Privacy Policy
Effective date: 28 July 2026 Last updated: 28 July 2026
1. WHO WE ARE
Prime Diagnostics operates the Prime Diagnostics Patient Portal and mobile application, together referred to as the Service. The Service provides authorised patients and healthcare practitioners with access to radiology studies, medical images, reports and related account services.
Prime Diagnostics is the responsible party for personal information processed through the Service. Information is processed in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA), applicable healthcare confidentiality duties and lawful recordkeeping requirements.
Privacy and Information Officer enquiries may be sent to admin@primerad.co.za.
2. INFORMATION WE PROCESS
Patient information may include:
- name and surname;
- South African identity number;
- email address and telephone number;
- password hash and verification records;
- account status and policy-acceptance records;
- login, security, session and audit records;
- support correspondence; and
- account or data-deletion requests.
Healthcare-practitioner information may include:
- name, identity number and contact details;
- practice number, practice address and discipline;
- report-delivery email addresses and requested username;
- professional-access status and administrator review records; and
- policy-acceptance and deletion-request records.
The Service may also process patient identifiers, study dates, examination descriptions, modalities, accession or invoice references, referring-practitioner information, medical images, reports and related clinical metadata.
Prime Diagnostics does not sell personal or health information, use it for targeted advertising or provide it to data brokers.
3. WHY WE PROCESS INFORMATION
Information is processed to:
- register, identify and verify users;
- authenticate accounts and maintain secure sessions;
- match verified patients to the correct radiology records;
- verify practitioners and administer professional access;
- provide authorised access to studies, images and reports;
- send verification, service and security communications;
- respond to support, correction, objection and deletion requests;
- protect accounts and investigate misuse;
- maintain compliance and security audit records; and
- comply with healthcare, legal, regulatory and record-retention duties.
The applicable legal basis may include consent, performance of the Service requested by the user, legitimate operational and security interests, compliance with legal obligations and healthcare-related processing permitted by law.
4. SHARING AND SERVICE PROVIDERS
Information is available only to authorised Prime Diagnostics personnel and authorised healthcare practitioners who require it for legitimate clinical, administrative or support purposes.
Prime Diagnostics may use service providers for secure hosting, email delivery, backup, security, infrastructure and technical support. Those providers may process only the information needed to provide their contracted services and must protect it appropriately.
Information may be disclosed where required by law, court order, regulator, law-enforcement authority or professional duty, or where reasonably necessary to protect a person, investigate fraud or establish legal rights.
5. INTERNATIONAL PROCESSING
Some service providers may process limited information outside South Africa. Where this occurs, Prime Diagnostics will use reasonable contractual, technical and organisational safeguards appropriate to the information and applicable law.
6. SECURITY
Prime Diagnostics applies reasonable safeguards appropriate to sensitive identity and health information. These include HTTPS encryption, password hashing, secure mobile-token storage, restricted administrator access, account-status controls, session controls, rate limiting and audit logging.
No internet service can guarantee absolute security. Users must protect their credentials and devices, sign out from shared devices and promptly report suspected unauthorised access.
7. RETENTION
Portal registration and contact information is kept while an account is active and thereafter only for as long as reasonably required for security, legal, audit, dispute-resolution and operational purposes.
Radiology images, reports and related clinical records form part of the healthcare record and may need to be retained for medical history, continuity of care and legal or professional recordkeeping requirements after an app or portal account is closed.
Deletion-request records may be retained in anonymised or minimal form to demonstrate that a request was received and completed.
8. ACCOUNT AND DATA DELETION
Patients may request closure of their account and deletion or anonymisation of eligible portal information through the mobile application or the public request form at https://results.primerad.co.za/data-deletion-request.php.
Healthcare practitioners may request revocation of access and deletion or anonymisation of eligible practitioner account information by contacting admin@primerad.co.za. A dedicated practitioner request form will be added to the account-management workflow.
Prime Diagnostics may verify the requester’s identity or professional authority. Information that must be retained for healthcare, legal, security or compliance purposes will not be deleted merely because an app account is closed.
9. YOUR RIGHTS
Subject to applicable law and identity verification, users may request access to eligible personal information, correction of inaccurate information, deletion or anonymisation of information that may lawfully be removed, objection to certain processing and review of a privacy complaint.
Requests may be sent to admin@primerad.co.za. A person may also lodge a complaint with the Information Regulator of South Africa through the Regulator’s official channels.
10. CHILDREN AND REPRESENTATIVES
The Service is not intended for independent account creation by children who do not have legal capacity to consent. Prime Diagnostics may require proof of parental responsibility, guardianship, authority or professional entitlement where access relates to a minor or represented person.
11. MEDICAL INFORMATION DISCLAIMER
The Service provides access to existing radiology information. It is not a medical device and does not diagnose, treat, cure or prevent any medical condition. Patients should discuss reports, symptoms, diagnoses and treatment decisions with a qualified healthcare professional. The Service is not an emergency service.
12. CHANGES AND CONTACT
Prime Diagnostics may update this policy when the Service, law or data practices change. The current version will remain available at https://results.primerad.co.za/privacy.php and within the mobile application. Material changes may require renewed acceptance.
Prime Diagnostics Email: admin@primerad.co.za