person.
If you're not satisfied with how we've handled your personal information, you also have the right to lodge a complaint with the Information Regulator (South Africa), the body responsible for overseeing POPIA compliance: POPIAComplaints@inforegulator.org.za, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.
Children's privacy
We do treat patients of all ages, including children, as part of our clinical services. Where a patient is a minor, we rely on the consent of a parent or legal guardian for the processing of that child's personal and health information, in line with POPIA. For general website use, we don't knowingly collect personal information directly from children without appropriate consent.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be available on this page, with the update date shown at the top.