PRIVACY POLICY AND POPIA PRIVACY NOTICE

Last updated: 27 August 2026

1. Introduction

Sebetsebetse Pharmacy is committed to protecting the privacy and personal information of our customers, patients, prospective customers, website visitors, suppliers, service providers, employees, job applicants and other individuals who interact with us.

This Privacy Policy explains how we collect, use, store, share and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"), applicable healthcare and pharmacy legislation, and other relevant South African laws.

For the purposes of POPIA, BORDOW (PTY) LTD, trading as Sebetsebetse Pharmacy, is the responsible party in respect of personal information processed as described in this Policy.

By using our website, contacting Sebetsebetse Pharmacy, purchasing products, requesting pharmacy services, submitting information through our website or otherwise providing personal information to us, you acknowledge that your personal information may be processed as described in this Policy.

2. What is Personal Information?

Personal information is information relating to an identifiable natural person and, where applicable under POPIA, an identifiable existing juristic person such as a company or organisation.

Personal information may include, but is not limited to:

• Names and surnames
• Identity numbers and dates of birth
• Contact details
• Email addresses
• Telephone numbers
• Residential, delivery, postal or business addresses
• Medical aid or healthcare funding information, where applicable
• Health-related information voluntarily or lawfully provided to us
• Prescription or medication-related information, where applicable
• Information relating to allergies, medical conditions or healthcare requirements where necessary for the provision of pharmacy services
• Details of products purchased or pharmacy services requested
• Billing, payment and transaction information
• Delivery and collection information
• Messages, enquiries and correspondence
• Information submitted through website forms
• Website usage information
• Internet Protocol addresses
• Device and browser information
• Account or profile information
• Marketing preferences
• Employment and recruitment information
• Any other information that can reasonably be used to identify a person or organisation

Certain health and medical information may constitute special personal information under POPIA and will be processed only where permitted by law and where reasonably necessary.

3. Information We Collect

We may collect and process personal information when you:

• Visit or use our website
• Create an account, where account functionality is available
• Browse or purchase products
• Request or use pharmacy-related services
• Submit a prescription or other healthcare information where such functionality is offered
• Request information about medication, healthcare products or services
• Place an order for delivery or collection
• Complete a contact, enquiry or customer service form
• Contact us by email, telephone, WhatsApp, social media or another communication channel
• Make a payment
• Provide medical aid or healthcare funding information where relevant
• Subscribe to newsletters, promotions or other marketing communications
• Participate in a competition, survey or promotion
• Provide feedback or submit a complaint
• Apply for employment or submit a curriculum vitae
• Supply products or services to Sebetsebetse Pharmacy
• Otherwise interact with Sebetsebetse Pharmacy in the course of our business activities

We may also receive personal information from lawful third-party sources including healthcare providers, medical schemes, payment providers, delivery providers, suppliers, business partners, regulatory bodies or service providers where appropriate and permitted by law.

4. Information Collected Automatically

When you use our website, certain technical information may be collected automatically through cookies and similar technologies.

This may include:

• Your Internet Protocol address
• Browser type
• Device type
• Operating system
• General location information
• Pages visited
• Time spent on the website
• Links selected
• Referring website
• Website interaction information
• Website performance information

We may use this information to operate, secure and improve our website, understand how visitors interact with it and measure the effectiveness of our digital services and marketing.

More information about our use of cookies is available in our Cookie Policy.

5. Why We Process Personal Information

Sebetsebetse Pharmacy may process personal information for purposes including:

• Processing and fulfilling customer orders
• Providing pharmacy and healthcare-related services
• Responding to enquiries
• Communicating with customers and patients
• Processing prescriptions where applicable and legally permitted
• Verifying information where required for the lawful supply of medication
• Providing appropriate pharmacy-related assistance
• Processing payments, refunds and transactions
• Managing delivery and collection arrangements
• Maintaining customer and transaction records
• Administering customer accounts where applicable
• Processing medical aid or healthcare funding information where relevant
• Managing product returns, exchanges and complaints
• Providing customer support
• Communicating important information about orders, services or products
• Managing relationships with suppliers and service providers
• Maintaining our business, pharmacy and administrative records
• Meeting pharmacy, healthcare, tax, accounting and regulatory requirements
• Managing recruitment and employment processes
• Improving our website, products, services and customer experience
• Conducting reporting, analytics and statistical analysis
• Sending marketing communications where legally permitted
• Preventing and detecting fraud, misuse or security threats
• Protecting our customers, staff, systems and business
• Exercising or defending legal rights
• Complying with legal, professional, regulatory and contractual obligations
• Fulfilling any other purpose reasonably connected to the reason for which the information was originally collected

We will not process personal information for an unrelated purpose unless we have a lawful basis for doing so.

