Privacy Policy

1. Introduction

Bloodfields ("we", "us", or "our") is a virtual investigative blood analysis practice founded by Dr Robyn Bradfield. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to all information collected through our website (bloodfields.co.za), our services, and any related communications.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly to us, including:

• Personal identification information: name, email address, phone number, date of birth
• Health information: medical history, symptoms, health goals, and blood test results (collected via the Zanda medical portal)
• Payment information: processed securely through Paystack (we do not store card details)
• Communication records: emails, messages, and correspondence with our practice

We may also automatically collect certain information when you visit our website, including your IP address, browser type, pages visited, and referring website.

3. How We Use Your Information

We use the information we collect to:

• Provide our blood test analysis and reporting services
• Personalise your test selection based on your health questionnaire
• Prepare and deliver your comprehensive written report
• Communicate with you about your results and follow-up care
• Process payments for our services
• Send occasional health insights and updates (only with your consent)
• Improve our website and services
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal information under the Protection of Personal Information Act (POPIA) on the following grounds:

• Consent: you have given us explicit consent to process your information for specific purposes
• Contractual necessity: processing is necessary to provide the services you have requested
• Legal obligation: processing is required to comply with South African law
• Legitimate interest: processing is necessary for purposes that are reasonable and do not override your rights

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Zanda: our secure medical practice management platform, used for health questionnaires and patient records
• Paystack: our payment processor, which handles payment transactions securely
• Laboratories: blood test request forms are shared with your chosen laboratory (Lancet, Ampath, PathCare, etc.) to facilitate testing
• Legal requirements: where required by law, regulation, or court order
• Professional referrals: with your explicit consent, when referring you to another healthcare provider

6. Health Information

We understand that health information is particularly sensitive. Your medical data, including questionnaire responses, blood test results, and clinical reports, is treated with the highest level of confidentiality.

Health information is collected and processed through the Zanda medical portal, which complies with healthcare data protection standards. Access to your health records is restricted to Dr Robyn Bradfield and authorised clinical staff only.

Your health data will never be used for marketing purposes or shared with third parties without your explicit consent, except where required by law.

7. Payments

All payments are processed securely through Paystack, a PCI DSS-compliant payment gateway. We do not store, process, or have access to your full credit card or banking details. Payment records (transaction amounts and dates) are retained for accounting and tax purposes.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. Specifically:

• Medical records: retained in accordance with the Health Professions Act and HPCSA guidelines (minimum of 5 years after your last consultation, or longer if required by law)
• Payment records: retained for 5 years for tax and accounting purposes
• Marketing preferences: retained until you withdraw consent
• Website analytics: anonymised data may be retained indefinitely

9. Your Rights

Under POPIA, you have the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Object to the processing of your personal information
• Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us using the details below.

10. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device that help us understand how you use our site.

We use:

• Essential cookies: required for the website to function properly
• Analytics cookies: help us understand how visitors interact with our site (e.g. Google Analytics)
• Marketing cookies: used to deliver relevant content and measure advertising effectiveness (only with your consent)

You can manage your cookie preferences through your browser settings at any time.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us