Nestled in the community of the Greater Edendale Area, Eden Gardens Private Hospital (EGPH) offers superb private health care facilities, and takes pride in offering its patients high quality, holistic care and treatment.
Eden Gardens Private Hospital
Effective Date: 03 November 2026
Last Updated: 03 November 2026
Website: Eden Gardens Private Hospital
Eden Gardens Private Hospital (“the Hospital”, “we”, “us” or “our”) is committed to protecting the privacy, confidentiality and security of personal information entrusted to us by patients, visitors, healthcare professionals, employees, job applicants and website users.
This Privacy Policy explains how we collect, use, process, store, disclose and protect personal information in accordance with applicable South African legislation, including:
The Protection of Personal Information Act 4 of 2013 (POPIA).
The Promotion of Access to Information Act 2 of 2000 (PAIA).
The National Health Act 61 of 2003.
Other applicable healthcare, employment and recordkeeping legislation.
This policy applies to personal information processed through our website and, where relevant, through our healthcare services and administrative activities.
Depending on your interaction with the Hospital, we may collect:
Personal and contact information
Full names and surnames.
Contact numbers and email addresses.
Identification and demographic information.
Residential or postal addresses.
Patient and healthcare information
Medical history and relevant health conditions.
Clinical assessments, diagnoses and treatment records.
Medical aid and billing information.
Emergency contact details.
Other information necessary to provide healthcare services.
Website information
Information submitted through contact and enquiry forms.
CPD event registration details.
Employment applications and uploaded CVs.
IP addresses, browser information and website usage data.
Cookie preferences and related technical information.
Health information is classified as special personal information under POPIA and receives additional protection.
We process personal information only where there is a lawful basis and a legitimate, specified purpose.
These purposes may include:
Providing medical care and associated healthcare services.
Managing patient admission, treatment, discharge and follow-up.
Responding to enquiries and requests.
Administering appointments and hospital communications.
Managing CPD events and professional registrations.
Processing employment applications.
Meeting financial, billing and medical aid requirements.
Maintaining website functionality and security.
Complying with applicable laws and regulatory obligations.
Improving services through lawful operational analysis.
We do not use patient medical information for unrelated marketing purposes without an appropriate lawful basis.
We process personal information in accordance with POPIA.
Depending on the circumstances, processing may be necessary to:
Obtain or act on valid consent.
Perform contractual obligations.
Comply with legal obligations.
Protect legitimate interests recognised by law.
Provide healthcare and manage associated services where legally permitted.
Consent is not the only lawful basis for processing personal information.
Where consent is required, it will be requested appropriately. Individuals may withdraw consent where legally applicable, although this may not affect processing already lawfully undertaken or information that must be retained by law.
The Hospital recognises the sensitive nature of medical information.
Patient information is treated as confidential and is accessed or disclosed only where authorised and legally permitted.
Medical information may be shared with treating healthcare professionals, laboratories, diagnostic service providers, medical schemes or other authorised parties when necessary for legitimate healthcare purposes.
We apply appropriate safeguards to protect patient confidentiality.
We do not publicly disclose identifiable patient information, photographs or medical details without an appropriate lawful basis and any necessary authorisation.
When visitors submit information through our website, we use that information to respond to their enquiries and provide relevant assistance.
Submission of an enquiry does not automatically constitute consent to receive marketing communications.
Website users should avoid submitting unnecessary sensitive medical information through general contact forms.
General website enquiry forms are not intended for emergency medical communications.
Our website may allow healthcare professionals to register for Continuing Professional Development (CPD) events.
Information collected may include names, professional registration details, contact information and event preferences.
We use this information to:
Process registrations and RSVPs.
Verify eligibility where required.
Communicate event information.
Maintain attendance and accreditation-related records.
Meet applicable professional and administrative requirements.
Registration information is accessible only to authorised personnel and relevant service providers.
When individuals apply for vacancies through our website, we may collect CVs, qualifications, employment histories, contact details and other application-related information.
This information is used for recruitment, candidate assessment and related lawful employment purposes.
Applicant information is retained only for as long as necessary or legally required.
