Who we are

Our website address is: https://labuschagnemed.co.za.

PRIVACY POLICY

Website: https://labuschagnemed.co.za
Business: Labuschagne Med
Effective Date: 22 August 2026
Last Updated: 22 August 2026

1. INTRODUCTION

Labuschagne Med (“Labuschagne Med”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, process, store, protect, disclose and otherwise handle personal information when you visit or use our website, communicate with us, request quotations, purchase products, subscribe to communications, submit enquiries, use our online services or otherwise interact with Labuschagne Med.

We are committed to processing personal information responsibly and in accordance with applicable South African legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), the Consumer Protection Act 68 of 2008 (“CPA”), the Promotion of Access to Information Act 2 of 2000 (“PAIA”), where applicable, and other applicable laws and regulations.

POPIA establishes minimum requirements for lawful processing of personal information by private and public bodies and provides data subjects with rights concerning their personal information.

By using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. WHO WE ARE

Labuschagne Med is a supplier of medical equipment, Personal Protective Equipment (PPE), protective gear and related products.

Our website provides information about our products and services and may enable customers to contact us, request quotations and/or purchase products through our online shopping facilities.

Our website currently provides an online-shop facility and customer enquiry functionality.

For privacy-related matters, please contact us using the contact details published on our website.

3. WHAT IS PERSONAL INFORMATION?

For purposes of this Privacy Policy, “personal information” includes information that identifies or relates to an identifiable individual or, where applicable, an identifiable juristic person.

Depending on how you interact with us, this may include:

Your name and surname;
Company or organisation name;
Postal, physical or delivery address;
Email address;
Telephone or mobile number;
Account and login information;
Billing and transaction information;
Purchase history;
Quotations and order information;
Customer service correspondence;
Information supplied through contact or quotation forms;
Information contained in communications with us;
IP address and technical information;
Browser and device information;
Website usage information;
Cookies and similar identifiers;
Information necessary to process or deliver an order; and
Any other information that you voluntarily provide to us.

Where applicable, personal information may also include information relating to health, medical history or other special personal information. Such information will only be processed where permitted or required by applicable law and where an appropriate lawful basis exists.

4. INFORMATION WE COLLECT

We may collect personal information when you:

Visit our website;
Complete a contact or enquiry form;
Request a quotation;
Create or use an online account;
Purchase products;
Subscribe to marketing communications;
Communicate with our staff;
Contact us by telephone, email or other communication channels;
Request customer or technical support;
Submit information relating to an order;
Participate in promotions or surveys;
Apply for or engage in a business relationship with us; or
Otherwise voluntarily provide information to us.

Certain technical information may also be collected automatically when you access our website, including IP address, browser type, device information, operating system, pages visited, approximate location derived from technical information, referring website and website interaction information.

5. PURPOSES FOR WHICH WE PROCESS PERSONAL INFORMATION

We process personal information only for specific, lawful and reasonable purposes.

These purposes may include:

Responding to enquiries and requests;
Preparing and providing quotations;
Processing and fulfilling orders;
Processing payments through authorised payment providers;
Delivering products;
Managing customer accounts;
Providing customer and after-sales support;
Communicating with customers regarding orders and services;
Maintaining business and transaction records;
Preventing fraud, abuse and unlawful activity;
Protecting our website, systems, customers and business;
Improving our website, products and services;
Managing complaints and disputes;
Complying with legal and regulatory obligations;
Establishing, exercising or defending legal rights;
Sending direct marketing where legally permitted;
Maintaining appropriate accounting and financial records;
Conducting legitimate business administration; and
Any other lawful purpose disclosed to you at or before the time information is collected.

POPIA requires personal information to be collected for a specific, explicitly defined and lawful purpose related to the responsible party’s functions or activities.

6. LAWFUL PROCESSING OF PERSONAL INFORMATION

We will process personal information only where there is a lawful basis for doing so.

Depending on the circumstances, processing may be necessary because:

You have provided consent;
Processing is necessary to perform or take steps relating to a contract with you;
Processing is necessary to comply with a legal obligation;
Processing protects a legitimate interest;
Processing is necessary to protect a person’s legitimate interests;
Processing is authorised or required by applicable law; or
Another lawful basis recognised under POPIA applies.

