Privacy Policy
This Privacy Policy is drafted in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) of the Republic of South Africa. Your personal information is processed lawfully, fairly, and transparently.
1. Who we are
Zazi Health ("Zazi Health", "we", "us", "our") is a South African FemTech company operating the website at zazihealth.com. We are currently in pre-launch phase, developing a prescription-free, tech-enabled at-home HPV screening solution for South African women.
For the purposes of the Protection of Personal Information Act, 4 of 2013 (POPIA), Zazi Health is the Responsible Party meaning we determine the purpose and means of processing your personal information.
Our designated Information Officer can be contacted at
Information Officer: Lisa Rorani
Email: lisa@zazihealth.com
Website: www.zazihealth.com
Location: Gauteng, South Africa
2. Information we collect
We collect only the personal information necessary for the specific purpose for which it is collected. At this pre-launch stage, the information we collect is limited to the following categories
| Category | Specific data | Where collected |
|---|---|---|
| Identity | Full name, first name, last name | Waitlist form, contact form |
| Contact | Email address, phone number (optional) | Waitlist form, contact form |
| Demographic | Province of residence, age range | Waitlist form |
| Enquiry content | Messages, questions, topics raised | Contact form |
| Communication preferences | Email opt-in status, unsubscribe requests | Waitlist registration, email system |
Information collected automatically
When you visit our website, we may automatically collect certain technical information through cookies and similar technologies, including:
- IP address and approximate geographic location (country/region level only)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or search terms that led you to our site
- Date and time of your visit
This technical information does not identify you personally unless combined with other information you have provided to us.
3. How we collect your information
We collect your personal information through the following means:
- Directly from you - when you complete our waitlist registration form, submit a contact form, or email us directly
- Automatically - through cookies and analytics tools when you browse our website
- Social media - if you interact with our Instagram (@zazihealth) or Facebook (Zazi Health) pages, those platforms may share certain information with us in accordance with their own privacy policies
We do not purchase, rent, or obtain personal information from third-party data brokers or marketing lists.
4. Why we use your information
We process your personal information only for specific, explicitly stated purposes. We do not use your information for any purpose incompatible with the reason it was originally collected.
We will never: sell your personal information to third parties, use your information for unrelated marketing without your explicit consent, or share your health-related data with any party without your express permission.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Managing your waitlist registration | Name, email, province, age range | Consent |
| Notifying you when Zazi Health launches | Email address | Consent |
| Responding to your enquiries | Name, email, message content | Consent / Legitimate interest |
| Sending product and health updates (if opted in) | Email address, name | Consent |
| Understanding our audience demographics | Province, age range (aggregated) | Legitimate interest |
| Improving our website performance | Technical/analytics data | Legitimate interest |
| Complying with legal obligations | Any relevant data | Legal obligation |
5. Lawful basis for processing
Under POPIA, we are required to have a lawful basis for processing your personal information. We rely on the following grounds:
- Consent - where you have freely, specifically, and informedly agreed to processing, such as when you join our waitlist or opt into communications. You may withdraw your consent at any time.
- Legitimate interest - where processing is necessary for our legitimate business interests and does not override your rights, such as analysing aggregate website usage to improve our service.
- Legal obligation - where we are required by South African law to process your information, such as maintaining records for regulatory compliance.
- Performance of an agreement where processing is necessary to fulfil a commitment we have made to you, such as sending you a launch notification you have requested.
6. Sharing your personal information
Zazi Health does not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:
Service providers (Operators under POPIA)
We may share your information with trusted third-party service providers who assist us in operating our website and business. These providers process your data only on our instructions and are contractually bound to protect it. Examples include:
- Email service providers (to send waitlist and launch communications)
- Website hosting and infrastructure providers
- Analytics platforms (to understand website usage in aggregate)
Legal requirements
We may disclose your information if required to do so by law, regulation, court order, or in response to a lawful request by South African authorities, including in connection with national security or law enforcement requirements.
Business transfers
If Zazi Health is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
With your consent
We will share your information with any third party where you have given us explicit consent to do so.
7. How we protect your information
Zazi Health implements appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- Encrypted data transmission using SSL/TLS protocols (HTTPS)
- Access controls limiting who within Zazi Health can access personal data
- Regular review of our data handling and security practices
- Use of reputable, secure third-party platforms for email and data storage
- Staff awareness of data protection obligations under POPIA
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in harm to you, we will notify you and the Information Regulator as required by POPIA within a reasonable timeframe.
You can help protect your information by keeping your email account secure and contacting us immediately if you suspect any unauthorised use of your personal information.
8. Cookies & tracking technologies
Our website may use cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site.
What are cookies?
Cookies are small text files placed on your device when you visit a website. They help the website remember information about your visit and can make your next visit easier and more useful.
Types of cookies we may use
- Essential cookies — necessary for the website to function correctly. These cannot be disabled.
- Analytics cookies — help us understand how visitors interact with our website by collecting information anonymously. We use this to improve our site.
- Preference cookies — remember your settings and preferences to personalise your experience.
Managing cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is placed. Please note that disabling certain cookies may affect the functionality of our website.
For more information about cookies and how to manage them, visit www.allaboutcookies.org.
9. Children's privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age.
If you are under 18, please do not submit any personal information through our website without the consent and supervision of a parent or legal guardian.
If we become aware that we have inadvertently collected personal information from a child under 18 without appropriate consent, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a minor, please contact us at lisa@zazihealth.com.
10. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our services. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify waitlist registrants via email where the change materially affects how we process their data
- Display a prominent notice on our website where appropriate
Your continued use of our website or services after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.