1. Who we are
MediEazy is a medical practice management platform operated by Leiten Technologies (P) Ltd., ("Leiten", "we", "us", "our"), a company registered in India with its head office at:
#11, 2nd Floor, Shanyo Centre,
Krishna Street, T. Nagar,
Chennai — 600 017,
Tamil Nadu, India
For privacy-related queries, contact us at info@leitenindia.com.
2. How We Use Your Information
A. Payment Information
When you pay for a consultation through MediEazy, your payment is processed by PayFast (Pty) Ltd, a licensed South African payment gateway regulated by the South African Reserve Bank.
MediEazy does not receive or store your full card number. PayFast provides MediEazy only with:
- Transaction reference number
- Transaction status (successful, failed, pending)
- Transaction amount (ZAR)
This information is used solely to:
- Confirm your appointment
- Generate payment receipts
- Process refunds where applicable
- Resolve payment disputes
PayFast is responsible for securely handling all payment card data and complies with international card security standards including PCI DSS (Payment Card Industry Data Security Standard). For PayFast's privacy policy, visit payfast.co.za.
B. Health and Appointment Information
Information about your appointments, consultations, prescriptions, and medical history is collected on behalf of, and is primarily controlled by, the Provider (Practitioner, Clinic, or Hospital) you book with, for the purpose of your medical treatment and their recordkeeping obligations under South African healthcare law.
This information is:
- Stored separately from payment records within MediEazy's secure systems
- Accessible only to authorized clinical and administrative staff of that Provider
- Accessible to MediEazy staff strictly for platform operation, technical support, and security
Health information is treated as "special personal information" under the Protection of Personal Information Act (POPIA) 2013 and is processed only with your explicit, separate consent — distinct from your acceptance of payment terms — and only for treatment and related administrative purposes.
C. Account and Profile Information
To use MediEazy, you provide:
- Name and email address
- Phone number
- Date of birth
- Gender
- Optional: Medical aid scheme and membership number
This information is used to:
- Create and manage your account
- Send appointment reminders and updates
- Facilitate Provider-to-patient communication
- Verify your identity for security
3. Multi-Provider Account Access
If you book with more than one Provider on MediEazy, each Provider only has access to your information relating to appointments booked with them, not your full history across other Providers on the platform.
This ensures privacy between independent medical practices.
4. Who We Share Your Information With
We share information only when necessary for platform operation:
- Your chosen Provider: Appointment details, medical history, and consultation notes needed to treat you
- PayFast: Payment card data for secure transaction processing (not shared by us; handled directly by PayFast's secure payment page)
- Medical aid scheme clearing networks (Medikredit, Medprax): Claims data if you submit a medical aid claim through MediEazy
- Service providers: Cloud hosting, email, analytics (all bound by confidentiality agreements)
We do not sell, rent, or trade your personal information.
5. Data Retention
Payment records: Retained for a minimum of 3 years for tax and legal compliance
Health records: Retained according to your Provider's legal obligations (typically 5–10 years)
Account data: Retained while your account is active, or 1 year after last activity if inactive
You may request deletion of non-critical data by contacting support@leitenindia.com.
6. Your Rights Under POPIA
As a South African resident, you have the right to:
- Access: Request a copy of personal information we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of data (subject to legal retention requirements)
- Objection: Object to certain types of processing
To exercise these rights, contact info@leitenindia.com with "POPIA Request" in the subject line.
7. Security Measures
We implement:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure authentication (password + optional two-factor authentication)
- Regular security audits and penetration testing
- Staff confidentiality agreements and access controls
While we take security seriously, no system is 100% secure. If you believe your data has been compromised, contact us immediately at info@leitenindia.com.
8. Cookies and Tracking
MediEazy uses cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze platform usage (Google Analytics)
- Prevent fraud and improve security
You can disable cookies in your browser, but this may affect platform functionality.
9. Children's Privacy
MediEazy is not intended for children under 13. We do not knowingly collect personal information from children. If we discover we have, we will delete it promptly.
10. Cross-Border Data Transfer
Your data may be processed in India (where Leiten is based) or other countries as needed for platform operation. By using MediEazy, you consent to this processing.
11. Third-Party Links
MediEazy contains links to third-party websites (PayFast, Provider websites, etc.). We are not responsible for their privacy practices. Please review their privacy policies separately.
12. Changes to This Privacy Policy
We may update this policy periodically. The "Last updated" date at the top reflects the most recent version. Continued use of MediEazy after changes constitutes acceptance of the updated policy.