Website privacy policy

This policy explains how Cryptex Medical Systems (“Cryptex”, “we”, “us”) handles personal information when you visit this marketing website or contact us through it. It does not cover the Cryptex Medical practice management service, which has a separate service and app privacy policy.

Who is responsible

The responsible party for this website is Cryptex Data Solutions CC.

Information we collect

Information you provide

If you submit the contact form, we collect your name, practice name, work email address, optional phone number, the number of practices in your group, the product tier you are interested in and your message. Please do not include patient records, clinical information or other sensitive personal information in the message field.

Your name, practice name, email address, product interest and message are needed for us to process a form enquiry. If you do not provide them, the form cannot be submitted. Providing a phone number is optional.

Technical information

When your browser requests a page, our hosting and security systems receive technical information such as your IP address, request date and time, requested page, browser or device type and security events. We use this information to deliver and protect the Site and to investigate faults or abuse.

If you choose a light or dark theme, the Site saves that preference in local storage on your device. It is not sent to us. The Site does not currently use advertising cookies or website analytics. We will update this policy before introducing analytics that collect visitor information.

Why we use the information

• To receive, assess and respond to your enquiry and arrange a demonstration.
• To take steps you request before entering into a customer relationship.
• To operate, secure and troubleshoot the Site and prevent abuse.
• To keep appropriate business records and comply with legal obligations.

We rely on the steps you ask us to take, our legitimate interests in responding to business enquiries and operating a secure website, and legal obligations where applicable. We do not add you to an unrelated marketing list merely because you made an enquiry.

Who receives the information

We do not sell your personal information. We use contracted service providers only as needed to run the Site and process an enquiry, including hosting, website security and email delivery providers. Our personnel and professional advisers may also receive information where they need it for the purposes described above. We may disclose information where required by law or to protect rights, security or safety.

Storage and transfers outside South Africa

The Site is hosted in Amazon Web Services' Cape Town region (af-south-1). Website security, email delivery and global hosting infrastructure may process limited information outside South Africa. Where POPIA section 72 applies, we require an appropriate legal basis and safeguards for the transfer.

Retention

Routine website technical and security information is retained for seven days. Contact-form information is removed from the website systems once the submission has been processed and delivered. Enquiry emails are deleted once the enquiry has been processed.

Your rights

Subject to POPIA, you may ask whether we hold your personal information, request access to it, ask us to correct or delete information that we are not authorised to retain, or object to certain processing. We may need to verify your identity before acting.

Security

We use reasonable technical and organisational safeguards appropriate to the information and risks involved. No internet service can promise absolute security.

Changes

We may update this policy when our practices, providers or legal obligations change. The date at the top shows when this policy was last revised.

Contact us

Email support@cryptexmedical.com for privacy questions or requests.