Privacy Policy

Last updated: 13 July 2026

Health Adviser is a platform operated by Beyond Mind (Pty) Ltd (registration number 2013/092833/07). We are committed to protecting your personal information and processing it lawfully, transparently and only for the purposes described here. This policy explains what we collect, why, who we share it with, and the rights you have over it.

This policy is issued in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who is responsible for your information

Responsible Party: Beyond Mind 2013/092833/07
Information Officer: Warren Fritz
Contact: info@healthadviser.co.za

Where advice is rendered to you, Health Capital CC (FSP 42865) also processes your information as a Responsible Party in its own right, in order to meet its obligations under FAIS.

2. What we collect

We collect only what we need to compare plans for you, render advice, and administer your membership application.

Information you give us:

Account details: name, surname, email address, mobile number, password.
Needs analysis details: date of birth, gender, income band, employment status, dependants (including their ages), your current plan and contribution, monthly budget.
Health information: whether you have chronic conditions, and which ones.
Application details: identity number, banking details for the scheme debit order, and supporting documents required by the medical scheme.
Enquiries: anything you send us via the contact form.

Information we collect automatically:

Usage data: pages viewed, plans viewed and selected, actions taken on the platform. We use this both to improve the service and because our commercial model is based on these metrics (see the FAIS Disclosure).
Technical data: IP address, browser type, device type, and cookie data (see section 7).
Push notification tokens: if you enable notifications, a device token that allows us to send you messages.

What we do NOT collect: we do not collect your height or weight, we do not collect photographs, we do not track your GPS location, and we do not process biometric information.

3. Health information — a special note

Information about your health is "special personal information" under POPIA and receives additional protection. We collect it for one reason only: it is impossible to recommend an appropriate medical scheme plan without it. A plan that doesn't cover your chronic condition is not a plan that fits you.

We process this information with your consent, solely to match you to appropriate plans, to enable your adviser to give you suitable advice, and to submit your application to the scheme you choose. We do not use it for any other purpose, and we do not sell it.

4. Why we process your information

PurposeLawful basis

To compare plans and generate SmartMatch® recommendationsYour consent

To connect you to an adviser and enable them to advise youConsent / performance of contract

To submit your application to your chosen medical schemePerformance of contract

To keep a Record of AdviceLegal obligation (FAIS)

To send you service and lifecycle notificationsPerformance of contract

To send you marketing or broadcast messagesYour consent — you may opt out

To measure plan views, selections and salesLegitimate interest (our business model)

To keep our platform secure and workingLegitimate interest

Your adviser. When you connect with an adviser, your information is shared with that adviser (a representative of Health Capital CC) so they can advise you. Your information is only shared with an adviser once you have chosen to connect with one.
The medical scheme you apply to — and only the scheme you actually choose. We do not send your details to schemes you did not select.
Your employer — only if you access the platform through your employer's group scheme, and only to the extent needed to administer your enrolment and subsidy. Where you enrol through your employer, an authorised HR user can see the personal details needed to administer your membership: your personal details (including your ID number and marital status), your earnings/salary, your address, your bank account, all of which your employer already holds and your medical scheme health questionnaire. It is not compulsory to declare your HIV status on the form — this can be done privately.
Gap cover and rewards providers — only where you choose to take up such a product.
Our service providers, who process information on our behalf under contract:
- Diamatrix — hosting and infrastructure
- Google (Firebase Cloud Messaging) — delivery of push notifications
- PayFast — payment processing (used only for adviser credit purchases; consumers never make payments through this platform)
Where the law requires it, or to protect our rights or the safety of others.

We do not sell your personal information. We do not share it with advertisers or data brokers.

6. Where it's stored, and for how long

Your information is stored and processed in South Africa.

Cross-border transfer. Push notifications are delivered using Google Firebase Cloud Messaging. If you enable notifications, your device token and the content of the notification are processed on Google's servers, which are located outside South Africa. This is a cross-border transfer of personal information in terms of section 72 of POPIA, and it takes place only if you choose to enable push notifications. Google is bound by contractual data protection obligations that provide a comparable level of protection. You can disable push notifications at any time.

We keep your information for as long as needed for the purposes above. Where advice has been given to you, records of that advice must be retained for at least five years in terms of FAIS — we cannot delete these on request, and this is a legal obligation, not a choice.

7. Cookies

We use cookies that are strictly necessary for the site to work (keeping you logged in, security, session management), and analytics cookies to understand how the platform is used and to measure plan views and selections.

We do not use advertising or targeting cookies. We do not run ads, and we do not allow third parties to use our cookies to build advertising profiles of you.

You can control cookies through your browser settings, but disabling strictly-necessary cookies will prevent the platform from working.

8. Your rights under POPIA

You have the right to:

Access the personal information we hold about you
Correct it if it is inaccurate or out of date
Delete it, where we are not legally required to retain it (see section 6)
Object to processing, including direct marketing
Withdraw consent at any time (this will not affect processing already carried out)
Complain to the Information Regulator

To exercise any of these rights, contact our Information Officer at info@healthadviser.co.za.

The Information Regulator (South Africa)
https://inforegulator.org.za/contact-us/

9. Security

We use appropriate technical and organisational safeguards to protect your information, including encryption in transit (HTTPS), access controls, and secure credential storage. No system is perfectly secure; if a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.

10. Changes

We may update this policy. Material changes will be communicated to you, and the "last updated" date above will change.

See also our Terms of Use and FAIS Disclosure.