Privacy Policy

Dr Yolandé Lambrechts Paediatrician (Pr. 0597236, MP No. 0664677), 50 George Storrar Drive, Groenkloof, Pretoria ("the Practice", "we", "us").
Last updated: 12 September 2026

1. Introduction

The Practice is committed to protecting the privacy and confidentiality of patients and their personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

This Privacy Policy explains how we collect, use, store, protect and disclose personal information when providing healthcare services and administering the Practice.

By using our services, you acknowledge that your personal information may be processed as described in this Privacy Policy.

2. Information we collect

Depending on the services provided, we may collect and process information including:

  • Your name, contact details and identification information.
  • Medical scheme or medical aid information.
  • Medical history, symptoms, diagnoses, treatment information and other health information.
  • Information relating to consultations, procedures, prescriptions, referrals and medical reports.
  • Billing and payment information.
  • Information relating to parents, guardians, dependants or other persons where necessary for the patient's care or administration.
  • Any other information reasonably required to provide healthcare or administer the Practice.

Health information is regarded as special personal information under POPIA and is treated with a high level of confidentiality and security.

3. How we use personal information

We process personal information where necessary for purposes including:

  • Providing appropriate healthcare, treatment and care.
  • Maintaining and managing patient medical records.
  • Communicating with patients and, where appropriate, their parents or legal guardians.
  • Processing medical scheme claims and obtaining payment for services.
  • Managing appointments, prescriptions, referrals and medical reports.
  • Communicating with other healthcare professionals involved in a patient's care.
  • Complying with legal and regulatory obligations.
  • Managing and administering the Practice.
  • Protecting the health, safety and best interests of patients.
  • Responding to complaints, enquiries and requests.

We will not use personal information for purposes unrelated to the provision and administration of healthcare unless permitted or required by law, or where appropriate consent has been obtained.

4. Lawful basis for processing

We process personal information on one or more of the following lawful grounds under POPIA:

  • The processing is necessary to provide healthcare services that you or your child have requested, and to carry out the resulting obligations.
  • The processing is necessary to comply with a legal obligation, including obligations under the Health Professions Act, the National Health Act, the Medical Schemes Act and the rules of the Health Professions Council of South Africa (HPCSA).
  • The processing is necessary to protect the legitimate interests of the patient, particularly their health and wellbeing.
  • You, or the person legally competent to consent on behalf of a child, have given consent.

Health information is processed by, or under the responsibility of, a registered healthcare professional who is bound by a duty of confidentiality, as permitted by section 32 of POPIA.

5. Children and legal guardians

As a paediatric practice, most of the personal information we hold relates to children. We collect and process a child's personal information with the consent of, and in communication with, a parent or legal guardian who is competent to act on the child's behalf.

Where a patient is a minor, we will communicate about their care with the parent or guardian, subject to the child's own rights to confidentiality as recognised in South African law and HPCSA guidance for older children.

6. Sharing and disclosure

We do not sell personal information. We may share personal information only where necessary, including with:

  • Other healthcare professionals, hospitals (including Life Groenkloof Hospital and Steve Biko Academic Hospital), pathology laboratories, radiology practices and pharmacies involved in your child's care.
  • Medical schemes and medical scheme administrators, for the purpose of claims and authorisations.
  • Service providers who assist with practice administration, billing, secure record-keeping and IT services, under written agreements that require them to keep information confidential and secure.
  • Regulatory bodies, courts or law enforcement where disclosure is required by law.
  • Any other party where you have given consent.

Where personal information is transferred to a service provider outside South Africa (for example, cloud-based storage), we will ensure that the recipient is subject to laws or binding agreements that provide substantially similar protection to POPIA.

7. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, destruction, damage or unlawful processing. These include physical access controls at the Practice, secure storage of paper and electronic records, password protection and restricted access to systems, and confidentiality obligations on all staff and service providers.

If we become aware of a security compromise involving your personal information, we will notify you and the Information Regulator as required by POPIA.

8. Retention of records

We retain medical records for as long as required by law and HPCSA guidelines. In general, records are kept for at least six years from the date they became dormant. Records of children are kept until at least the patient's 21st birthday. Certain records, such as those relating to occupational health or specific legal matters, may be kept for longer where required.

Once information is no longer required, it is securely destroyed or de-identified.

9. Your rights

Subject to POPIA and other applicable laws, you have the right to:

  • Be informed that we are collecting personal information about you or your child.
  • Request access to the personal information we hold, including medical records.
  • Request that inaccurate or incomplete information be corrected or updated.
  • Request that personal information be deleted or destroyed where we are no longer legally entitled or required to keep it.
  • Object, on reasonable grounds, to the processing of personal information.
  • Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
  • Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, please contact our Information Officer using the details below. We may need to verify your identity, or your authority to act on behalf of a child, before responding. A reasonable fee may be charged for copies of records in line with applicable law.

10. Our website

Our website does not require you to create an account or submit personal information to browse it. If you contact us by email or telephone, we will process the information you provide in order to respond to you.

Our website uses fonts served by Google Fonts and an embedded Google Map on the contact page. When these load, your browser sends a request to Google, which may process your IP address and set cookies in accordance with Google's own privacy policy. We do not currently use analytics or advertising cookies on this website. Should this change, this policy will be updated.

11. Information Officer

The Information Officer for the Practice is Dr Yolandé Lambrechts. Any questions, requests or complaints about this policy or the handling of personal information may be directed to:

Dr Yolandé Lambrechts Paediatrician
50 George Storrar Drive, Groenkloof, Pretoria
Tel: 068 693 1167
Email: admin@drylambrechts.com

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa), whose contact details are available at inforegulator.org.za.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practice or the law. The latest version will always be available on this page, with the date of the most recent update shown at the top.