6. Health Information and Special Personal Information

Because Sebetsebetse Pharmacy operates within the healthcare and pharmacy sector, we may in certain circumstances process health-related information or other special personal information.

This may include information relating to:

• Prescriptions
• Medication
• Allergies
• Health conditions
• Healthcare requirements
• Medical aid or healthcare funding
• Information necessary to provide lawful pharmacy services

We will only process special personal information where permitted by POPIA and other applicable healthcare or pharmacy legislation.

Access to this information will be limited to authorised persons who reasonably require access for the performance of their duties.

We will take appropriate steps to maintain the confidentiality, integrity and security of health-related information.

7. Lawful Processing of Personal Information

We will only process personal information where permitted under POPIA and applicable South African law.

Depending on the circumstances, we may process personal information:

• With your consent
• To enter into or fulfil a contract or transaction with you
• To comply with a legal or regulatory obligation
• Where processing is necessary for the proper provision of pharmacy or healthcare-related services
• To protect your legitimate interests
• To pursue the legitimate interests of Sebetsebetse Pharmacy or a third party, provided that your rights and interests are appropriately protected
• Where the processing is otherwise permitted or required by law

Where we rely on consent, you may withdraw that consent at any time, subject to applicable legal requirements.

Withdrawal of consent will not affect processing that took place lawfully before the consent was withdrawn.

8. Required and Optional Information

Certain personal information may be required for Sebetsebetse Pharmacy to:

• Process an order
• Dispense or supply a product where legally required
• Provide a pharmacy-related service
• Process a payment
• Arrange delivery or collection
• Respond appropriately to an enquiry
• Verify your identity
• Meet a legal or regulatory requirement

Where information is compulsory, we will indicate this where reasonably possible.

You may choose not to provide optional information. However, if you do not provide information that is reasonably necessary for a particular transaction or service, we may be unable to provide that service or complete the transaction.

9. Orders, Payments and Transactions

When you purchase products or services from Sebetsebetse Pharmacy, we may collect information required to process and fulfil your transaction.

This may include:

• Customer details
• Contact information
• Products ordered
• Billing information
• Delivery or collection details
• Payment information
• Transaction records
• Refund or return information

Payments may be processed through third-party payment service providers.

Sebetsebetse Pharmacy does not necessarily receive or retain complete payment card information where a secure third-party payment gateway is used.

Your use of a payment provider may also be subject to that provider's privacy policy and terms.

10. Prescription and Pharmacy Services

Where Sebetsebetse Pharmacy provides functionality allowing prescriptions or other pharmacy-related information to be submitted, such information will be processed for legitimate pharmacy and healthcare purposes.

Prescription information may be used to:

• Review and process a prescription
• Confirm product availability
• Communicate with you regarding your prescription
• Verify information where required
• Dispense medication in accordance with applicable law
• Maintain legally required pharmacy records
• Facilitate payment or medical aid processing where applicable
• Meet regulatory and professional obligations

Submitting a prescription through the website does not automatically guarantee that medication will be supplied.

The dispensing or supply of medication remains subject to applicable South African law, professional requirements, product availability and any necessary pharmacist review.

11. Direct Marketing

Sebetsebetse Pharmacy may send marketing or promotional communications where:

• You have provided consent
• You are an existing customer and the communication relates to products or services permitted to be marketed to you in accordance with applicable law
• The communication is otherwise legally permitted

Where consent is required, it will be requested appropriately.

You will not be required to consent to general marketing merely to submit an enquiry or complete an ordinary transaction.

You may unsubscribe from marketing communications at any time by:

• Selecting the unsubscribe option included in the communication
• Replying with an unsubscribe request where applicable
• Updating your communication preferences where functionality is available
• Contacting Sebetsebetse Pharmacy using the details provided in this Policy

Opting out of marketing will not prevent us from sending essential communications relating to an active order, prescription, transaction, account, service request or enquiry.

Sebetsebetse Pharmacy will not use sensitive health or prescription information for unrelated direct marketing purposes unless such processing is lawfully permitted.

12. Recruitment Information

When you apply for employment or provide recruitment information to Sebetsebetse Pharmacy, we may process:

• Your name and contact details
• Curriculum vitae
• Identity information
• Employment history
• Qualifications
• Professional registrations, where relevant
• Skills and experience
• References
• Salary expectations
• Availability
• Interview notes
• Other information reasonably relevant to your application

We will use this information to assess your application, communicate with you and administer our recruitment process.

Where appropriate and legally permitted, we may contact references or conduct verification checks.

