Privacy Policy
How we collect, use and protect your personal information in line with POPIA.
Last updated: September 25, 2026
1. Who we are
This website is operated by CannaChi (Pty) Ltd (Reg No. 2017/258542/07), Northgate Office Park, Randburg, Gauteng, South Africa ("CannaChi", "we", "us"). We are the responsible party for the personal information collected through this website, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).
2. What we collect
We only collect information you choose to give us through the forms on this website, such as:
- your name, email address and mobile number;
- for patients, the primary health condition you tell us about;
- for doctors, your HPCSA number and practice name;
- for investors, your organisation and area of interest;
- any message you send us.
To protect the website against spam and abuse we may also record your IP address and browser type when you submit a form.
3. Health information
Information about your health is special personal information under POPIA. We only process it with your consent, only for the purpose of arranging your consultation and care, and only share it with the healthcare professionals involved in that care.
4. How we use your information
- to respond to your enquiry and arrange consultations;
- to onboard doctors and partners onto our network;
- to share investor information you have requested;
- to meet our legal and regulatory obligations.
We do not sell your personal information, and we will not send you marketing without your consent.
5. Who we share it with
Where needed for the purposes above, we may share your information with CannaChi Group entities, registered doctors and licensed pharmacies involved in your care, and service providers who host or support this website. Everyone we share with must keep your information confidential and secure. We may also disclose information where the law requires it.
6. How long we keep it
We keep your information only as long as needed for the purpose it was collected for, or as long as the law requires, after which it is securely deleted or de-identified.
7. Security
We use reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access.
8. Your rights
Under POPIA you may ask to see the personal information we hold about you, ask us to correct or delete it, object to its processing, or withdraw your consent at any time. To do so, contact us.
If you are unhappy with how we handle your information, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.
9. Cookies
This website uses only the cookies needed for it to work properly. We do not use advertising cookies.
10. Changes
We may update this policy from time to time. The date at the top of this page shows when it last changed.