Privacy Policy

1. Definitions
   • “Bonitas” or “the Scheme” means Bonitas Medical Fund, a medical scheme registered in accordance with the Medical Schemes Act 58 of 1998.
   • “Personal Information” has the meaning assigned to it in the Protection of Personal Information Act 4 of 2013 (“POPIA”) and refers to any information that identifies or relates to an identifiable individual, including but not limited to a name, contact details, date of birth, gender, identification number and any other information required to provide services to the User.
   • “Processing” means any operation or activity relating to Personal Information, including collection, receipt, recording, storage, use, dissemination, or destruction.
   • “Special Personal Information” includes personal information relating to a User’s health or other sensitive personal data as defined in POPIA.
   • “User” means any person who has access to or uses the Website, mobile application or any other digital platform operated by Bonitas.
   • “Website” means the Bonitas website accessible via bonitas.co.za and all associated web pages and digital platforms.

2. General
   • This Privacy Policy applies to the Website, mobile applications and other digital platforms operated by Bonitas.
   • This Privacy Policy should be read together with the Bonitas Website Terms and Conditions, as well as any other terms and conditions which may be applicable to information submitted by the User and processed by Bonitas.
   • For any queries relating to this Privacy Policy or the processing of Personal Information, Users may contact the Bonitas Information Officer through the official Bonitas communication channels as indicated from time to time.

3. Collection of Personal Information
   • Bonitas respects the privacy of the User and is committed to protecting their Personal Information in accordance with applicable data protection laws, including POPIA.
   • Bonitas may collect Personal Information from Users in various ways, including when:
     • the User registers for an account or uses the Website, mobile app or other digital platforms;
     • the User requests information, products or services;
     • the User completes forms, surveys, or participates in promotions or competitions; or
     • the User otherwise provides Personal Information to Bonitas.
   • In certain instances, Bonitas may also collect and process Special Personal Information (such as health information) where necessary to provide services and grant access to benefits (where applicable) to the User and in accordance with applicable law.
   • Bonitas may collect, retain and process Personal Information as necessary to provide personalised services, enable access to benefits and ensure the effective operation of its digital platforms, and generally in respect of any obligations which it may have towards the User.
   • Bonitas may use cookies and similar technologies to collect information about how Users interact with the Website. Further details are provided in the Cookies section below.
   • Where a User accesses the Website without logging in or submitting Personal Information, certain technical information (such as browser type, IP address and usage data) may be collected automatically. This information is generally not used to identify individual Users unless it is linked to a User account or otherwise required for service delivery or security purposes.

4. Processing of Personal Information
   • Bonitas processes Personal Information in accordance with applicable data protection laws, including POPIA.
   • Personal Information is Processed for purposes related to the administration of membership, provision of benefits, responding to enquiries, improving services and enabling access to digital platforms, or where a User specifically makes application for such services which necessitates the use of Personal Information in order to process any such application and/or to render such services.
   • Where required by law, Bonitas will obtain the User’s consent before Processing Personal Information. In other instances, Personal Information may be Processed where it is necessary to fulfil contractual obligations, comply with legal requirements, or pursue legitimate business interests in a manner that does not infringe the privacy of the User.
   • Bonitas may use Personal Information to communicate with Users regarding their membership, applied services, existing services and relevant updates.
   • Users may opt out of receiving direct marketing communications at any time by using the available opt-out mechanisms or contacting Bonitas.
   • Bonitas will only Process Personal Information where such Processing is lawful, reasonable, and does not infringe the privacy of the User.

5. Cookies and tracking
   • Cookies are small data files that are stored on a User’s device when visiting a website. These cookies may collect information such as browsing behaviour, preferences and usage patterns to improve the functionality and performance of the website.
   • The Website may use cookies to collect information about how Users access and use the Website.
   • Bonitas uses cookies to:
     • understand how Users interact with the Website;
     • improve User experience and Website functionality; and
     • support the provision of services requested by Users.
   • Users may choose to disable cookies through their browser settings. However, this may limit certain functionality of the Website and may affect the ability to access specific features or services.
   • Users may also manage cookie preferences through available cookie settings on the Website, where applicable.

