Who we are
Sankofa Health (Pty) Ltd (registration number 2021/593224/07) is a South African company that curates health data, builds AI models on it and creates AI-powered products and services. Our registered office is at Suite 102, 25 Richefond Circle, Ridgeside Office Estate, Umhlanga Rocks 4319. We are the “responsible party” under the Protection of Personal Information Act 4 of 2013 (POPIA) for the personal information described in this notice.
What this notice covers
This notice explains how we handle personal information about visitors to sankofa.health, people who contact us through the site or by email, and the business contacts we deal with as partners, investors, suppliers and advisers. It does not describe how clinical data is handled on the Sankofa platform. That data is governed by the data processing agreements we sign with each data partner and by the platform’s own governance documents. No clinical or patient-level data is collected through this website.
The information we collect
When you use the contact form we collect your name, your organisation, your email address, the category you select (partner, investor, press or other) and the message you write. When you email us we collect what you choose to send. Our web host records standard technical information about each visit, such as your IP address, browser type and the pages requested, in ordinary server logs. We do not use analytics or advertising cookies, and we do not profile visitors.
Why we use it and on what basis
We use contact details and messages to answer your enquiry, to arrange meetings and follow-up you have asked for, and to keep a record of our dealings with you. Under POPIA we rely on the fact that you have asked us to respond (section 11(1)(b) and (d)) and on our legitimate interest in running our business and building partnerships (section 11(1)(f)). We use server logs to keep the site secure and working. We do not send marketing email unless you have asked for it, and any such email will carry an unsubscribe link.
Who we share it with
Messages sent through the contact form are delivered to us by a third-party form service, Web3Forms, which acts as our operator under section 20 of POPIA and may process the message outside South Africa. We only use operators that are bound by written terms to protect your information and to use it solely to deliver it to us. We also use email, document-storage and productivity services from established providers on the same basis. We do not sell personal information, and we do not share it with anyone else unless the law requires it or you ask us to.
Transfers outside South Africa
Where an operator we use processes personal information outside South Africa, we do so only where the recipient is subject to a law or binding agreement that provides substantially similar protection to POPIA, or where the transfer is necessary to deal with your enquiry, as section 72 of POPIA allows.
How long we keep it
We keep enquiry records for as long as we need them to deal with the enquiry and for up to three years afterwards, so that we can pick up a conversation where it left off, unless the law or a contract we conclude with you requires a longer period. Server logs are kept for no longer than twelve months.
How we protect it
We apply appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access and unlawful processing, as section 19 of POPIA requires. These include access control, encryption in transit and at rest where our providers support it, and staff confidentiality obligations. If we become aware of a compromise of personal information that we hold, we will notify the Information Regulator and the people affected as section 22 requires.
Your rights
You may ask us what personal information we hold about you, ask us to correct or delete it, object to processing based on our legitimate interests, and withdraw any consent you have given. To exercise these rights, write to privacy@sankofa.health or to the Information Officer at the address above. Access requests are handled under the Promotion of Access to Information Act 2 of 2000 in the manner set out in our PAIA manual. If you are not satisfied with our response, you may complain to the Information Regulator, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191; enquiries@inforegulator.org.za; inforegulator.org.za.
Cookies
This site uses no cookies for tracking, analytics or advertising. If that changes, we will update this notice and, where the law requires it, ask for your consent first.
Children
The site is intended for organisations and professionals. We do not knowingly collect personal information from children, and we will delete any that we discover we have received.
Links to other sites
The site links to third-party sites such as LinkedIn. Those sites have their own privacy practices, which we do not control.
Information Officer
Information Officer: Mickey Venter. Deputy Information Officer: Garett Sidwell. Both can be reached at privacy@sankofa.health. Postal and physical address: Suite 102, 25 Richefond Circle, Ridgeside Office Estate, Umhlanga Rocks 4319.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last reviewed, and we will signpost material changes on the site.