Where consent is required, we will seek consent in an appropriate manner.

Where processing is based on consent, you may withdraw your consent, subject to any lawful consequences and exceptions.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. MINIMISATION OF INFORMATION

We endeavour to collect only information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.

You are not required to provide personal information unless it is reasonably necessary for us to provide a requested product, service, quotation, transaction or other legitimate business function, or where the law requires us to obtain it.

If you choose not to provide information that is necessary for a particular service, we may be unable to provide that service or complete the relevant transaction.

8. ACCURACY OF PERSONAL INFORMATION

We take reasonably practicable steps to ensure that personal information in our possession is complete, accurate, not misleading and updated where necessary.

You should notify us if any information supplied to us changes or is incorrect.

You have the right to request correction or updating of your personal information, subject to applicable legal requirements.

9. DIRECT MARKETING

We may use personal information to communicate with you about products, services, promotions, quotations and other business-related information where permitted by applicable law.

Where direct electronic marketing requires consent, we will obtain the required consent.

Marketing communications will provide an appropriate means of opting out or withdrawing consent where required.

You may request that we stop sending direct marketing communications to you.

A request to stop direct marketing will not necessarily prevent us from sending essential transactional or service-related communications, such as order confirmations, invoices, delivery notifications, account notices or important service information.

POPIA specifically regulates unsolicited electronic communications and direct marketing.

10. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies and similar technologies to:

Enable essential website functionality;
Maintain sessions and preferences;
Improve website performance;
Understand website usage;
Analyse website traffic;
Improve user experience;
Support security and fraud prevention; and
Where applicable, support marketing or advertising functionality.

Cookies may be placed by us or by authorised third-party service providers.

You may configure your browser to reject or restrict cookies. However, disabling certain cookies may affect the functionality of parts of the website.

Where legally required, we will obtain appropriate consent for non-essential cookies and similar technologies.

11. WEBSITE ANALYTICS

We may use analytics technologies to understand how visitors interact with our website.

Analytics information may include:

Pages viewed;
Time spent on pages;
General interaction information;
Browser and device information;
Referral sources;
Approximate geographic information; and
Technical identifiers.

Analytics information will be used for legitimate business purposes such as website performance, security, optimisation and service improvement.

Where third-party analytics providers are used, their processing may also be governed by their own privacy policies and contractual obligations.

12. ONLINE ORDERS AND PAYMENTS

Where our website or associated online shop enables customers to purchase products, certain information will be required to process and fulfil the transaction.

This may include:

Customer identification information;
Contact details;
Billing information;
Delivery information;
Product and order information;
Transaction information; and
Information required by our payment provider.

Payment card or banking information may be processed directly by an authorised payment service provider.

Where payment information is handled by a third-party payment provider, Labuschagne Med does not necessarily have access to or store the customer’s complete payment-card credentials.

Customers should review the applicable payment provider’s privacy and security terms before completing a transaction.

13. INFORMATION SHARED WITH THIRD PARTIES

We will not sell your personal information as a commercial commodity.

We may, however, disclose or make personal information available to appropriate third parties where reasonably necessary for legitimate business purposes or where permitted or required by law.

These parties may include:

Payment processors;
Website hosting providers;
IT and technology service providers;
Cloud-storage providers;
Website developers and maintenance providers;
Delivery and logistics providers;
Accounting and auditing service providers;
Professional advisers;
Legal advisers;
Insurance providers;
Marketing and communication service providers;
Fraud-prevention and security providers;
Government authorities or regulatory bodies; and
Other service providers who process information on our behalf.

Where third parties process personal information on our behalf, we will take reasonable steps to require appropriate confidentiality and security safeguards.

POPIA requires operators processing personal information for a responsible party to process it only with appropriate authorisation and to maintain confidentiality, subject to lawful exceptions.

14. INTERNATIONAL TRANSFERS

Some service providers used by modern websites, cloud platforms, payment processors, email providers or technology platforms may process or store information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with applicable legal requirements, including the cross-border transfer requirements of POPIA.

Where required, we will ensure that an appropriate lawful basis, contractual protection, consent or other recognised safeguard applies before transferring personal information to another country.

POPIA expressly regulates the cross-border flow of personal information.

