Website privacy policy

This policy explains how Cryptex Medical Systems (“Cryptex”, “we”, “us”) handles personal information when you visit this marketing website or contact us through it. It does not cover the Cryptex Medical practice management service, which has a separate service and app privacy policy.

Who is responsible

The responsible party for this website is Cryptex Data Solutions CC.

Information we collect

Information you provide

If you submit the contact form, we collect your name, practice name, work email address, optional phone number, the number of practices in your group, the product tier you are interested in and your message. Please do not include patient records, clinical information or other sensitive personal information in the message field.

Your name, practice name, email address, product interest and message are needed for us to process a form enquiry. If you do not provide them, the form cannot be submitted. Providing a phone number is optional.

Technical information

When your browser requests a page, our hosting and security systems receive technical information such as your IP address, request date and time, requested page, browser or device type and security events. We use this information to deliver and protect the Site and to investigate faults or abuse.

If you choose a light or dark theme, the Site saves that preference in local storage on your device. It is not sent to us. The Site does not use advertising cookies.

Website analytics

The Site uses Umami, a privacy-focused analytics service, to understand how the Site is used. When you open a page it records the page address, including any campaign parameters in the link you followed, along with the page title, the address of the page that referred you, your browser language and screen size, and your browser, operating system and device type. Your IP address is used to work out an approximate country and is not stored by the analytics provider.

The analytics do not use cookies, do not identify you personally, and are not used to follow you across other websites. Analytics requests are served through this website's own address rather than the provider's, so your browser does not contact the analytics provider directly.

Why we use the information

• To receive, assess and respond to your enquiry and arrange a demonstration.
• To take steps you request before entering into a customer relationship.
• To operate, secure and troubleshoot the Site and prevent abuse.
• To keep appropriate business records and comply with legal obligations.

We rely on the steps you ask us to take, our legitimate interests in responding to business enquiries and operating a secure website, and legal obligations where applicable. We do not add you to an unrelated marketing list merely because you made an enquiry.

Who receives the information

We do not sell your personal information. We use contracted service providers only as needed to run the Site and process an enquiry, including hosting, website security, website analytics and email delivery providers. Our personnel and professional advisers may also receive information where they need it for the purposes described above. We may disclose information where required by law or to protect rights, security or safety.

Storage and transfers outside South Africa

The Site is hosted in Amazon Web Services' Cape Town region (af-south-1). Website security, website analytics, email delivery and global hosting infrastructure may process limited information outside South Africa. Website analytics information is held in the analytics provider's European Union region. Where POPIA section 72 applies, we require an appropriate legal basis and safeguards for the transfer.

Retention

Routine website technical and security information is retained for seven days. Website analytics information is retained by the analytics provider for six months. Contact-form information is removed from the website systems once the submission has been processed and delivered. Enquiry emails are deleted once the enquiry has been processed.

Your rights

Subject to POPIA, you may ask whether we hold your personal information, request access to it, ask us to correct or delete information that we are not authorised to retain, or object to certain processing. We may need to verify your identity before acting.

Security

We use reasonable technical and organisational safeguards appropriate to the information and risks involved. No internet service can promise absolute security.

Changes

We may update this policy when our practices, providers or legal obligations change. The date at the top shows when this policy was last revised.

Contact us

Email support@cryptexmedical.com for privacy questions or requests.