Privacy Policy

Last updated: 1 March 2026

Bongiwe.M Private Social Work Practice ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.

1. Information We Collect

We may collect the following types of personal information:

• Contact information: Name, email address, phone number, physical address
• Professional referral information: Referring professional's name and contact details
• Website usage data: Browser type, IP address, pages visited, cookies (see Section 6)
• Enquiry details: Information you provide via our contact form

Important: We do not collect clinical, health, or sensitive personal information through this website. All clinical information is collected and stored in accordance with SACSSP ethical guidelines and POPIA, within the confidential therapeutic relationship.

2. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and appointment requests
• To provide social work services you have requested
• To issue invoices and process payments
• To comply with legal obligations (e.g. SACSSP requirements, court orders)
• To improve our website and services
• To send relevant communications (only with your consent)

3. Legal Basis for Processing

We process your personal information based on one or more of the following grounds as defined in POPIA:

• Consent: You have given us permission to process your information
• Contractual necessity: Processing is necessary to fulfil our service agreement with you
• Legal obligation: We are required to process certain information by law
• Legitimate interest: Processing is necessary for our legitimate business interests, provided it does not override your rights

4. How We Protect Your Information

We take appropriate technical and organisational measures to safeguard your personal information, including:

• SSL/TLS encryption on our website (HTTPS)
• Secure storage of client records (physical and digital)
• Restricted access to personal information on a need-to-know basis
• Regular review of security practices
• Compliance with SACSSP record-keeping requirements

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With your consent: When you have given us explicit permission
• Legal requirements: When required by law, regulation, or court order
• Professional obligations: Mandatory reporting requirements (e.g. child protection)
• Service providers: Third-party services (e.g. email hosting, form processing) that are bound by data protection agreements

6. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies: Required for the website to function (e.g. cookie consent preference)
• Analytics cookies: Help us understand how visitors use our website (e.g. Google Analytics)

You can manage cookie preferences through your browser settings. Our cookie consent banner allows you to accept or deny non-essential cookies when you first visit the site.

7. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request correction of inaccurate or incomplete information
• Right to deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to object: Object to the processing of your personal information
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent
• Right to complain: Lodge a complaint with the Information Regulator

8. Retention of Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Clinical records are retained in accordance with SACSSP and Health Professions Council guidelines (typically a minimum of 5 years after the last consultation, or until a minor client turns 21).

9. Children's Privacy

We do not knowingly collect personal information from children under 18 through this website. Services for minors are arranged through their parent or legal guardian, and all information is handled in accordance with the Children's Act 38 of 2005.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal information.

11. Contact Us

If you have any questions about this privacy policy, wish to exercise your rights, or need to report a data breach, please contact us:

• Information Officer: Bongiwe Mkhize
• Email: lungilebongiwe17@gmail.com
• Phone: 082 845 2904
• Address: Ethembeni Medical Centre, Shop 5, Mercury House, Anton Lembede Street, Durban, KwaZulu-Natal, 4001

12. Information Regulator (South Africa)

If you are not satisfied with our response to your privacy concern, you may lodge a complaint with the Information Regulator:

• Website: inforegulator.org.za
• Email: complaints.IR@justice.gov.za
• Phone: 012 406 4818

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.