Privacy Policy

Effective date: 25 June 2026 · Last updated: 25 June 2026

This Policy explains how Dose collects, uses, shares and protects your personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA). It applies to our website, apps and services (the “Platform”).

1. Who is responsible for your information

For the information Dose collects to operate the Platform, Dose is the responsible party. Our Information Officer can be contacted at:

• Information Officer: Elan Novick
• Email: legal@getdose.co.za
• Address: 7 The Meadows, Camps Bay, Cape Town, 8005

The independent practitioners and pharmacy are separate responsible parties for the clinical and dispensing records they create. Where they process information through the Platform on our instruction, or we process on theirs, the parties act as operators for one another under POPIA-compliant agreements.

2. Information we collect

• Account & identity: name, email, mobile number, date of birth, and South African ID/passport number (required by the pharmacy for lawful dispensing).
• Health information (special personal information): medical questionnaire responses, height/weight/BMI, conditions, medications, allergies, and documents you upload (e.g. existing prescriptions, blood results).
• Transaction information: orders, subscriptions, delivery address and instructions. Card payments are processed by our third-party payment provider; we do not store full card details.
• Technical information: device, IP address, app/usage and cookie data.

3. Why we process it, and our lawful basis (POPIA s 11)

We process personal information to: create and manage your account; route your questionnaire to an independent practitioner; facilitate fulfilment and delivery by the independent pharmacy; process payments; provide support; comply with law; and improve and secure the Platform. Our lawful bases are your consent, performance of our contract with you, compliance with a legal obligation, and our legitimate interests in operating and securing the Platform.

4. Special personal information & children (POPIA s 26–27, 34–35)

Health information is special personal information. We process it only with your explicit consent for the purpose of facilitating your care, and to enable the independent practitioner and pharmacy to provide their services. The Platform is strictly for persons 18 years or older; we do not knowingly process the information of children.

5. Who we share information with

We share your information only as needed to deliver the service:

• Independent healthcare practitioners — to review your questionnaire and provide consultations.
• The independent partner pharmacy — to dispense and deliver any prescribed medicine.
• Payment processor — to take payment securely.
• Couriers/logistics providers — to deliver your order.
• IT, hosting and communications operators — bound by confidentiality and operator agreements.
• Regulators, courts or authorities — where required by law.

We do not sell your personal information.

6. Cross-border transfers (POPIA s 72)

Some service providers (e.g. cloud hosting) may process information outside South Africa. Where this occurs, we ensure the recipient is subject to laws, binding rules or agreements that provide an adequate, POPIA-comparable level of protection.

7. Security (POPIA s 19)

We maintain appropriate, reasonable technical and organisational safeguards — including encryption in transit, access controls and vendor due diligence — to protect your information against loss, unauthorised access and disclosure. If a security compromise affecting your information occurs, we will notify you and the Information Regulator as required by POPIA.

8. Retention

We keep your information only as long as necessary for the purposes above or as required by law. Note that the independent practitioners and pharmacy are independently obliged to retain clinical and dispensing records for the periods set by the HPCSA, SAPC and the Medicines Act (generally a minimum of six years).

9. Your rights (POPIA s 5, 23–25)

You have the right to: access the information we hold; request correction or deletion; object to processing; withdraw consent (where processing is based on consent); and lodge a complaint. To exercise these rights, contact our Information Officer above. To delete your account, see our Delete account page.

You may also complain to the Information Regulator (South Africa): enquiries — inforeg@inforegulator.org.za; complaints — POPIAComplaints@inforegulator.org.za; www.inforegulator.org.za.

10. Direct marketing (POPIA s 69)

We will only send you electronic marketing with your consent or as otherwise permitted by law, and you can opt out at any time using the unsubscribe link or by contacting us.

11. Cookies

We use cookies and similar technologies to operate the Platform, remember preferences and measure usage. You can manage cookies through your browser settings.

12. Changes

We may update this Policy from time to time. Material changes will be notified through the Platform or by email, and the “Last updated” date will change.