15. SECURITY OF PERSONAL INFORMATION

We take reasonably practicable technical and organisational measures to protect personal information against:

Loss;
Damage;
Unauthorised access;
Unauthorised disclosure;
Unlawful processing;
Unauthorised alteration;
Destruction; and
Other reasonably foreseeable risks.

Security measures may include access controls, authentication, password controls, system monitoring, backups, security updates, encryption where appropriate, secure transmission technologies and other safeguards appropriate to the nature and sensitivity of the information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You acknowledge that transmission of information over the internet carries inherent risks.

We will not be liable for a security incident resulting solely from circumstances beyond our reasonable control, provided that we have implemented the security measures reasonably required by applicable law and have acted appropriately in response to the incident.

POPIA requires responsible parties to establish and maintain appropriate safeguards and to take reasonable measures to identify foreseeable risks.

16. SECURITY COMPROMISES AND DATA BREACHES

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will assess and respond to the incident in accordance with applicable law.

Where POPIA requires notification, we will notify the Information Regulator and affected data subjects in accordance with the Act.

Such notification may include information concerning:

The nature of the security compromise;
The personal information potentially affected;
Possible consequences;
Measures taken or proposed to address the compromise; and
Measures that data subjects may take to mitigate potential harm.

POPIA provides for notification of the Information Regulator and affected data subjects where a security compromise triggers the applicable statutory requirements.

17. RETENTION OF PERSONAL INFORMATION

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected or subsequently processed, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

The nature of the information;
The purpose for which it was collected;
The existence of an ongoing business relationship;
Accounting and tax requirements;
Legal or regulatory requirements;
Warranty obligations;
Dispute-resolution requirements;
Fraud prevention; and
The establishment, exercise or defence of legal claims.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, subject to applicable legal and operational requirements.

18. DATA SUBJECT RIGHTS

Subject to applicable law and any lawful limitations, you may have the right to:

Request access to personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request deletion of personal information where legally permissible;
Object to certain processing;
Object to direct marketing;
Withdraw consent where processing is based on consent;
Request information concerning how your personal information is processed;
Request information concerning recipients or categories of recipients;
Lodge a complaint concerning the processing of your personal information; and
Exercise any other rights available under POPIA or applicable law.

POPIA provides data subjects with rights concerning access, correction and protection against unlawful processing.

19. REQUESTING ACCESS TO YOUR INFORMATION

If you wish to request access to personal information held by us, you may contact us using the contact details published on our website.

We may require sufficient information to verify your identity before processing an access request.

Requests may be subject to applicable legal requirements, prescribed procedures and lawful limitations.

Where applicable, access requests will be dealt with in accordance with POPIA and PAIA.

20. CORRECTION OR DELETION OF INFORMATION

If you believe that personal information held by us is inaccurate, incomplete, outdated, misleading or unlawfully processed, you may request that we correct or delete the information, subject to applicable legal requirements.

We may retain information where the law requires or permits us to do so.

21. CHILDREN’S INFORMATION

Our website is not intended to knowingly collect personal information from children without the consent or involvement of a competent person where such consent is required by law.

Where we become aware that we have inadvertently collected personal information relating to a child in circumstances where such processing is unlawful, we will take reasonably practicable steps to address the situation in accordance with applicable law.

POPIA contains specific provisions governing the processing of personal information of children and certain circumstances require additional safeguards or authorisation.

22. SPECIAL PERSONAL INFORMATION

Certain categories of information, including health-related information, may constitute “special personal information” under POPIA.

Because Labuschagne Med operates in the medical equipment and healthcare-related sector, certain customer or business interactions may potentially involve information of a sensitive nature.

We will not intentionally collect or process special personal information unless there is a lawful basis for doing so and the processing complies with applicable legal requirements.

Where special personal information is processed, we will apply appropriate additional safeguards where required.

23. THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to third-party websites, platforms, payment providers, suppliers, manufacturers or other external services.

We are not responsible for the privacy practices, security, content or policies of third-party websites.

When you leave our website, we recommend that you review the privacy policy of the external website before submitting personal information.

24. SOCIAL MEDIA

Where we provide links to or interact with social-media platforms, your use of those platforms is subject to the privacy policies and terms of the relevant platform.

We do not control how independent social-media platforms collect or process information.

You should review the privacy settings and policies of the applicable platform.