Where the Hospital wishes to retain unsuccessful applicants’ details for future opportunities, it will ensure an appropriate lawful basis exists.
Our website may use cookies and similar technologies to support functionality, security, performance and visitor experience.
Where enabled, analytics services such as Google Analytics may collect information about website usage, including pages visited, device information and approximate location.
Visitors may manage cookies through their browser settings and any cookie preference controls provided on the website.
Where consent is legally required for particular technologies, the Hospital will implement appropriate consent mechanisms.
Third-party services may operate under their own privacy policies.
Personal information may be shared with authorised third parties where necessary and legally permitted.
These may include:
Healthcare professionals and medical service providers.
Medical schemes and authorised administrators.
Laboratories and diagnostic service providers.
IT, website hosting and technical support providers.
Recruitment and employment service providers.
Regulatory authorities and law enforcement agencies where legally required.
We require service providers processing personal information on our behalf to maintain appropriate confidentiality and security protections.
The Hospital does not sell patient personal information to third parties.
We are committed to implementing appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.
Measures may include access controls, authentication procedures, secure systems, staff confidentiality obligations, data backups and appropriate service-provider arrangements.
No electronic system can guarantee absolute security. We therefore assess and manage information security risks on an ongoing basis.
Where a security compromise triggers notification obligations under POPIA, we will notify the relevant parties in accordance with applicable legal requirements.
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, comply with applicable laws or meet legitimate recordkeeping obligations.
Medical records are retained in accordance with applicable healthcare legislation and professional requirements.
Recruitment records, website enquiries and event registrations are retained according to their purpose, applicable legal requirements and the Hospital’s approved retention procedures.
Information that is no longer required will be securely deleted, destroyed or de-identified where appropriate and legally permissible.
Subject to applicable legal limitations, individuals have the right to:
Request confirmation of whether their personal information is held.
Request access to personal information.
Request correction or updating of inaccurate information.
Request deletion or destruction where legally permissible.
Object to certain processing activities.
Withdraw consent where consent is the applicable lawful basis.
Lodge a complaint with the Information Regulator.
Requests may be subject to identity verification and applicable legal procedures.
The Hospital recognises that information relating to children requires additional protection.
Children’s personal information will be processed only where permitted by law, including where appropriate authorisation from a competent person or another lawful justification applies.
Access to children’s medical information is managed in accordance with applicable healthcare and privacy legislation.
Where personal information is transferred to or accessed from outside South Africa, the Hospital will ensure that the transfer complies with section 72 of POPIA and other applicable legal requirements.
Appropriate safeguards will be considered when using international technology, cloud hosting or service providers.
Our website may contain links to external websites operated by healthcare partners, professional organisations and other third parties.
The Hospital is not responsible for the privacy practices of independently operated websites.
Visitors are encouraged to review the privacy policies of external websites before submitting personal information.
Requests for access to records held by the Hospital are handled in accordance with the Promotion of Access to Information Act.
For privacy-related enquiries, requests to access or correct personal information, or concerns regarding the processing of personal information, please contact:
Physical Address: 100 Archie Gumede Drive, Masons Mill
Individuals who believe their personal information has been processed unlawfully may lodge a complaint with the Information Regulator of South Africa.
Information Regulator (South Africa)
Website: https://inforegulator.org.za
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200
The Hospital may update this Privacy Policy to reflect changes in legislation, operational requirements, technology or data processing practices.
The latest version will be published on the Hospital’s website with an updated revision date.
Continued use of the website does not replace consent where consent is legally required.
Eden Gardens Private Hospital
Committed to patient confidentiality, responsible information management and the protection of personal information.
Nestled in the community of the Greater Edendale Area, Eden Gardens Private Hospital (EGPH) offers superb private health care facilities, and takes pride in offering its patients high quality, holistic care and treatment.
Monday – Friday
15h00 – 16h00 | 19h00 – 20h00
Saturday
15h00 – 16h00 | 19h00 – 20h00
2022 © Copyright Eden Gardens Private Hospital | Built and Managed by Global Graphix
