How we use your webinar registration details

Who we are

BioHealix (Pty) Ltd ("BioHealix", "we", "us") is a healthcare consulting and medical technology company with its registered address in Johannesburg, South Africa. We are the responsible party (also called the data controller or data fiduciary) for the personal information collected for our webinars. BioHealix has no offices outside South Africa.

What we collect

When you register through LinkedIn or Microsoft Teams, or attend a webinar, we collect:

• your first and last name
• your email address
• your job title and employer or company name
• your country or region
• your professional council registration number (for example HPCSA or SANC), only if you give it so we can issue a certificate
• whether and for how long you attended, and any questions or poll answers you submit during the session

We do not ask for health information or other sensitive (special category) personal information. Please do not include patient details in questions. Our webinars are for healthcare professionals and students aged 18 or over.

Why we use it, and our legal basis

• Running the webinar: to register you, send the joining link and reminders, and tell you about changes. We need this to provide the webinar you asked for.
• Certificates and CPD: to keep attendance records, issue certificates and report to accrediting bodies. This is in our legitimate interests and, where accreditation rules apply, a legal or regulatory requirement.
• Improving our webinars: to understand which professions and countries we reach, using combined statistics where possible. This is in our legitimate interests.
• Marketing: to tell you about future webinars and BioHealix products and services, only if you tick the consent box. This is based on your consent.

We do not make automated decisions about you, and we do not use your information to build advertising profiles.

Consent and marketing

Registering lets us contact you about the webinar you signed up for. We send marketing only if you have given consent. You can withdraw consent at any time by using the unsubscribe link in any email or by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.

Who we share it with

We do not sell your personal information. We share it only where needed:

• CPD accreditation bodies: the South African Medical Association (SAMA) and the Health Professions Council of South Africa (HPCSA), so CPD points can be recorded for HPCSA-registered attendees. Where a nursing CPD provider is involved, we share only what they need to process your points.
• Platforms we use: LinkedIn (event registration) and Microsoft (Teams webinar hosting). Their own privacy policies also apply.
• Our service providers: for example our marketing agency, who act only on our instructions and under confidentiality obligations.
• Where the law requires it.

International transfers

Your information is held by BioHealix in South Africa and by LinkedIn and Microsoft, whose servers may be in other countries, including the United States, Ireland and other parts of the EU. If you are joining from outside South Africa, your information will be transferred to South Africa.

We rely on safeguards that the law recognises, such as the data processing terms and standard contractual clauses that LinkedIn and Microsoft provide. You can ask us for more detail about these safeguards.

How long we keep it

We keep registration details for up to 12 months after the webinar, unless you have agreed to receive future communications. Attendance and CPD records are kept for as long as accrediting bodies require for audit purposes. After that, we delete or anonymise them securely.

How we protect it

Only the BioHealix staff and service providers who need registration data can access it, and we take reasonable technical and organisational steps to keep it secure. If a breach affects your information, we will tell you and the relevant regulator as the law requires.

Recording

If a session is recorded, we will tell you at the start of the webinar. Recordings are used only for educational and quality purposes. If you would prefer your name not to be read out with a question, please say so when you submit it.

Your rights

Wherever you are, you can ask us to:

• tell you what personal information we hold about you and give you a copy
• correct or update it
• delete it, unless we must keep it, for example for CPD audit records
• stop using it for direct marketing, or object to other uses
• withdraw your consent at any time

Email info@biohealix.co.za with "Privacy request" in the subject line. We will reply within 30 days and will not charge you. We may need to confirm your identity first.

Laws in your country

We handle all webinar data to the standard of South Africa's Protection of Personal Information Act 4 of 2013 (POPIA). If you join from another country, your local data protection law may give you further rights, as set out below.

European Union, EEA and United Kingdom

The EU General Data Protection Regulation (GDPR) and the UK GDPR may apply. Our legal bases are listed above. As well as the rights above, you can ask us to restrict how we use your information, and to give it to you in a portable format. You can complain to the data protection authority in the EU country where you live or work. In the UK, you can complain to the Information Commissioner's Office (ico.org.uk).

India

The Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 are being phased in. We follow their principles now. You can ask for a summary of the data we hold, have it corrected or erased, raise a grievance with us, and nominate someone to exercise your rights if you die or become incapacitated. If we cannot resolve your grievance, you can approach the Data Protection Board of India.

Other African countries

Many African countries have their own data protection laws. These include Nigeria (Nigeria Data Protection Act 2023), Kenya (Data Protection Act 2019), Ghana (Data Protection Act 2012), and Zambia, Zimbabwe and Botswana. You can use the rights above, and you can complain to your national data protection authority, for example the Nigeria Data Protection Commission, Kenya's Office of the Data Protection Commissioner or Ghana's Data Protection Commission.

United States

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Whichever state you live in, we will respond to your requests to access, correct or delete your information.

Contact and complaints

If you live outside South Africa, you can also complain to your local regulator, as listed above. We would appreciate the chance to resolve your concern first.

Changes to this notice

We may update this notice from time to time. The latest version is always available at this link.

Last updated: 28 October 2026