Legal
POPIA Privacy Notice
This notice explains how Curalern Health processes personal information in terms of the Protection of Personal Information Act, 4 of 2013 (POPIA), and what rights you have as a data subject.
1. Responsible party
Curalern Health is the responsible party for the personal information collected through this website. Enquiries about this notice may be sent through our contact page and will be directed to the person responsible for information matters.
2. Personal information we process
For a general educational enquiry through this website, we process:
- Full name
- Email address
- Cell number
- The nature of the enquiry you submit
When you submit the general enquiry form, these details are sent to us by email to enquiries@curalernhealth.co.za, together with the date and time of your submission and the page you submitted from. They are not stored in a website database, and they are not shared with any product provider.
The general enquiry form on this website does not ask for health information. Health information is special personal information under POPIA and is subject to stricter conditions, so please do not submit medical or chronic-condition details through that form.
Separately, where a specific product-information journey is made available and you choose to use it, the information processed will be set out clearly in that journey before you submit it, together with who will receive it. Any information that qualifies as special personal information would only be processed there with your express written consent or another lawful ground under POPIA, and only where it is genuinely necessary for the request you have made.
Separately again, if you voluntarily subscribe to Curalern Health educational updates, we process your email address together with the record of the consent you gave and your subscription status. The subscription form does not ask for your name, cell number or any health information, and none of those are collected in order to subscribe.
3. Purpose of processing
- General enquiries: to respond to your question with educational information and help you understand healthcare options. Nothing more.
- Product-information requests: where you expressly request contact about product information and consent to it, to pass the relevant information to the identified recipient so that its representative can contact you and deal with the product discussion, available options and any quotation or application process.
- Educational email subscriptions: to send you the Curalern Health educational updates, new guides and related Curalern Health content you asked for, and to administer your subscription, including confirming it and honouring unsubscribe requests. Subscribing is not a request for product information and does not cause your information to be shared with a product provider.
We do not use your information for unrelated marketing, and we do not sell it.
4. Lawful basis
Processing is based on your consent, given when you submit information, and on the need to take steps at your request. Consent to a product-information referral is separate, specific and given only in that journey. You may withdraw consent at any time, and we will stop processing your information for that purpose.
Educational email subscriptions are entirely voluntary and are processed on the basis of your specific consent, given when you tick the consent box while subscribing. You may withdraw that consent at any time by using the unsubscribe link in any email we send you, or by asking us to remove you.
5. The eight conditions for lawful processing
We aim to give effect to accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation as required by POPIA.
6. Recipients of personal information
- Service providers who help us operate this website and respond to enquiries, under confidentiality obligations.
- Where, and only where, you have expressly requested product information and consented to being contacted, the specifically identified recipient — currently Affinity Life Limited — so that its representative can contact you. You will be told this before you consent. That recipient becomes responsible for how it processes your information thereafter.
- An email-service provider acting on our behalf and on our instructions, which processes subscription information so that subscriptions can be managed and confirmed, educational emails delivered, and unsubscribe requests honoured. It may not use that information for its own purposes.
General educational enquiries are not shared with product providers. Subscribing to educational updates does not result in your information being shared with Affinity Life Limited or any other product provider. We do not transfer personal information outside South Africa unless adequate protection is in place.
7. Retention and deletion
Enquiry information is kept only as long as necessary for the purpose it was collected for, or as required by law, after which it is securely deleted or de-identified.
Subscription information is kept while you remain subscribed, and afterwards only as long as reasonably necessary to keep a record of your unsubscribe request or suppression, and to meet compliance or legal obligations.
8. Security safeguards
We take reasonable technical and organisational measures to secure personal information against loss, damage and unauthorised access, and we review these measures periodically.
9. Your rights as a data subject
- To be notified that your information is being collected.
- To request access to the personal information we hold about you.
- To request correction, deletion or destruction of that information.
- To object to processing on reasonable grounds.
- To withdraw consent at any time.
- If you have subscribed to our educational emails, to withdraw that consent and unsubscribe at any time, using the unsubscribe link in any email we send you or by asking us to remove you.
- To lodge a complaint with the Information Regulator (South Africa) if you believe your rights have been infringed.
10. Exercising your rights
Requests can be submitted through our contact page. We may need to verify your identity before acting on a request, and we will respond within a reasonable period.
11. Updates
This notice may be updated as our processing activities or the law change. The version published here is the current version.

