PATH 24 LABORATORIES
Privacy Policy
Effective Date: 10 March 2023
Introduction
Path 24 Laboratories is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.path24.co.za, use our services, or interact with us in any other way. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.
Information We Collect
We may collect and process the following types of information from you in a variety of ways (both directly and indirectly), including, but not limited to, when you visit our website, use our services, register an account, respond to a survey, fill out a form, or in connection with other activities, services, features or resources we make available.
Google Single Sign-On (SSO) Information
We provide the option for users to log in using their Google account. If you choose this option, we will collect your email address from Google solely for the purpose of authenticating your identity and providing access to our Services. This information is used exclusively for login purposes and is not shared with third parties except as required to provide our Services. You may revoke our access to your Google account at any time via your Google account settings. You are responsible for maintaining the security of your Google account and for any activity performed using Google SSO.
Personally Identifiable Information
Users may be asked for Personally Identifiable Information as appropriate, which includes, but is not limited to, name, email address, residential address, and phone number.
Health Information
We collect information about your medical history, test results, pathology reports, and other health-related information necessary for our services. Users may also be asked to provide Sensitive Personal Information including financial information such as preferred banking channels, payment methods, and card details.
Technical & Usage Data
We may collect non-personal identification information including browser name, device type, operating system, internet service provider, IP address, and other technical information about how you access and use our website or mobile application.
Web Browser Cookies
We may use “cookies” to enhance user experience. Your web browser places cookies on your device for record-keeping purposes. You may set your browser to refuse cookies or alert you when cookies are sent; however, some features or functionalities of the website may not function properly if you do so.
Geo-Location Information
We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device’s settings.
How We Use Your Information
We may collect and use your personal information for the following purposes:
- To provide services: To process and analyze blood tests, provide test results, and deliver related medical services.
- To improve customer service: Information you provide helps us respond to customer service requests and support needs more efficiently.
- To personalize user experience: We may use information in the aggregate to understand how our users as a group use our services and resources.
- To improve our website: We may use feedback you provide to improve our products and services.
- To process payments: We may use the information you provide when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service.
- To send periodic emails: We may use your email address to send information and updates pertaining to your orders or requests. If you opt in to our mailing list, you may unsubscribe at any time by contacting us via our website.
- To assist with order management: We may use location data from our app to share approximate ETA and distance when phlebotomists are on their way for an order, and to facilitate order status confirmations, delivery notifications, alerts, and applicable refunds.
- For legal and regulatory compliance: To comply with applicable laws, regulations, and industry standards, and to respond to legal requests and prevent harm.
How We Protect Your Information
We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. Our databases and information are stored on secure servers with appropriate firewalls, and all communications on our website are secured using 256-bit encryption.
We take all necessary precautions to protect your personal information both online and offline, implementing reasonable security practices including managerial, technical, operational, and physical security control measures commensurate with industry standards.
However, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the secrecy of your account credentials. If you suspect any unauthorised use of your account, please notify us immediately at info@path24.co.za.
Disclosure of Your Information
We may share your information with third parties in the following situations:
- With your consent: We may share your information with third parties if you have given us your explicit consent to do so.
- For processing and analysis: We may share your information with laboratories, medical professionals, and other entities involved in processing and analysing your tests.
- Service providers: We may share your information with third-party service providers who perform services on our behalf, such as billing, payment processing, and data analysis.
- Legal and compliance: We may disclose your information if required to do so by law or in response to a valid request from a law enforcement or regulatory authority.
- Business transfers: In the event of a merger, acquisition, or other business transaction, we may transfer your information to another entity as part of that transaction.
Important: No mobile or messaging consent information will be shared with third parties or affiliates for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Third-Party Websites
Users may find advertising or other content on our website or mobile application that links to the sites and services of our partners, suppliers, advertisers, sponsors, licensors, and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our website. Browsing and interaction on any other website, including websites that link to ours, is subject to that website’s own terms and privacy policies.
Your Rights as a Data Subject
Depending on your location and applicable law (including GDPR where applicable), you may have the following rights regarding your personal information:
- Right to be Informed: You have a right to be informed about the manner in which any of your personal data is collected or used, as described in this Policy.
- Right of Access: You have a right to access the personal data you have provided by requesting us to provide you with the same.
- Right to Rectification: You have a right to request that we amend or update your personal data if it is inaccurate or incomplete.
- Right to Erasure: You have a right to request deletion of your personal information, subject to certain legal obligations.
- Right to Restrict Processing: You have a right to request that we temporarily or permanently stop processing all or some of your personal data.
- Right to Object: You have a right, at any time, to object to our processing of your personal data, including an absolute right to object to processing for direct marketing purposes.
- Right to Data Portability: You have a right to request a copy of your personal data in electronic format and to transmit that data for use with another third-party product or service.
- Right Not to Be Subject to Automated Decision-Making: You have a right not to be subject to a decision based solely on automated processing, including profiling.
To exercise any of these rights, please contact us using the contact details provided below.
Data Security
We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no data transmission over the internet or data storage system can be guaranteed to be 100% secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website or by sending you an email. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the website or application following the posting of changes constitutes your acceptance of those changes.
Grievance Redressal
If you have any complaints or concerns regarding privacy, the use of or access to your information, or errors in your user data, please contact us at the details below. All requests will be addressed no later than thirty (30) days from the date such a request is made.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Path 24 Laboratories
Phone: 010 026 8021
Email: info@path24.co.za
By using our services or providing us with your personal information, you agree to the terms of this Privacy Policy.