Privacy Policy

1. Scope of This Privacy Policy

‍

This Privacy Policy applies to personal information processed via the Website, including:

• enquiries submitted through contact forms
• newsletter subscriptions and marketing sign-ups
• early access registrations (including DigiGyn™ Early Access)
• partnership, investor, supplier, and media enquiries
• recruitment or role applications (where applicable)

‍

This Website Privacy Policy does not replace or override any separate privacy notice or agreement that may apply to the use of our products (such as DigiGyn™) or to our clinical partners.

‍

2. Who We Are

‍

Responsible Party: Vas MedTech (Pty) Ltd
Address: Cape Town, South Africa

Where POPIA uses specific terminology, Vas MedTech is generally the Responsible Party for personal information collected through this Website.

‍

3. Information We Collect

‍

We may collect the following categories of personal information depending on how you use the Website:

3.1 Information You Provide Directly

• name and surname
• email address
• phone number (if provided)
• organisation name and role/title
• location (city/country, if provided)
• message content and any information you include in your enquiry
• information submitted in forms (for example, “Early Access” form fields or investor enquiry fields)

‍

3.2 Website Usage and Device Information

• IP address
• browser type and device type
• pages visited and actions taken
• referral source (how you arrived at the Website)
• approximate location derived from IP
• date/time of visits, session duration, and performance diagnostics

‍

3.3 Cookies and Similar Technologies
We may use cookies and similar tools to support Website functionality, analytics, and performance (see Section 10).

‍

4. What We Use Personal Information For

‍

We use personal information for the following purposes:

4.1 Responding to Enquiries

• responding to messages, requests, and questions
• scheduling meetings or follow-ups
• providing information you request about our products, programmes, and services

‍

4.2 Early Access and Programme Management

• registering your interest in early access programmes
• contacting you about eligibility, onboarding steps, and updates
• managing waitlists and programme communications

‍

4.3 Communications and Marketing (Where Permitted)

• sending newsletters and updates if you subscribe
• sharing relevant product news, content, or announcements
• measuring engagement with communications

You can opt out of marketing communications at any time (see Section 12).

‍

4.4 Recruitment and Opportunities (If Applicable)

• assessing applications or expressions of interest
• contacting you about roles or collaborations

‍

4.5 Website Security and Improvement

• monitoring performance and preventing misuse
• detecting fraudulent or malicious activity
• improving Website content, usability, and performance

‍

5. Lawful Basis for Processing (POPIA)

‍

We process personal information where permitted under POPIA, including where processing is necessary for:

• pursuing legitimate interests such as operating the Website securely and responding to enquiries
• taking steps to enter into, or performing, a contract with you (for example, early access onboarding)
• compliance with legal obligations
• consent, where required (for example, marketing communications where consent is used)

‍

6. How We Share Personal Information

‍

We do not sell personal information.

‍

We may share personal information only in these circumstances:

‍

6.1 Service Providers
We may share information with trusted third-party service providers who help us operate the Website and communications, such as:

• website hosting and infrastructure providers
• analytics providers
• email and newsletter platforms
• form processing and CRM tools

These providers are required to protect information and may only process it on our instructions.

‍

6.2 Legal, Regulatory, and Safety
We may disclose information where required by law, court order, or regulator request, or where necessary to protect rights, safety, and security.

‍

6.3 Business Transactions
If we undergo an investment, merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction subject to appropriate safeguards.

‍

7. Cross-Border Transfers

‍

Some of our service providers may process information outside South Africa. Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards are in place consistent with POPIA requirements.

‍

8. Data Security

‍

We implement reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, and disclosure.

‍

However, no method of transmission over the internet is completely secure. You are responsible for ensuring that information you submit is sent via secure devices and networks, and for keeping your own accounts secure where relevant.

‍

9. Data Retention

‍

We retain personal information only for as long as reasonably necessary to:

• respond to enquiries and maintain relevant correspondence
• administer programmes and waitlists
• meet legal, regulatory, and tax obligations
• resolve disputes and enforce our rights

Retention periods may vary depending on the purpose for which information was collected.

‍

10. Cookies and Analytics

‍

We may use cookies and similar technologies to:

• enable core Website functionality
• remember preferences
• understand usage and improve performance
• measure marketing campaign effectiveness

‍

You can manage cookies through your browser settings. Disabling some cookies may affect how the Website functions.

If you use cookie banners or preference tools on your Website, those settings will also govern optional cookies.

‍

11. Links to Other Websites

‍

The Website may contain links to third-party sites. We are not responsible for the privacy practices of third-party websites. You should review their privacy policies before providing personal information.

‍

12. Your Rights and Choices

‍

Depending on applicable law (including POPIA), you may have the right to:

• request access to the personal information we hold about you
• request correction of inaccurate information
• object to certain processing
• request deletion where appropriate
• unsubscribe from marketing communications at any time

‍

To unsubscribe, use the unsubscribe link in emails (where provided) or contact us using the details below.

‍

13. Direct Marketing

‍

Where we send direct marketing communications:

• we will do so in line with applicable laws and your communication preferences
• you may opt out at any time
• opting out does not affect essential service communications (for example, responses to enquiries)

‍

14. Children’s Privacy

The Website is not directed to children. We do not knowingly collect personal information from children.