Privacy Notice
How Dr Corné van Graan’s practice handles your personal information, in line with the Protection of Personal Information Act (POPIA).
Your information and your rights
Responsible party: Dr Corné van Graan, Specialist Urologist — Suite 33, Life Wilgeheuwel Hospital, Amplifier Street, Radiokop, Roodepoort, and Johannesburg Surgical Hospital, Northcliff.
Information Officer: Sister Yolandé Tolman — yolande@urology.joburg, 011 796 6673.
What we collect
When you phone, email or visit the practice, we collect the information needed to care for you: your name, ID number, contact details, medical aid details, and your health information (history, examination findings, test results, scans and treatment records).
Why we collect it
- To assess, diagnose and treat you, and to follow up after treatment
- To arrange tests, hospital admissions and procedures
- To bill you and claim from your medical aid
- To meet our legal and professional record-keeping obligations
Providing your information is voluntary, but without it we cannot treat you safely or submit claims on your behalf.
Who we share it with
Only those involved in your care or payment, and only as much as they need: hospitals, laboratories, radiology practices, anaesthetists, other doctors treating you, and your medical aid — or where the law requires it. We do not sell your information or use it for marketing.
How we protect it
Your records are kept confidential and stored securely, with access limited to practice staff who need it for your care. We keep records for as long as the law and professional guidelines require.
How long we keep your records
We keep your health records for at least the periods set out in the HPCSA’s guidelines on patient records (Booklet 9): at least six years after your last visit; for children, at least until their 21st birthday; and for patients with a mental incapacity, for their lifetime. Some records must be kept longer by law — for example, occupational health records. After that, records are destroyed securely.
Information sent outside South Africa
Some services we use store or process information on servers outside South Africa — for example our email and cloud-storage providers, WhatsApp (Meta) if you message us, and Google when you view maps or videos on this website or accept analytics cookies. As section 72 of POPIA requires, we only use established providers that are bound by data-protection laws or agreements giving protection comparable to POPIA.
Your rights
You may ask to see the information we hold about you, ask us to correct it, or object to how it is used (subject to legal record-keeping requirements). Contact our Information Officer above. If you are not satisfied with our response, you may complain to the Information Regulator.
This website
This website has no forms and does not ask for your personal information. If you tap the WhatsApp button, your message is handled by WhatsApp (Meta) — please use it for appointments and admin only, and don’t send medical details. Please don’t send sensitive medical details by email unless we ask you to. (Referring doctors: see For Doctors for how to send referral letters.)
Analytics cookies: with your permission (the Accept/Decline banner), we use Google Analytics to count visits and see which pages and contact buttons are used, so we can improve the site. We do not collect your name, contact details or medical records. Analytics does record which pages are visited — so a visit to a page about a particular condition is counted, but it is not linked to you by name. If you decline, no analytics cookies are set. To change your choice at any time, use the Cookie settings link at the bottom of any page.
Pages with embedded Google Maps or YouTube videos load content from Google, which may set its own cookies under Google’s privacy policy.
Last updated: 2 October 2026