Privacy policy

1. Who is responsible for your information

LIFEPRINT (Pty) Ltd is the responsible party for the personal information processed through lifeprinthealth.co.za. Our information officer is Dr Nassim Sherif, who you can reach at lifeprintonline@gmail.com or 072 108 8689.

2. What we collect

Information you give us

• Account details: your name, email address and password (stored only in encrypted form).
• Profile details: date of birth, sex, South African ID or passport number, mobile number and address. A lab cannot accept a request form without these, so we need them before we can issue one.
• Health background: conditions, medicines and supplements you choose to tell us about, so your report can take them into account.
• Results: the lab result files you upload, and the values we read from them.
• Messages: anything you send us by email.

Information we create

• your tests, lab request forms and their status;
• the reports we produce from your results.

Payment information

PayFast processes your payments. We receive confirmation that you paid and the amount, but never your card or bank details.

Technical information

We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies. Our hosting provider keeps standard server logs, such as IP address and browser type, to keep the service secure and working.

3. Your health information

Your health information is special personal information under POPIA, and we treat it with extra care. We process it only to provide the service you asked for, on the basis of your consent and of our role as a medical practice issuing your lab request form. You give that consent when you create an account and start a test, and you can withdraw it at any time (see section 8).

4. How we use your information

• to create and run your account;
• to issue your lab request form with the correct details;
• to read your results and write your report;
• to show your results over time;
• to email you your forms, reports and service messages;
• to take payment and keep financial records the law requires;
• to keep the service secure and fix problems.

We do not sell your information, and we do not use it for advertising. We will only send you marketing if you ask for it.

5. Who we share it with

We share your information only where the service needs it:

• The lab you choose (Lancet, Ampath or PathCare) receives the request form you hand in, which carries your name, identity number, date of birth, contact details and the tests requested.
• Supabase stores our database and your uploaded files, in the European Union.
• Vercel hosts our website and runs our software, in the United States and other regions.
• Anthropic provides the artificial intelligence that reads your result files and drafts your report, in the United States. It processes your results on our instructions and does not use data sent through its commercial service to train its models.
• Resend sends our emails, in the European Union.
• PayFast processes payments, in South Africa.

These providers act as our operators. They may only process your information on our instructions and must keep it secure and confidential. We will also disclose information where the law requires it.

6. Sending information outside South Africa

Some of our operators store or process information outside South Africa, as listed above. We only use providers that are bound by data protection laws or agreements that give protection substantially similar to POPIA, as section 72 of POPIA requires. By using LifePrint you also consent to these transfers.

7. How long we keep it

• We keep your account, results and reports while your account is open, so you can track your health over time.
• If you ask us to delete your account, we delete your profile, results, reports and files within 30 days.
• We keep lab request forms issued under our practice for as long as the rules for health records require, currently at least six years, and payment records for five years as tax law requires.

8. Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you and get a copy;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, subject to section 7;
• object to how we process your information;
• withdraw your consent to processing your health information;
• complain to the Information Regulator.

You can update most of your details yourself on your dashboard. For anything else, email lifeprintonline@gmail.com from the address on your account. We may ask you to confirm your identity, and we will respond within 30 days. If you withdraw consent, we cannot issue new forms or reports, but this does not affect processing that already took place.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Regulator of South Africa at inforegulator.org.za.

9. How we protect it

• All traffic to and from the site is encrypted (HTTPS).
• Database rules mean each account can only read its own tests, results and reports.
• Result files are kept in private storage and are never publicly reachable.
• Only people who need access to run the service have it.

If a security breach affects your information, we will tell you and the Information Regulator as soon as reasonably possible, as POPIA requires.

10. Children

LifePrint is for adults aged 18 and over. We do not knowingly collect information about children.

11. Changes to this policy

We will post any change here with a new date, and email you if the change materially affects how we use your information.