Privacy Policy

1. Who we are

ProCureMedical is an online procurement platform connecting healthcare buyers and suppliers in South Africa, operated by SymbolOne. When you use our platform, we collect and process information about you.

2. Information we collect

We collect information you provide directly, including:

• Account registration details (name, email address, password hash)
• Organisation details (company name, registration number, address, contact details)
• Supplier verification application information and supporting documents
• RFQ, quotation, and purchase order data you create or respond to
• Communications and messages sent through the platform

We also collect technical data such as IP address, browser type, device information, and usage logs to operate and improve the platform.

3. How we use your information

We use your information to:

• Operate and provide the ProCureMedical platform and its features
• Process and manage supplier verification applications
• Facilitate procurement transactions between buyers and suppliers
• Send transactional and service emails (verification updates, order confirmations)
• Improve platform performance and user experience
• Comply with applicable legal and regulatory obligations

4. Data minimisation

ProCureMedical collects and processes only the information reasonably required to provide our services. For supplier verification, we only request information relevant to assessing and managing your verification application. You should not submit passwords, payment-card details, or other unrelated sensitive information through our forms.

Payment processing is handled securely by PayFast, a third-party payment service provider. ProCureMedical does not collect or store your payment-card details.

5. Information sharing

We do not sell your personal information. We may share information with:

• Platform participants: Buyers may see supplier profiles and verification status. Suppliers may see buyer organisation details when responding to RFQs.
• Service providers: Third-party providers who help us operate the platform (email delivery, cloud hosting, payment processing), under appropriate confidentiality obligations.
• Legal requirements: Where required by applicable law or lawful authority.

6. Retention

We retain your information for as long as your account is active and as required to fulfil the purposes described in this policy, or as required by applicable law. Verification application documents are retained for the period necessary to support ongoing verification decisions.

7. Your rights (POPIA)

Under the Protection of Personal Information Act (POPIA) and applicable South African law, you may have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention obligations)
• Object to certain processing
• Lodge a complaint with the Information Regulator

To exercise these rights, contact us through the ProCureMedical platform or support channel.

8. Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or loss.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date.

10. Contact

For privacy-related queries, contact us through the ProCureMedical support channel.