LOGBOX ACADEMIC APPLICATION

PRIVACY POLICY

1. Interpretation and Definitions:
   1. Words that are defined in the Protection of Personal Information Act No.4 of 2013 ("POPI") but are not defined in this Privacy Policy will bear the same meaning as in POPI. For ease of reading, such terms have been capitilised in this Privacy Policy.
   2. Words that re written in initial capitals but are not defined in the Act nor this Privacy Policy shall bear the same meaning as is set out in the Terms and Conditions of Use.
   3. Reference to these Terms shall mean the Terms and Conditions of Use as set out on the App.
2. Introduction:
   1. Logbox recognises the importance of protecting the Data Subject's privacy in respect of the Data Subject's Personal Information collected by Logbox when the Data Subject uses this App.
   2. In adopting this Privacy Policy, Logbox wish to balance our legitimate business interests and Data Subject's reasonable expectation of privacy. Accordingly, Logbox will take appropriate and reasonable technical and organisational steps to prevent unauthorised access to, or disclosure of the Data Subject's Personal Information. However, Logbox does not guarantee that the Data Subject's Personal Information shall be 100% secure.
   3. Where there are reasonable grounds to believe that the Data Subject's Personal Information has been accessed or acquired by any unauthorised person, Logbox will notify the Data Subject and the Information Regulator which is appointed in terms of POPI. Logbox will delay notifying the Data Subject of the unauthorised access or acquisition of the Data Subject Personal Information if a public body responsible for detection, prevention or investigation of offences or the Information Regulator informs us that notifying the Data Subject will impede a criminal investigation. When Logbox notify the Data Subject of the compromise to the security of the Data Subject's Personal Information, Logbox will provide the Data Subject with sufficient information to allow the Data Subject to take protective measures against the potential consequences of the compromise.
3. The Data Subject agreement in relation to the Data Subject's Personal Information:
   1. By continuing to use this App:
      1. the Data Subject agrees to the terms set out in this Privacy Policy. If the Data Subject does not agree with this Privacy Policy, please do not continue to use the App and/or the Services; and
      2. the Data Subject agrees that Logbox may Process the Data Subject's Personal Information for, amongst other things, (i) the purposes of providing the Data Subject with access to the Services, and the App; and (ii) for any of the purposes listed at clause 7 below.
4. Logbox reserves the right to vary the terms of this Privacy Policy. It is the Data Subject's responsibility to familiarise itself with the most recent version of this Privacy Policy each time the Data Subject accesses the App.
5. What type of Personal Information do Logbox Process?
   1. The Personal Information that Logbox may Process includes information necessary for our legitimate business interest and the categories of Personal Information identified in POPI. This may include (amongst other things):
      1. in the case of Patient Users: the Data Subject's name and identity number, e-mail and physical addresses, postal address, contact information, information relating to the Data Subject's race, gender, ethnic or social origin, age, employment details, dependent's details, referring doctor's details, medical and medical aid details, views or preferences and the pages of the App viewed by the Data Subject;
      2. in the case of Practice Users: the Data Subject's name and identity number, e-mail and physical addresses, postal address, contact information, information relating to the Data Subject's race, gender, ethnic or social origin, age, details relating to the Data Subject's medical practice, and the Data Subject's registration details at the HPCSA, views or preferences and the pages of the App viewed by the Data Subject;
   2. Logbox will limit the types of Personal Information Processed to only that to which the Data Subject has given its Consent and which is necessary for our legitimate business interests.
6. When will Logbox Process the Data Subject's Personal Information?
   1. Personal Information may be Processed by us when:
      1. the Data Subject registers as a user on the App;
      2. the Data Subject registers to receive any notifications from us in respect of our Email Authentication Service and/or our Text Message Authentication Service;
      3. the Data Subject make use of the Services on the App;
      4. Logbox carries out demographic research; and
      5. The Data Subject browses the App.
   2. The Data Subject acknowledge that all Personal Information Processed by Logbox may be stored by us and used, inter alia, for any of the purposes, but not exclusively, listed in clause 7 below.
7. How do Logbox Use the Data Subject's Personal Information?
   1. Logbox may use the Data Subject's Personal Information:
      1. as a Patient User, to notify and authenticate the Data Subject's identity when the Data Subject views and accesses its Profile;
      2. as a Practice User, to check that the Data Subject is duly registered with the HPCSA;
      3. to verify the Data Subject's identity on the App;
      4. for security, administrative and legal purposes;
      5. for customer relations; and
      6. for helping us in any future dealings with the Data Subject.
8. Sharing of the Data Subject's Personal Information:
   1. Logbox will not disclose any of the Data Subject's Personal Information to third parties, except when Logbox has the Data Subject's consent/permission to do so or where Logbox is required to do so in terms of law;
   2. The Data Subject agrees that the Data Subject's de-identified aggregate Personal Information may be shared under the following circumstances:
      1. to our holding companies, subsidiary companies, agents, advisers, service providers and suppliers;
      2. to monitor web traffic: we servers serving the App automatically collect information about pages the Data Subject visit. This information is used for internal review, to tailor information to individual visitors and for traffic audits. This information (as well as information from third-party market researchers), on an aggregated, anonymous basis, is provided to Advertisers advertising on the App. Should the Data Subject provide Personal Information online as part of an online advertising promotion or in order to access a third party service, such information may be provided directly to the Advertiser or the third party concerned;
      3. promotions: many promotions offer opportunities to request additional information from sponsors or third parties. When the Data Subject requests more information about a particular promotion, the Data Subject's e-mail address may be shared with the sponsor of that promotion;
      4. for statistics and advertisement purposes: Logbox may perform statistical analyses in order to measure interest in the various areas of the App (for product development purposes) and to inform Advertisers as to how many consumers have seen or "clicked" on their advertising banners. Logbox may also use aggregated demographic information to allow advertising banners on the App to be targeted, in aggregate.
