Privacy Policy

Last updated: 6 August 2026

What We Collect

We collect only what's necessary to provide the service:

• Account info: Your name, email, practice name
• Patient data: Information you enter about your patients (stored in your isolated database)
• Payment info: Processed securely by PayFast - we don't store card numbers

How We Use Your Data

• To provide and maintain the Nightingale Health service
• To process your subscription payments
• To send important service updates (not marketing spam)
• To provide technical support when you need help

Data Storage & Security

• Your practice data is stored in a dedicated, isolated database - no other practice can access it
• All data is hosted in South Africa
• We use HTTPS encryption for all data transmission
• Passwords are hashed and never stored in plain text

Your Rights (POPIA)

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Export your data

To exercise these rights, contact us at christo@yellowarcher.co.za

Data Retention

If you cancel your subscription, your data is retained for 90 days in case you change your mind. After that, it's permanently deleted unless you request otherwise.

Third Parties

We only share data with:

• PayFast: For payment processing
• Email provider: For sending transactional emails

We do not sell your data. Ever.

Contact

Questions? Email us at christo@yellowarcher.co.za