POPIA Notice

Your information. Your rights.

How the Protection of Personal Information Act 4 of 2013 protects you at Tru Medical Care, and exactly how to use your rights.

Last updated 15 September 2026  ·  Version 2026-09-15

01

Responsible party & Information Officer

Tru Medical Care is the responsible party for your personal information. Our Information Officer makes sure we comply with POPIA, and handles your requests personally.

Information Officer
Dr Ofentse Monnaruri
Responsible party
Tru Medical Care Inc
Registration
2026/226739/21
Location
Johannesburg, Gauteng, South Africa

What we collect, why, who we share it with and how long we keep it: see our Privacy Policy.

02

Your rights under POPIA

As a data subject, you can:

Be informed

Know when your personal information is being collected, and why.

Section 18

Access your information

Ask whether we hold personal information about you, and request a copy of it.

Section 23

Correct or delete

Ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained. Records we must keep by law are corrected or annotated rather than deleted before their retention period ends.

Section 24

Object

Object, on reasonable grounds, to how we process your personal information.

Section 11(3)

No direct marketing

We do not send direct marketing, and we never sell your information.

Section 69

A human decides

No decision about your care is made by automated processing alone. Every clinical decision is made by a registered practitioner.

Section 71

Complain to the Information Regulator

If you are unhappy with how we handle your information, you can lodge a complaint with the Regulator. See their details below.

Section 74
03

How to make a request

Access, correction, deletion, objection or withdrawal of consent: every request follows the same three steps.

  1. Email our Information Officer

    Send your request to omonnaruri@gmail.com with the subject line “POPIA request”, including:

    • Your full name and the email address on your patient account
    • An appointment reference if you have one (e.g. TMC-2026-XXXXXXXX)
    • What you are asking for, and any details that help us find the information
  2. We confirm it’s you

    Health records are confidential, so we verify your identity before we disclose, correct or delete anything. We may ask you to confirm details already on your record.

  3. We respond within 30 days

    If we need more time, or cannot fully comply (for example because the law requires us to keep a record), we will tell you why. Access to your own personal information is free of charge.

Prefer a formal form? Use Form 1 (objection) or Form 2 (correction or deletion) under the POPIA Regulations, available from the Information Regulator’s website.

You can check the details we hold on file at any time: sign in and open My Profile.

05

Security compromises

If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as soon as reasonably possible, as section 22 of POPIA requires.

Our notice will explain:

  • What happened
  • What information was affected
  • What we are doing about it
  • What you can do to protect yourself
06

Information Regulator

We would appreciate the chance to resolve your concern first, so please contact our Information Officer before you approach the Regulator. If you are still not satisfied, you may lodge a complaint.

Independent regulator
The Information Regulator (South Africa)
Visit inforegulator.org.za