      5. government and law enforcement agencies: where the law requires that Logbox disclose the Data Subject's Personal Information to a party, and where Logbox have reason to believe that a disclosure of Personal Information is necessary to identify, contact or bring legal action against a party who may be in breach of the App Terms or may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users, or anyone else that could be harmed by such activities.
9. The Data Subject's rights:
   1. The Data Subject have the right to request, that Logbox correct, destroy or delete any of the Data Subject's Personal Information that Logbox have Processed in accordance with these Terms. The Personal Information that the Data Subject may request us to correct, destroy or delete is Personal Information that has been Processed in accordance with these Terms that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, obtained unlawfully or that Logbox are no longer authorised to retain.
   2. The Data Subject has the right to withdraw the Data Subject's Consent for us to Process the Data Subject's Personal Information at any time. The withdrawal of the Data Subject’s Consent can only be made by the Data Subject on the condition that the withdrawal of the Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information before the withdrawal of the Data Subject's Consent; or that the withdrawal of the Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information if the Processing is in compliance with an obligation imposed by law on us; or that the withdrawal of Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information where such Processing is necessary for the proper performance of a public law duty by a public body; or that the withdrawal of the Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information as required by law; or that the withdrawal of the Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information as required to finalise the performance of a contract in which the Data Subject is a party; or that the withdrawal of the Data Subject's Consent does not affect the Processing of the Data Subject's Personal Information as required to protect the Data Subject's legitimate interests or our own legitimate interests or the legitimate interests of a third party to whom the information is supplied.
   3. The Data Subject has the right to object to the Processing of the Data Subject's Personal Information at any time, on reasonable grounds relating to the Data Subject's particular situation, unless the processing is required by law. The Data Subject can make the objection if the Processing of the Data Subject's Personal Information is not necessary for the proper performance of a public law duty by a public body; or if the Processing of Data Subject's Personal Information is not necessary to pursue the Data Subject's legitimate interests, our legitimate interests or the legitimate interests of a third party the information is supplied to.
   4. The Data Subject has the right to object to the Processing of the Data Subject's Personal Information, at any time, if the Processing is for purposes of direct marketing other than direct marketing by means of unsolicited electronic communications and the Data Subject has not given the Data Subject's Consent for that Processing.
   5. The Data Subject has the right to not have the Data Subject's Personal Information Processed for purposes of direct marketing by means of unsolicited electronic communications from third parties unknown to the Data Subject.
   6. The Data Subject has the right not to be subjected, to a decision which is based solely on the basis of the automated Processing of the Data Subject's Personal Information intended to provide a profile of the Data Subject. Decisions that the Data Subject may not be subjected to are decisions that result in legal consequences for the Data Subject or affect the Data Subject to a substantial degree without taking appropriate measures to protect the Data Subject's legitimate interests, without being for the execution of a contract that the Data Subject has received performance for, or decisions made that are not in terms of law or of a code of conduct that specifies what appropriate measure must be taken to protect the Data Subject's legitimate interests.
   7. The Data Subject has the right to submit a complaint to the Information Regulator regarding an alleged interference with the protection of Personal Information Processed in accordance with these Terms. The Information Regulator's contact details will be published by the Government in due course in terms of POPI. When they are published POPI places a duty on Logbox to inform the Data Subject what those contact details are and Logbox will do so.
   8. The Data Subject has the right to institute civil proceedings regarding an alleged interference with the protection of the Data Subject's Personal Information Processed in accordance with these Terms.
10. Use of cookies:
    1. Cookies are pieces of information an App transfers to a user's hard drive for record-keeping purposes. Cookies make surfing the web easier for the Data Subject by saving the Data Subject preferences and, tracking the Data Subject's online habits, traffic patterns, and making sure that the Data Subject does not see the same advertisement too often. The use of cookies is an industry standard.
    2. Logbox may place a "cookie" on the Data Subject's browser to store and sometimes track information about the Data Subject.
    3. While most browsers are initially set up to accept cookies, the Data Subject can reset the Data's Subject's browser to refuse all cookies or indicate when a cookie is being sent. Please note that some parts of the App will not function properly if the Data Subject refuse cookies.
11. Use of IP address:
    1. An IP address is a number that is automatically assigned to a computer whenever it is connected to the Internet. Logbox log IP addresses, or the location of computers on the Internet.
    2. Logbox collects IP addresses for the purposes of system administration and to audit the use of the App. Logbox does not ordinarily link IP addresses to Personal Information, which means that the Data Subject session may remain anonymous. However, Logbox cannot guarantee that this will always be the case, as it may be necessary to identify a particular user when it is necessary to enforce compliance with the App Terms or to protect our App, its users or other interests.
12. Links to other sites:
    1. When the Data Subject uses the App, the Data Subject could be directed to other sites that are beyond our control. These other Logbox sites may send their own cookies to the Data Subject, collect data or solicit Personal Information. Logbox does not control the privacy policies of those third party Logbox sites.
13. Passwords and login information:
    1. The Data Subject may register the Data Subject's Personal Information with Logbox via the App.
    2. If the Data Subject registers its Personal Information, Logbox will provide the Data Subject with a user name and password.
    3. The Data Subject must not provide the Data Subject's username or password to anyone. The Data Subject is solely responsible for keeping its username or password secret.
    4. The Data Subject is solely responsible for any loss the Data Subject may suffer should any other person use the Data Subject's username or password.