Privacy Policy

Last updated: 14 October 2026

DOSIST® is a brand operated in partnership with a registered pharmacy in South Africa. We are committed to protecting your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and all applicable South African legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, telehealth consultation services, and purchase compounded peptide therapy products.

1. Information We Collect

We collect the following categories of personal information:

Personal Information

• Full name and surname
• Email address
• Phone number
• Physical address (for delivery purposes)
• Date of birth
• South African ID number (where required for prescription dispensing)

Clinical Information

• Medical history and current health conditions
• Current medications and supplements
• Allergies and contraindications
• Eligibility quiz responses
• Telehealth consultation notes and outcomes
• Prescription details

Payment Information

• Transaction records processed via PayFast
• Order history and billing details

Technical Information

• IP address and browser type
• Device information
• Pages visited and interaction data
• Cookies and similar tracking technologies

2. How We Use Your Information

Your personal information is processed for the following purposes:

• Treatment: To facilitate telehealth consultations, issue prescriptions, compound and dispense peptide therapy products, and provide ongoing medical supervision.
• Billing and Payments: To process transactions via PayFast, manage orders, issue invoices, and handle refunds where applicable.
• Communication: To send order confirmations, delivery updates, treatment-related information, and respond to your enquiries.
• Legal Compliance: To comply with SAHPRA regulations, the Pharmacy Act, HPCSA guidelines, and other applicable South African laws governing the dispensing of compounded medicines.
• Service Improvement: To analyse anonymised usage data to improve our website, services, and patient experience.

3. Data Storage and Retention

Your personal and clinical information is stored using Google Workspace (Google Sheets and Gmail) and our secure email systems. Data is retained for the following periods:

• Clinical records: Retained for a minimum of 6 years after the last consultation, in accordance with the Health Professions Act and Good Pharmacy Practice guidelines.
• Financial records: Retained for 5 years as required by the Tax Administration Act.
• Marketing data: Retained until you withdraw consent or request deletion.
• Website analytics: Retained in anonymised form indefinitely.

4. Third-Party Sharing

We do not sell your personal information. We may share your data with the following third parties only as necessary to provide our services:

• PayFast (Pty) Ltd: For secure payment processing. PayFast's own privacy policy governs how they handle your payment data.
• Google LLC: For data storage via Google Workspace. Data may be processed on servers outside South Africa, subject to Google's data processing agreements and adequate safeguards.
• Consulting Medical Practitioners: Prescribing doctors involved in your telehealth consultation will have access to your clinical information.
• Courier Services: Your name, address, and contact number will be shared with our delivery partners for order fulfilment.
• Regulatory Authorities: We may be required to share information with SAHPRA, the South African Pharmacy Council (SAPC), or HPCSA if required by law.

5. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, you have the right to:

• Be informed that your personal information is being collected and the purpose thereof.
• Request access to your personal information held by us.
• Request correction or deletion of your personal information.
• Object to the processing of your personal information.
• Lodge a complaint with the Information Regulator if you believe your rights have been infringed.
• Withdraw previously given consent (note: this may affect our ability to provide treatment).

To exercise any of these rights, please contact us at hello@dosist.co.za. We will respond to your request within 30 days.

6. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

• Essential cookies: Required for the website to function correctly (e.g., session management).
• Analytics cookies: Used to understand how visitors interact with our website. This data is collected in anonymised form.

You may disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

7. Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or damage. These include encrypted communications (HTTPS/TLS), access controls, and regular review of our data handling practices.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

9. Contact Us

For any questions or concerns regarding this Privacy Policy or your personal information, please contact:

DOSIST® (Information Officer)
Email: hello@dosist.co.za

You may also lodge a complaint with the Information Regulator of South Africa:
Website: https://inforegulator.org.za