Information relating to unsuccessful applicants will be retained only for as long as reasonably necessary, unless you have agreed that we may retain the information for future employment opportunities or a longer retention period is otherwise permitted by law.

13. Sharing Personal Information

Sebetsebetse Pharmacy does not sell personal information.

We may share personal information with trusted third parties where reasonably necessary for our operations, to fulfil a transaction or to provide our services.

These parties may include:

• Employees and authorised pharmacy personnel
• Pharmacists and authorised healthcare professionals where applicable
• Medical schemes or healthcare funding providers where relevant
• Payment processors and financial institutions
• Courier and delivery providers
• Website hosting and maintenance providers
• Information technology and cybersecurity providers
• Cloud storage and email providers
• E-commerce and customer management platforms
• Professional advisers
• Accountants, auditors and insurers
• Suppliers and distributors where reasonably necessary
• Marketing and communications service providers, subject to applicable privacy requirements
• Regulatory bodies
• Healthcare regulators
• Government authorities
• Law enforcement agencies
• Other parties where you have instructed or authorised us to share the information

Third parties processing personal information on our behalf are expected to maintain appropriate confidentiality, privacy and security safeguards.

We may also disclose personal information:

• Where required or permitted by law
• In response to a lawful court order
• To comply with a lawful request from a regulator or authority
• To fulfil professional or pharmacy regulatory obligations
• To investigate fraud or unlawful activity
• To protect the health, safety or rights of an individual where legally permissible
• To protect or enforce our legal rights
• In connection with a lawful business restructuring, sale, merger or transfer

14. Service Providers and Operators

Sebetsebetse Pharmacy may appoint third-party service providers to process personal information on our behalf.

Under POPIA, these service providers may qualify as operators.

Where appropriate, we will require operators to:

• Process information only in accordance with our instructions
• Maintain confidentiality
• Implement appropriate security safeguards
• Notify us of relevant security compromises
• Comply with applicable privacy and data protection requirements

The type of information shared with a service provider will be limited, where reasonably possible, to information necessary for that provider to perform its services.

15. International Transfers

Some technology providers, hosting providers, cloud platforms or other service providers used by Sebetsebetse Pharmacy may be located outside South Africa or may process information using servers situated in other countries.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with POPIA.

This may include reliance on:

• Appropriate contractual safeguards
• Applicable data protection laws
• Consent where legally appropriate
• Another lawful mechanism recognised under POPIA

16. Retention of Personal Information

Sebetsebetse Pharmacy will retain personal information only for as long as reasonably necessary or legally required.

Information may be retained in order to:

• Fulfil the purpose for which it was collected
• Complete transactions
• Provide pharmacy or healthcare-related services
• Maintain prescription, dispensing or pharmacy records where legally required
• Maintain financial and tax records
• Maintain customer service records
• Comply with healthcare, pharmacy, regulatory or professional obligations
• Resolve complaints or disputes
• Prevent fraud or misuse
• Exercise or defend legal rights
• Comply with contractual obligations

Retention periods may differ depending on the type of information and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, anonymise or otherwise dispose of it, subject to applicable law.

17. Security of Personal Information

Sebetsebetse Pharmacy takes reasonable technical and organisational measures to protect personal information against:

• Loss
• Damage
• Unauthorised destruction
• Unlawful access
• Unauthorised use
• Disclosure
• Alteration
• Accidental or unlawful processing

Our safeguards may include:

• Access controls
• Password protection
• Secure hosting and storage
• Appropriate restrictions on access to healthcare information
• Software and system updates
• Confidentiality obligations
• Staff awareness and training
• Backup procedures
• Security monitoring
• Appropriate agreements with service providers

Access to personal and health-related information will be limited to authorised individuals where reasonably practicable.

Although we take reasonable precautions, no website, email service, payment platform or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for protecting passwords and account credentials used to access online services.

18. Security Compromises

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, Sebetsebetse Pharmacy will investigate the incident and take appropriate action.

Where required by POPIA, we will notify the Information Regulator and affected individuals as soon as reasonably possible, subject to applicable legal requirements and any lawful instructions from authorities.

We may also take steps to:

• Secure affected systems
• Determine the nature and extent of the compromise
• Limit further unauthorised access
• Work with relevant service providers
• Implement corrective measures

19. Cookies

Our website may use cookies and similar technologies to:

• Enable essential website functionality
• Remember visitor preferences
• Maintain shopping or session functionality
• Improve website performance
• Analyse website traffic
• Understand visitor behaviour
• Support permitted advertising and marketing activities
• Protect the website against misuse and security threats

You may manage cookies through the website's cookie preference functionality, where available, or through your browser settings.

