Privacy policy

CareFundr provides software and workflow tools that help healthcare practices manage treatment finance journeys. In this policy, “CareFundr”, “we”, “us”, and “our” mean the CareFundr service and its operating team. For privacy questions or requests, support@carefundr.co.za.

We collect information needed to provide the service, including:

• Account details such as name, work email, practice name, role, password credentials, and contact details.
• Practice and operational information such as practice identifiers, staff access, treatment quotes, amounts, payment status, and finance workflow activity.
• Patient information entered by an authorised practice, such as name, mobile number, email address, identity information, treatment information, and medical-aid contribution details.
• Technical information such as IP address, browser and device information, log events, approximate location derived from IP, and information about how the platform is used.
• Messages and attachments you choose to send to our support team.

We use information to create and secure accounts, provide the practice workspace, generate patient finance links, coordinate authorised finance workflows, process subscriptions, respond to support requests, prevent fraud and misuse, maintain audit records, improve reliability, and comply with legal obligations. We only use information for a specific, lawful purpose and limit collection to what is reasonably needed for that purpose.

A practice is responsible for ensuring that it has a lawful basis and any required notices, permissions, or consents before entering patient information into CareFundr or sharing it with a finance provider. CareFundr processes that information to provide the practice’s instructions. CareFundr is not a substitute for a practice’s clinical, professional, consent, record-keeping, or statutory responsibilities.

CareFundr does not make credit decisions. Where a patient is referred to a third-party finance provider, that provider is responsible for its own assessment, approval, terms, and repayments and will process information under its own privacy terms.

We share information only where needed for the purposes above: with hosting, security, email, payment, support, and technology providers acting on our instructions; with the finance provider selected for an authorised application; with PayFast for subscription billing; with professional advisers or authorities where legally required; or where necessary to protect users, the platform, or the public. We do not sell personal information.

We use reasonable technical and organisational safeguards appropriate to the information we process, including access controls, authenticated sessions, encrypted sensitive fields where applicable, expiring patient links, audit records, and monitoring. No internet service can guarantee absolute security. Please tell us promptly if you suspect unauthorised access.

We retain information for as long as needed to provide the service, meet contractual and legal obligations, resolve disputes, maintain financial and audit records, and enforce agreements. When information is no longer required, we delete it or securely de-identify it where practical.

Subject to applicable legal limits, you may ask us to confirm whether we hold personal information about you, request access to it, ask for correction or deletion of inaccurate or unlawfully held information, object to certain processing, withdraw consent where processing relies on consent, and lodge a complaint with the Information Regulator. We may need to verify your identity and may refer a request about patient records to the responsible practice.

Send requests to support@carefundr.co.za. You may also contact the Information Regulator of South Africa through its official website at inforegulator.org.za.

Some service providers may process information outside South Africa. Where that happens, we take steps required by applicable data-protection law and contractually require appropriate confidentiality and security. Third-party services, including PayFast and finance-provider portals, have their own terms and privacy notices. Review them before using those services.

CareFundr uses necessary cookies for authenticated sessions and core security. We may use limited operational logs and analytics to keep the service reliable. We send service messages such as sign-in codes, billing notices, and important account communications. Marketing communications, where used, include an unsubscribe option.

CareFundr is intended for healthcare practices and their authorised teams, not for children to open accounts. We may update this policy when the service, law, or security practices change. The effective date at the top will change when an updated version is published. If a change is material, we will provide a clear notice where appropriate.