Effective Date: 14 April 2026
MediGrid respects your privacy and is committed to protecting your personal information in accordance with applicable South African law, including the Protection of Personal Information Act, 2013 (โPOPIAโ). This Privacy Policy explains how MediGrid collects, uses, stores, shares, and protects your personal information when you use our website, place an order, contact us, upload documents, or otherwise interact with us. This Privacy Policy should be read together with our PAIA Manual, which is available separately on request and, where published, on our website.
In this Privacy Policy, โMediGridโ, โweโ, โusโ and โourโ means MediGrid and its website, services, systems, and related business operations.
For any privacy-related questions, PAIA requests, POPIA rights requests, or complaints, you can contact us at:
Email: complaints@medigrid.co.za
We may collect and process the following categories of personal information:
Where relevant to products or services offered through MediGrid, we may collect:
Health information is treated as special personal information and is handled with additional care and restricted access.
When you use our website, we may automatically collect:
We collect personal information:
We process personal information only for lawful, specific, and business-related purposes, including to:
We process personal information where:
Where MediGrid processes information concerning health, prescriptions, or similar sensitive data, we will do so only where permitted by law and where reasonably necessary for the relevant purpose. Access to such information is limited to authorised persons, service providers, or partners who require it for a lawful and necessary purpose.
We may share personal information with:
We do not sell personal information.
Where third parties process personal information on our behalf, we require them to use appropriate confidentiality, security, and data protection measures.
MediGrid may use cookies, pixels, tags, web beacons, IP logging, and similar technologies to operate the website, improve user experience, analyse website performance, measure marketing effectiveness, and protect the website against abuse or fraud. Google requires advertisers and publishers using its products to maintain a clear and prominent privacy policy that discloses data collection, sharing, and usage, including technologies such as cookies, web beacons, IP addresses, and other identifiers.
If we use Google Analytics, Google Ads, or Google Analytics Advertising Features, those tools may collect information about your interaction with our website using first-party cookies, third-party cookies, identifiers, or similar technologies. Where Google Analytics Advertising Features are used, Google requires that we disclose:
MediGrid does not use prescription information, health-condition information, or other special personal information to create personalised advertising audiences in a manner that would conflict with applicable healthcare advertising restrictions. Googleโs healthcare and medicines policies place additional restrictions on pharmacy, prescription drug, and healthcare-related advertising.
You can manage cookies through your browser settings. Disabling some cookies may affect website functionality.
Where permitted by law, MediGrid may send you marketing or promotional communications. You may opt out of receiving marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us at complaints@medigrid.co.za. We may still send you important service, order, payment, or legal notices even if you opt out of marketing.
Some of our technology providers or service providers may process or store personal information outside South Africa. Where cross-border transfers occur, we will take reasonable steps to ensure that the transfer is lawful and that appropriate protection or safeguards are in place.
We take reasonable technical and organisational steps to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include:
No system is completely secure, but MediGrid takes reasonable steps to protect the personal information in its possession or under its control.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required or permitted by law, including for legal, tax, regulatory, fraud-prevention, dispute-resolution, or business record purposes.
When personal information is no longer needed, we may delete, destroy, anonymise, or de-identify it where appropriate and lawful.
Subject to applicable law, you may have the right to:
The Information Regulator states that POPIA complaints may include unauthorised sharing of personal information, failure to secure data, unlawful collection, unlawful processing of special personal information, or failure to respond to rights requests.
To exercise any of these rights, email: complaints@medigrid.co.za
MediGrid maintains a PAIA Manual separately from this Privacy Policy. That manual explains the categories of records held by MediGrid and the process for requesting access to records in terms of PAIA. This Privacy Policy does not replace the PAIA Manual. Under PAIA, private bodies are expected to make their manuals publicly available, and access requests are made using the prescribed Form 2 to the relevant contact point for the private body.
To request a copy of our PAIA Manual or to submit a request relating to access to records, email: complaints@medigrid.co.za
Our website may contain links to third-party websites, service providers, or platforms. MediGrid is not responsible for the privacy practices, content, or security of third-party websites or services. You should review their privacy policies separately.
MediGrid does not knowingly collect personal information from children except where it is lawfully provided by a parent, guardian, or authorised person, or where otherwise permitted by applicable law.
We may update this Privacy Policy from time to time to reflect changes in law, technology, operations, or business practices. The updated version will be published on our website with the revised effective date.
If you have any questions, complaints, rights requests, PAIA requests, or concerns about this Privacy Policy or the way your personal information is handled, contact us at: