Skip to content

Privacy Policy

How PhysioFinder collects, uses, and protects your information.

Last updated: 19 March 2026

PhysioFinder ("we", "us", or "our") operates the website physiofinder.co.za (the "Site"). This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.

1. Information We Collect

1.1 Information you provide directly

  • Contact forms: When you contact us, we collect your name, email address, and message content.
  • Listing claims: When a practice owner claims a listing, we collect your name, email address, phone number, and practice details.
  • Account registration: Name, email address, mobile phone number, and a password.
  • Payment information: Billing details processed through PayFast (Pty) Ltd. We do not store credit card numbers or bank account details on our servers.

1.2 Information collected automatically

  • Analytics data: Pages visited, time on site, referral source, device type, browser type, and approximate geographic location (city level). Collected through Google Analytics 4 (GA4) in aggregate — we do not track individual users by name or identity.
  • Cookies: Small text files stored on your device. See Section 5 below.

1.3 Practice listing data

Practice listings contain information about physiotherapy practices sourced from publicly available business profiles (Google Maps, practice websites, HPCSA records, professional directories). This is classified as business information, not personal information under POPIA.

If a listing contains personal information about an individual practitioner and they request correction or removal, we will process that request in accordance with POPIA.

2. How We Use Your Information

  • Operating and maintaining the physiotherapy practice directory.
  • Processing listing claims and verifying practice ownership.
  • Sending SMS verification codes via BulkSMS to confirm mobile numbers during account registration or listing claims.
  • Processing payments for featured listing upgrades via PayFast.
  • Responding to enquiries submitted through contact forms.
  • Website analytics — understanding how visitors use PhysioFinder so we can improve the site and user experience.
  • Serving advertisements through Google AdSense.
  • Complying with legal obligations.

3. Legal Basis for Processing (POPIA)

  • Consent: When you voluntarily submit information through forms, create an account, or claim a listing.
  • Contractual necessity: To fulfil our obligations when you purchase a featured listing.
  • Legitimate interest: To operate and improve the directory, provided this does not override your rights.
  • Legal obligation: To comply with applicable laws and regulations.

4. Third-Party Service Providers

  • Google (Analytics and AdSense): Analytics data and advertising cookies. Google's privacy policy governs how they process this data.
  • PayFast (Pty) Ltd: Payment processing for featured listings. PayFast is a licensed financial services provider regulated by the South African Reserve Bank.
  • BulkSMS: SMS delivery for phone number verification during listing claims and account registration.
  • Affiliate partners: Click and referral data when you use affiliate links (e.g. medical aid comparison services). Each partner's privacy policy governs their data processing.
  • Hosting provider: Our web hosting provider stores Site data on servers. Access is restricted to authorised personnel.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. Cookies

5.1 Essential cookies

Required for the Site to function — session management, login state, and security tokens.

5.2 Analytics cookies (Google Analytics 4)

GA4 places cookies to track website usage in aggregate. These cookies do not identify you personally. You can opt out using the Google Analytics opt-out browser add-on.

5.3 Advertising cookies (Google AdSense)

Google AdSense places cookies to serve relevant advertisements and limit ad frequency. These cookies may track browsing activity across websites that use Google advertising services.

5.4 Cookie consent

You can manage cookie preferences through the cookie consent notice displayed on your first visit, or through your browser settings. Disabling essential cookies may affect Site functionality.

6. Data Retention

  • Account data: Retained for as long as your account remains active. You may request deletion at any time.
  • Analytics data: Retained per Google Analytics default settings (14 months).
  • Contact enquiries: Retained for 12 months after the last communication, then deleted.
  • Practice listing data: Retained for as long as the listing is active. Removed upon valid request from the practitioner or practice.
  • Payment records: Retained for the period required by South African tax and financial regulations (currently five years).

7. Your Rights Under POPIA

You have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that inaccurate or incomplete information be corrected.
  • Deletion: Request that your personal information be deleted, subject to legal retention requirements.
  • Object: Object to the processing of your personal information for direct marketing.
  • Data portability: Request your data in a structured, commonly used format.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@physiofinder.co.za. We will respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za | complaints.IR@justice.gov.za

8. Data Security

We implement reasonable technical and organisational measures to protect your personal information, including SSL/TLS encryption, secure password hashing, and restricted access on a need-to-know basis. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Site is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Health Disclaimer

PhysioFinder is a directory service, not a healthcare provider. Information on the Site does not constitute medical advice. Always consult a qualified physiotherapist or healthcare provider for diagnosis and treatment of any medical condition.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Site after changes constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries, data access requests, or POPIA questions: