Privacy notice

This notice explains how the practice handles personal information collected through this website. It does not cover the clinical records kept about you as a patient, which are held under the rules that apply to medical records and are governed by the relevant health professions council.

If you use the enquiry form, the practice receives your name, your phone number, your email address, the reason you selected and the message you wrote. Nothing else is collected through the form.

The form asks you not to send symptoms, clinical details or test results. Please do not. If you do send them, they will be treated as confidential, but the form is not a secure clinical channel and is not the right place for them.

The details are used for one purpose: to reply to your enquiry and, if that is what you asked for, to arrange an appointment. They are not used for marketing, they are not added to a mailing list and they are not sold or shared with anyone for their own purposes.

The practice relies on your consent, which is why the consent checkbox on the form is not ticked for you. You may withdraw it at any time, and the request below explains how.

Your enquiry is sent by email to the practice and is seen by Dr Nalla and the reception staff who manage the diary.

Two service providers handle the message in transit: the company that hosts this website and delivers the form submission, and the email provider that carries the message to the practice. They process it on the practice instruction only, and they do not use it for their own purposes.

Your enquiry is not stored on this website. It is delivered to the practice email account and held there.

The message itself lives in the practice email account. Enquiries that do not become appointments are deleted once the enquiry is closed. If you become a patient, the relevant information is transferred to your clinical record and is then kept for the period that applies to medical records.

This site sets no cookies of its own and carries no advertising or analytics trackers. Fonts are served from this website rather than from a third party, so loading a page does not tell another company that you visited.

The map on the contact page is the one exception, and it is not loaded until you click to open it. Once you do, Google receives the request in the ordinary way and its own terms apply.

Under POPIA you may ask what personal information the practice holds about you, ask for it to be corrected, ask for it to be deleted where there is no obligation to keep it, withdraw your consent, and object to how it is being used. You may also complain to the Information Regulator of South Africa.

To make any of those requests, contact the practice using the details below. The practice will respond within a reasonable period, and will need to confirm your identity first so that information is not disclosed to the wrong person.

The website is served over an encrypted connection, and the form submission is encrypted in transit. No system is perfect, and email is not a secure channel for clinical information, which is why the form asks you not to send it.

For any request about your personal information, or to withdraw consent, contact the practice:

• info@drnalla.co.za
• 011 837 4515

Requests are handled by the practice and reach the information officer directly.