Privacy notice.
How we handle personal, health and financial information under the Protection of Personal Information Act (POPIA).
Responsible parties
StrokeRehabCo (Pty) Ltd is responsible for admission enquiries. Sukuma Uhambe NPC is responsible for financial assistance applications. Where an applicant seeks both, the two organisations share only the information needed to process the linked admission and assistance request.
What we collect
Admission enquiries: patient name and age, diagnosis and injury date, mobility, medical conditions, location, caregiver contact details and optional medical records. Assistance applications: applicant and patient names, contact details, bank statements, payslips, affordability and a family motivation.
Special personal information
Health information is special personal information under POPIA. We process it only with your explicit consent, given through the consent checkboxes on each form, and only to assess rehabilitation suitability and plan care. Financial documents are used only to assess assistance.
How it is stored and protected
- Forms are submitted over an encrypted connection.
- Details are stored in a private database and uploaded files in private, access-controlled storage. Nothing is publicly visible or browsable.
- Access is limited to authorised admissions, clinical and assistance staff.
- Uploads are limited to PDF, JPG and PNG files up to 10 MB.
- We never sell your information or use it for marketing.
Retention
We keep information only for as long as needed to handle your enquiry or application, provide care if admitted, or meet legal and healthcare record-keeping obligations. It is then securely deleted.
Patient treatment and caregiver notes (POPIA statement)
Once a patient is admitted, our clinical staff record treatment notes and appointments, and caregivers invited by the care team record daily notes for parts of the patient’s routine. These notes are health information, which is special personal information under POPIA.
- Purpose: notes are used only to plan, deliver and coordinate the patient’s rehabilitation and daily care, and to meet healthcare record-keeping duties (POPIA sections 26 and 32 permit health professionals and care institutions to process health information for care and treatment).
- Who can see them: authorised StrokeRehabCo staff can see all notes for patients in their care. A caregiver can see only the notes for the patient they were invited for. Notes are not visible to the public and are never shared with Sukuma Uhambe unless needed for a linked assistance application and with consent.
- Caregiver access: caregivers are invited by email by the care team and sign in with their own account. Access is removed when it is no longer needed.
- Integrity: notes cannot be edited or deleted once saved, so the care record stays accurate. Corrections are added as a new note.
- Security: notes are sent over an encrypted connection and stored in a private, access-controlled database.
- Retention: notes are kept for as long as healthcare record-keeping rules require, then securely deleted.
- Your rights: patients (or their legal representatives) may ask to see or correct their notes using the contact details below.
Read the full POPIA review for patient and caregiver notes, including the consent form and how caregivers join the portal.
Your rights
You may request access to, correction of or deletion of your information, object to processing, or withdraw consent at any time (this does not affect processing already done). You may also lodge a complaint with the Information Regulator of South Africa (inforeg.org.za).
Contact
For privacy questions or requests, email info@strokeretherapycompany.com.