6. How we use the Personal Information collected
   • Bonitas may use Personal Information for several purposes relating to the provision of certain products and services, including to:
     • provide and administer membership, benefits and services to the User;
     • render managed care services to beneficiaries;
     • enable Users to access and manage their Personal Information, benefits and health-related services;
     • facilitate communication between Users and authorised healthcare providers where applicable;
     • respond to enquiries, requests or complaints submitted by Users;
     • personalize and improve the User’s experience on the Website, mobile applications and other digital platforms;
     • monitor, analyse and improve the performance, functionality and security of digital platforms;
     • comply with legal and regulatory obligations;
     • manage and maintain records in accordance with internal policies and applicable laws; and
     • communicate with Users regarding product updates, services, offerings or other information that may be of interest, or which have been applied for.
   • Users may opt out of receiving direct marketing communications at any time by using the available opt-out mechanisms or contacting Bonitas.
   • Personal Information will only be used for purposes that are compatible with those for which it was collected, unless otherwise permitted by applicable law.

7. Protection of your Personal Information
   • Bonitas undertakes to take reasonable and appropriate technical and organisational measures to protect Personal Information against unauthorised access, loss, misuse, disclosure, alteration or destruction.
   • Personal Information may be stored and Processed on systems which are reasonably secured and fit for the purpose intended, and access thereto is restricted to authorised personnel and service providers who require such information to perform their functions.
   • Bonitas uses appropriate security technologies and safeguards to enhance the protection of Personal Information when transmitted via the Website, mobile applications and other digital platforms.
   • While Bonitas takes reasonable steps to safeguard Personal Information, no method of transmission over the internet or electronic storage is completely secure and Bonitas cannot guarantee the absolute security of any information transmitted.
   • Users are encouraged to take appropriate precautions to protect their Personal Information, including safeguarding login credentials and ensuring that access to devices and accounts is secure.
   • Users are responsible for maintaining the confidentiality of their login credentials and for taking reasonable steps to protect their Personal Information when using digital platforms.

8. Sharing of Personal Information
   • Bonitas may share Personal Information with third parties where it is necessary to provide benefits or services to the User, comply with legal obligations or operate its business, and only to the extent permitted by applicable law, including POPIA.
   • Personal Information may be shared with:
     • healthcare providers and professionals, where required to enable access to healthcare services and benefits;
     • regulatory authorities, government bodies or other third parties where required by law; and
     • other parties where the User has provided consent or where such sharing is otherwise lawful.
   • Personal Information may also be disclosed:
     • when Bonitas is required to provide information to the User in respect of products or service;
     • Personal Information will be disclosed if it is required by law to do so;
     • to enable Bonitas to enforce the Terms and Conditions or other agreements; or
     • in urgent circumstances in order to protect the safety of individuals or the integrity of the Website and other digital channels operated by Bonitas.

9. Children and privacy
   • The Website and other digital platforms operated by Bonitas are not intended for use by children under the age of 13 years.
   • Bonitas does not knowingly collect Personal Information from children under the age of 13 years or knowingly send requests for Personal Information.
   • Where Personal Information relating to a child is provided to Bonitas, it is assumed that such information has been provided by or with the consent of a parent, guardian or authorised representative.
   • If it becomes apparent that Personal Information has been collected from a child without the necessary consent, Bonitas will take reasonable steps to delete or correct such information in accordance with applicable laws.

10. Third party websites
    • The Website and other digital platforms operated by Bonitas may contain links to third party websites for convenience.
    • Bonitas does not share Personal Information with third party websites nor is it responsible for their privacy practices.
    • The inclusion of any link does not imply endorsement by Bonitas of the linked website or its content. In some instances, third party websites may be co-branded with Bonitas but remain independent and are not necessarily operated or maintained by Bonitas.
    • We encourage all Users to learn and review the privacy policies of any third party websites before providing Personal Information or interacting with such websites.
    • Bonitas is not responsible for any loss or damage that may arise from the use of third party websites.

11. Changes to this Privacy Policy
    • Bonitas reserves the right to amend or update this Privacy Policy from time to time.
    • Any changes will be published on the website and, where appropriate, communicated to Users through available communication channels.
    • Users are encouraged to review this Privacy Policy periodically to remain informed of how Personal Information is collected, Processed and protected.
    • Continued use of the Website, mobile applications or other digital platforms after changes have been made shall constitute acceptance of the updated Privacy Policy.

Last updated: 15 May 2026

This version of the Policy replaces and supersedes all other Privacy Policies that have been previously issued.