Privacy Police
Privacy Police:
{Last updated: 20 August 2026}
1. Introduction
Cannafrica is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what we collect, why, how we use it, and what rights you have.
2. Information Officer
Name: [Information Officer name]
Email: [email]
Tel: 077 603 8114
3. What we collect
Identity and contact information: Title, full names, surname, ID number, age, gender, occupation, residential and work address, email, telephone and cellular numbers.
Health information (special personal information): Diagnosis, including severity, staging and prognosis; current treatment regimen; other medical conditions and their treatment; cannabis use history; details of prescribed cannabis-based products.
Transaction information: Products dispensed, quantities, dates, prescribing practitioner details, Section 21 approval records.
Website information: IP address, browser type, pages visited and cookie data.
4. Special personal information
Health information is classified as special personal information under Section 26 of POPIA and carries a higher standard of protection. We process it on the basis of your explicit written consent, given in the POPIA Declaration you sign as part of your Section 21 patient intake, and because processing is necessary for the provision of medical treatment under Section 32 of POPIA.
You may withdraw consent at any time. Withdrawal means we can no longer dispense to you, as we cannot lawfully do so without these records.
5. Why we collect it
- To facilitate and support your Section 21 application to SAHPRA;
- To verify your identity and age before dispensing;
- To comply with our legal, regulatory and record-keeping obligations under the Medicines and Related Substances Act;
- To monitor and evaluate the effectiveness of your treatment;
- To maintain traceability of dispensed medicine;
- To communicate with you about your prescription, order or collection;
- To manage adverse reaction reporting.
6. Who we share it with
We share your information only where necessary and lawful:
- SAHPRA and the National Department of Health — as required for Section 21 applications and regulatory compliance;
- Your prescribing practitioner and pharmacist — for clinical continuity;
- Our secure digital record-keeping platform — under a written operator agreement requiring POPIA-compliant handling;
- Law enforcement or regulators — where we are legally compelled.
We do not sell your information. We do not share it for marketing purposes without your separate consent.
7. Cross-border transfers
Where our service providers store data outside South Africa, we ensure through contract that the receiving party is subject to protection substantially similar to POPIA, as required by Section 72.
8. How long we keep it
Patient and dispensing records are retained for a minimum of six years from the date of last dispensing, in line with health record retention requirements and our regulatory obligations. After that period, records are securely destroyed unless we are required to retain them longer.
9. Security
We apply appropriate technical and organisational measures to protect your information against unauthorised access, loss, damage or misuse — including access controls, secure storage of physical forms, encrypted digital records and staff confidentiality obligations.
If a security compromise occurs affecting your personal information, we will notify you and the Information Regulator as required by Section 22 of POPIA.
10. Your rights
You have the right to:
- Request confirmation of what personal information we hold about you;
- Request access to that information;
- Request correction or deletion of information that is inaccurate, irrelevant, excessive or obtained unlawfully;
- Object to processing on reasonable grounds;
- Withdraw your consent (subject to clause 4);
- Lodge a complaint with the Information Regulator.
To exercise any of these rights, contact our Information Officer using the details above. We will respond within a reasonable period.
Information Regulator (South Africa)
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za
11. Cookies
Our website uses cookies to keep the site functioning, remember your preferences and understand how the site is used. You can disable cookies in your browser, though some parts of the site may not work properly as a result.
12. Children
We do not knowingly collect information from anyone under 18 through this website.
13. Changes
We may update this policy. The current version is always published on this page.
14. Contact
Tel (for both stores): 077 603 8114
Cannafrica Gardens — Shop 04, 198 UpperBuitenkant Street, Vredehoek, Cape Town
Email: cannafrica.clarmeont@gmail.com
Tel (for both stores): 077 603 8114
Cannafrica Claremont — 13 Stegmen Road, Claremont, Cape Town
Email: cannafrica.gardens@gmail.com