How we collect, use and protect your personal information, including health and genetic data, under South Africa's Protection of Personal Information Act (POPIA).
This site, bio-code.co.za ("Biocode", "we", "us"), is operated by Bio Code Group (Pty) Ltd, registration number 2026/302512/07, of 5 Ou Wingerd Road, Constantia, Cape Town, 7806, Western Cape, South Africa. We are the responsible party for your personal information under POPIA.
Our Information Officer is Gilles Colruyt, reachable at info@bio-code.co.za.
Health and genetic information is "special personal information" under POPIA and receives heightened protection. We process it only with your express consent, to deliver the diagnostics and protocols you ask for, and never for any purpose you have not agreed to. You can withdraw that consent at any time by contacting us, after which we will stop processing and, on request, delete this data (subject to any legal retention we must observe).
We do not sell your personal information. We share it only with the service providers ("operators") that make the site work, each bound to process it only on our instructions:
We may also disclose information where required by law, or to protect our rights, safety or property.
Some of the providers above process data outside South Africa. Where that happens we rely on the transfer conditions permitted by POPIA (for example, providers subject to laws or binding agreements that offer an adequate level of protection).
We use a lightweight, first-party analytics beacon to count visits and understand how the site is used. It does not sell or share your data with advertising networks. We ask for your acknowledgement of analytics on your first visit, and you can read more or contact us to opt out. We use only the storage strictly necessary to run the site (for example, keeping you signed in and remembering your cart).
We keep your information for as long as your account is active and for as long as we need it to provide our services, meet legal obligations, resolve disputes and enforce our agreements. Health and diagnostic data is kept so your results remain available to you over time; you can request export or deletion at any point.
Under POPIA you have the right to access the personal information we hold about you, to correct or delete it, to object to certain processing, to withdraw consent, and to lodge a complaint. You can export or delete your account data yourself from your account, or contact us and we will action your request. You may also complain to the Information Regulator of South Africa (inforegulator.org.za).
We protect your information with access controls, encryption in transit, and database row-level security that ensures you can only ever see your own records. No system is perfectly secure, but we take reasonable technical and organisational measures to guard your data.
We may update this policy from time to time. The "last updated" date at the top will always show the current version, and material changes will be highlighted on the site.
Questions about your privacy, or want to exercise a right above? Email info@bio-code.co.za. See also our Terms & Conditions, Refund Policy and Medical Disclaimer.