+27 11 340 9000
Reset my password|Back to Virtual Office

Legal

Privacy Policy

Last updated: September 2026

The General Practitioner Management Group (GPMG) is committed to protecting the privacy and personal information of our members, directors, and website visitors in accordance with the Protection of Personal Information Act, 2013 (POPIA) and the General Data Protection Regulation (GDPR) where applicable.

1. Information We Collect

We collect and process the following categories of personal information:

  • Identity data: title, first names, surname, known-as name, ID number, date of birth, gender, race.
  • Contact data: email addresses, cell number, personal landline.
  • Professional data: practice name, HPCSA number, BHF/PCNS number, discipline, sub-specialty, practice manager details.
  • Membership data: membership number, type, status, chapter, join and end dates.
  • Address data: postal and physical addresses.
  • Account data: login email, role, and authentication records.

    • 2. Purposes of Processing

    We process your personal information for the following purposes:

  • Membership administration: managing your GPMG membership, practice records, and society affiliations.
  • Communications: sending newsletters, policy updates, event invitations, and renewal notices.
  • Sharing with affiliated bodies: verifying professional credentials and coordinating advocacy with affiliated healthcare organisations and regulatory bodies.
  • Compliance: meeting legal, regulatory, and governance obligations under POPIA, SARS, and HPCSA requirements.

    • 3. Legal Basis

    We rely on your consent, our legitimate interests as a professional membership organisation, and our legal obligations under South African law as the lawful bases for processing your personal information.

    4. Data Retention

    We retain your personal information for the duration of your membership and for such period thereafter as is required to meet legal, regulatory, and accounting obligations. You may request erasure of your data at any time, subject to our legal obligations to retain certain records.

    5. Data Sharing

    We do not sell your personal information. We may share it with affiliated healthcare organisations, regulatory bodies, and professional service providers (such as auditors) where necessary and lawful. All third parties are expected to handle your data in accordance with POPIA.

    6. Your Rights (POPIA Sections 23–24)

    As a data subject, you have the right to:

  • Access your personal information (Section 23) — request a data export from the Virtual Office.
  • Correct inaccurate personal information — update your profile in the Virtual Office.
  • Object to processing for specific purposes.
  • Request erasure of your personal data (Section 24) — submit a deletion request from the Virtual Office.
  • Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

    • 7. Security

    Base44, our platform provider, is SOC 2 Type II and ISO 27001 certified, providing encrypted data storage (at rest) and TLS-protected data in transit. Access to your personal information is restricted through role-based access controls and row-level security policies.

    8. Contact

    For any privacy-related enquiries, data subject requests, or to withdraw consent, contact us at info@gpmg.co.za or Unit 16 Northcliff Office Park, 203 Beyers Naude Drive, Northcliff, 2195.

    9. Updates

    We may update this policy from time to time. Material changes will be communicated to members through the Virtual Office.