Disabling certain cookies may affect the functionality of the website.

Where required, non-essential cookies will only be used after the appropriate consent or preference selection has been obtained.

Please refer to our Cookie Policy for additional information.

20. Social Media and Third-Party Platforms

Sebetsebetse Pharmacy may maintain profiles or pages on third-party social media and digital platforms.

Information that you post publicly or send to us through those platforms may be processed by both Sebetsebetse Pharmacy and the relevant platform provider.

Your use of third-party platforms is also governed by the applicable provider's privacy policy and terms.

Sebetsebetse Pharmacy does not control how third-party platforms process information through their own systems.

You should avoid publicly posting confidential, sensitive, prescription, medical or unnecessary personal information on social media platforms.

Where you need to communicate sensitive health or prescription information, please use an appropriate communication channel provided by Sebetsebetse Pharmacy.

21. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, payment platforms or other services.

Sebetsebetse Pharmacy is not responsible for the privacy practices, security, availability or content of third-party websites or services that we do not control.

You should review the privacy policies and terms of relevant third-party providers before providing personal information to them.

22. Children's Personal Information

Certain products or pharmacy services offered by Sebetsebetse Pharmacy may relate to children.

Where we process the personal information of a child, we will do so only where:

• Consent has been provided by a competent person where required
• Processing is necessary or permitted under applicable law
• Processing is otherwise lawfully authorised

We will take reasonable steps to protect children's personal information and limit processing to what is appropriate for the relevant purpose.

Where an online transaction or service requires authorisation by a parent, guardian or other competent person, Sebetsebetse Pharmacy may request appropriate confirmation before proceeding.

23. Your Rights Under POPIA

Subject to applicable law, you have the right to:

• Ask whether Sebetsebetse Pharmacy holds personal information about you
• Request access to your personal information
• Request correction of inaccurate, outdated, incomplete, excessive or misleading information
• Request deletion or destruction of personal information where Sebetsebetse Pharmacy is no longer authorised or required to retain it
• Object to certain processing of your personal information on reasonable grounds
• Withdraw consent where processing is based on consent
• Object to direct marketing
• Request information relating to third parties who have had access to your personal information where applicable
• Lodge a complaint with the Information Regulator
• Institute civil proceedings where permitted under POPIA

Requests may be submitted using the contact information set out below.

We may request sufficient information to verify your identity before responding to a request. Any information requested for verification will be limited to what is reasonably necessary.

Certain rights may be restricted where Sebetsebetse Pharmacy is legally required or permitted to retain or continue processing the information.

24. How to Submit a Privacy Request

To request access, correction or deletion of personal information, withdraw consent, object to processing or raise a privacy concern, please contact Sebetsebetse Pharmacy's Information Officer.

 

Responsible party: BORDOW (PTY) LTD
Trading name: Sebetsebetse Pharmacy
Company registration number: 2024/155277/07
Information Officer: Khutjisho Nthulane Mahlako
Deputy Information Officer: [INSERT NAME, IF APPLICABLE]
Information Officer / Privacy Email: khutjisho@sebetsepharmacy.co.za
General Email: admin@sebetsepharmacy.co.za
Telephone: 010 500 9616
Physical Address: Suite 1, Unit 2 & 3 Balien Park, 453 Jan Smuts Avenue, Blairgowrie, Randburg, Gauteng, 2194
Website: http://sebetsepharmacy.co.za

Please include sufficient information for us to identify you and understand the nature of your request.

25. Complaints

We encourage you to contact Sebetsebetse Pharmacy first so that we have an opportunity to investigate and address your concern.

You also have the right to lodge a complaint with the Information Regulator of South Africa.

Information Regulator of South Africa

Physical address:
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg
2191

Telephone: 010 023 5200
Toll-free number: 0800 017 160
General email: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Website: www.inforegulator.org.za

26. Changes to this Policy

Sebetsebetse Pharmacy may update this Privacy Policy from time to time to reflect changes to:

• Our products or services
• Our website or technology
• Our business practices
• Pharmacy or healthcare requirements
• Applicable legislation
• Regulatory obligations

The updated version will be published on our website together with a revised "Last updated" date.

We encourage visitors and customers to review this Policy periodically.

27. Contact Us

If you have questions about this Privacy Policy or the manner in which Sebetse Pharmacy handles personal information, please contact:

Sebetsebetse Pharmacy
Email: help@sebetsepharmacy.co.za
Telephone: 010 500 9616
Physical Address: : Suite 1, Unit 2 & 3 Balien Park, 453 Jan Smuts Avenue, Blairgowrie, Randburg, Gauteng, 2194
Website: http://sebetsepharmacy.co.za