25. CONFIDENTIALITY

We treat personal information as confidential and will take reasonable steps to prevent unauthorised disclosure.

Employees, contractors and service providers who have access to personal information may be required to maintain confidentiality and comply with applicable information-security obligations.

Personal information may nevertheless be disclosed where:

You have authorised the disclosure;
The disclosure is necessary to provide a requested service;
The disclosure is necessary to perform a contract;
The disclosure is required by law;
The disclosure is required by a court or lawful authority;
The disclosure is necessary to protect our rights or property; or
Another lawful basis exists.

26. INFORMATION OFFICER

Labuschagne Med will maintain appropriate arrangements for the performance of the duties of its Information Officer as required by applicable law.

For privacy, POPIA or PAIA-related requests, please use the contact details published on our website or contact our designated privacy/Information Officer through the official Labuschagne Med communication channels.

Information Officer / Privacy Contact:
Email: [INSERT OFFICIAL PRIVACY/INFORMATION OFFICER EMAIL]
Telephone: [INSERT OFFICIAL TELEPHONE NUMBER]
Physical Address: [INSERT REGISTERED/BUSINESS ADDRESS]

IMPORTANT: Replace the placeholders above with Labuschagne Med’s actual registered/business details before publishing this policy.

27. COMPLAINTS

If you believe that we have processed your personal information unlawfully or otherwise infringed your privacy rights, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

Your complaint should, where possible, include:

Your full name;
Contact details;
Description of the complaint;
Relevant dates;
Relevant correspondence or documentation; and
The outcome you are seeking.

We will investigate complaints within a reasonable period and respond appropriately.

28. INFORMATION REGULATOR

If you are dissatisfied with our handling of your personal information or believe that your privacy rights have been infringed, you may lodge a complaint with the Information Regulator of South Africa, subject to applicable procedures.

The Information Regulator provides POPIA complaint mechanisms and Form 5 for complaints regarding interference with the protection of personal information.

Information Regulator – South Africa

Website: Information Regulator of South Africa
Telephone: 010 023 5200
Toll-free: 0800 017 160
Email: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

Postal/Physical Address:
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg, 2191
South Africa

The Information Regulator confirms these current contact channels and provides an online complaints facility.

29. PAIA

Where applicable, Labuschagne Med will maintain and make available a PAIA Manual describing the records held by the business and the procedure for requesting access to records in accordance with the Promotion of Access to Information Act.

A request for access to records may be subject to the requirements, procedures, exemptions and fees prescribed by applicable law.

30. CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy from time to time to reflect:

Changes in legislation;
Changes in regulatory requirements;
Changes to our business;
Changes to our website;
Changes to technology;
Changes to our services;
Changes to our data-processing practices; or
Other legitimate business requirements.

The updated Privacy Policy will be published on our website with a revised “Last Updated” date.

Your continued use of the website after an updated policy has been published constitutes acknowledgement of the updated policy, to the extent permitted by law.

31. GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of South Africa.

Any dispute concerning this Privacy Policy or the processing of personal information by Labuschagne Med will be dealt with in accordance with applicable South African law.

32. SEVERABILITY

If any provision of this Privacy Policy is found to be unlawful, invalid or unenforceable, that provision will be severed or limited to the minimum extent necessary, without affecting the validity and enforceability of the remaining provisions.

33. NO WAIVER

A failure or delay by Labuschagne Med to enforce any provision of this Privacy Policy does not constitute a waiver of that provision or of any rights available to Labuschagne Med under applicable law.

34. CONTACT US

For questions, requests, objections, corrections, deletion requests, privacy concerns or other matters relating to this Privacy Policy, please contact Labuschagne Med through the official contact details published on:

Labuschagne Med

Please do not send highly sensitive personal information by ordinary email unless specifically requested and appropriate security measures are available.

35. ACCEPTANCE

By using this website, submitting information to Labuschagne Med, requesting a quotation, creating an account or purchasing products through our online facilities, you acknowledge that you have had an opportunity to review this Privacy Policy.

Where applicable law requires express consent, such consent will be obtained separately and will not be inferred merely from your use of the website.

Labuschagne Med is committed to responsible, transparent and lawful processing of personal information and to protecting the privacy and security of our customers, website visitors, suppliers, business partners and other data subjects.