Privacy Policy & POPIA Notice
Last updated: 2 July 2026
Kevin Laka Physiotherapy ("we", "us", "our practice") is committed to protecting your privacy and handling your personal information responsibly, in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA").
1. Who we are & Information Officer
Kevin Laka Physiotherapy operates from Reitzpark Medical Centre, 10 Constantia Street, Reitzpark, Welkom, 9459, Free State, South Africa. Our Information Officer, responsible for POPIA compliance and data-subject requests, is:
Kevin Laka
Email: info@kevinlakaphysiotherapy.co.za
Phone: +27 82 286 3664
2. What information we collect
This website does not contain online forms that submit personal information to us. When you contact us, you choose to share information directly through:
- Phone calls to our listed numbers;
- WhatsApp messages sent via our WhatsApp link (subject to WhatsApp's own privacy policy);
- Email sent to our listed address.
This may include your name, contact details, and health-related information relevant to your treatment. Information shared this way is used solely to respond to your enquiry or manage your appointment and care, and is subject to the confidentiality standards required of HPCSA-registered healthcare practitioners.
3. Cookies
Our website uses cookies, which you can manage at any time via the "Cookie Settings" button on the site:
- Essential cookies — required for the website to function correctly. These cannot be disabled.
- Analytics cookies — would help us understand how visitors use the site. No analytics service is currently active on this website; this category is provided for transparency and future use, and only activates if you opt in.
- Marketing cookies — would support personalised advertising. No marketing/advertising service is currently active on this website; this category only activates if you opt in.
Embedded Google Maps content on our Contact page may set cookies controlled by Google, governed by Google's Privacy Policy.
4. Purpose & lawful basis for processing
We process personal information you provide only to respond to enquiries, schedule and manage appointments, and provide physiotherapy care, based on your consent and, where applicable, our legitimate interest in operating a healthcare practice and our obligations as HPCSA-registered practitioners.
5. Sharing of information
We do not sell or rent your personal information. We may share relevant information with medical aid schemes, referring practitioners, or other healthcare providers strictly where necessary for your treatment, billing, or as required by law (e.g. COIDA/RAF claims), and only with your knowledge or consent.
6. Data retention
Patient records are retained for the period required by South African health-record regulations and HPCSA guidelines, after which they are securely disposed of.
7. Security
We take reasonable technical and organisational measures to protect personal information in our care against loss, unauthorised access, or disclosure.
8. Your rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you;
- Request correction or deletion of your personal information;
- Object to the processing of your personal information;
- Withdraw consent, where processing is based on consent, at any time.
To exercise any of these rights, contact our Information Officer using the details in Section 1.
9. Complaints
If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator of South Africa:
Website: www.inforegulator.org.za
Email: enquiries@inforegulator.org.za
10. Children's information
Where we treat minors, personal information is processed with the consent of a parent or legal guardian, in line with POPIA and applicable healthcare consent requirements.
11. Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top of this page reflects the most recent revision.