Privacy Policy

Who I Am
My website address is: https://helpingprediabetics.com.

POPIA Compliance
This Privacy Policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA). helpingprediabetics.com is the Responsible Party under POPIA for the personal information I collect and process.

Responsible Party: HELPINGPREDIABETICSDOTCOM PTY LTD (Registration number 2026/168346/07), trading as helpingprediabetics.com
Information Officer: Edgar Barlow
Email: info@helpingprediabetics.com
Physical Address: 39 Boswewer Street, Louwville, 7380

As Information Officer, I am responsible for ensuring compliance with POPIA and handling data subject requests related to your personal information.

Comments
When visitors leave comments on the site, I collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media
If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the website.

Cookies
I use cookies to improve your experience on my website. Cookies are small text files stored on your device that help me understand how you use my site and enable certain functionality.

Types of Cookies I Use:

Essential Cookies (No Consent Required):
These cookies are necessary for the website to function properly and cannot be disabled:

  • Login cookies (last 2 days; screen options last 1 year)
  • Editing cookies when publishing articles (expire after 1 day)
  • Browser acceptance check cookies (temporary)

Non-Essential Cookies (Require Your Consent):
These cookies enhance your experience but are not essential for basic website functionality:

  • Analytics Cookies (Google Analytics): Track how visitors use my website (pages visited, time spent, geographic location at city/country level, device type, referral source). This helps me improve website performance and content. No personally identifiable information is collected.
  • Comment Cookies: If you leave a comment and opt-in, your name, email, and website are saved in cookies for convenience (last 1 year).
  • Affiliate Tracking Cookies: Track referrals from affiliate links (e.g., Amazon Associates) to earn commissions on qualifying purchases. These cookies do not store personal data.
  • Payment Processing Cookies: Enable secure transactions through Payhip and PayPal. These facilitate purchase tracking.
  • Landing Page Cookies (MailerLite): My opt-in pages are hosted by MailerLite (Lithuania, EU, GDPR-compliant). MailerLite uses strictly necessary cookies to enable form submission functionality and prevent duplicate submissions. These cookies are essential for the opt-in process to work and do not require separate consent under POPIA. By submitting the form, you provide explicit consent to join my email list. See MailerLite’s Privacy Policy: https://www.mailerlite.com/legal/privacy-policy

Cookie Consent:
When you first visit my website, I will ask for your consent before placing non-essential cookies on your device through my cookie consent banner.

You can manage your cookie preferences at any time by:

  • Adjusting your browser settings to block or delete cookies
  • Withdrawing consent through my cookie preference center
  • Opting out of Google Analytics specifically using the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Embedded Content:
Articles may include embedded content (videos, images, articles) from other websites (e.g., YouTube, Twitter). When you interact with embedded content, those websites may collect data about you, use cookies, and track your interaction as if you visited their site directly. I do not control these third-party cookies. Please refer to the privacy policies of those websites.

For more information about cookies and how to manage them, visit: https://www.aboutcookies.org/

Who I Share Your Data With
I share data with:

I do not sell your personal information. Consultation information is shared only with the providers needed to deliver your session and store your records.

Analytics Tracking
I use Google Analytics to understand how visitors use my website. Google Analytics collects information such as:

  • Pages visited and time spent on site
  • Geographic location (city/country level, not precise location)
  • Device type and browser used
  • How you found my site (search, social media, direct visit)

Google Analytics uses cookies to track this information. No personally identifiable information is collected through Google Analytics. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

For more information on how Google uses data, visit Google’s Privacy Policy: https://policies.google.com/privacy.

Information I Collect

Email List Sign-ups: When you sign up through my website or landing pages, for example to receive the free ebook, I collect your name and email address. This data is stored securely in MailerLite.

Digital Product Purchases: When you purchase ebooks or other digital products through Payhip, I collect billing information processed securely via PayPal. I do not store credit card information.

Subscription Management: I do not currently offer paid subscriptions. If I offer them in future, I will update this policy before I do.

Consultation Information: If you book a consultation, I collect your name, contact details and the health information you choose to share, such as your medical history, medication and test results. This is special personal information under POPIA. I collect it with your written consent and use it only to provide health education and to follow up with you. It is stored in access-restricted online storage (Google Drive) and is not used for marketing.

Legal Basis for Processing Personal Information
Under POPIA, I process your personal information based on the following legal grounds:

Consent: When you sign up to my email list through my website or landing pages, or when you opt-in to receive marketing communications, you provide explicit consent for me to process your email address and name for these purposes. You may withdraw consent at any time by unsubscribing via the link in my emails or contacting me directly.

Contractual Necessity: When you purchase digital products (ebooks, modules), I process your billing information to fulfill the contract and deliver the products you purchased.

Legitimate Interest: I use Google Analytics to understand how visitors use my website. This helps me improve user experience and website functionality. I ensure analytics data is anonymized and does not identify you personally. You may opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Consultation Information (health information): Health information is special personal information under POPIA. I process it only with your specific, informed and voluntary written consent, which you give on the consent form before your first session. As a registered pharmacist, I am bound by a professional duty of confidentiality. I use your health information only for your health education sessions, follow-up, and the record-keeping described in this policy. If you are under 18, I need the written consent of your parent or legal guardian. You may withdraw your consent at any time by emailing info@helpingprediabetics.com. Withdrawing does not affect records I am required to keep for the period stated below.

How Long I Retain Your Data

Comments: Comments and metadata are retained indefinitely to auto-approve follow-up comments.

Subscriber Data: Email list subscriber information is retained until you unsubscribe or request deletion.

Purchase Records: Transaction records are retained for tax and legal compliance purposes, typically 7 years.

Consultation Records: Consent forms, intake forms and session notes are kept for 6 years after your last session and then securely deleted. If you were under 18 at the time of your sessions, they are kept until you turn 21. I may keep them longer if the law requires it.

Your Rights Under POPIA
Under the Protection of Personal Information Act, you have the following rights regarding your personal information:

Right to Access: You can request a copy of the personal information I hold about you. I will provide this in a commonly used electronic format.

Right to Correction: If any personal information I hold about you is inaccurate, incomplete, or out of date, you have the right to request that I correct or update it.

Right to Deletion (Erasure): You can request that I delete your personal information. Please note that I may be required to retain certain information for legal, tax, or compliance purposes. Transaction records must be kept for 7 years under South African tax law. Consultation records are professional health records: I can give you a copy at any time, but I must keep the record itself for the period stated under How Long I Retain Your Data, after which I will delete it.

Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes at any time. You can unsubscribe from marketing emails using the unsubscribe link in any email or by contacting me.

Right to Data Portability: You can request that I provide your personal information in a structured, commonly used, and machine-readable format, or that I transfer it directly to another service provider where technically feasible.

Right to Restrict Processing: You can request that I restrict the processing of your personal information in certain circumstances, such as while I verify the accuracy of data you’ve disputed.

Right to Lodge a Complaint: If you believe I have violated POPIA or mishandled your personal information, you have the right to lodge a complaint with the South African Information Regulator:

Information Regulator (South Africa)
33 Hoofd Street, Forum III, 3rd Floor Braampark, Braamfontein, Johannesburg
P.O Box 31533, Braamfontein, Johannesburg, 2017
Email: inforeg@justice.gov.za
Website: https://www.justice.gov.za/inforeg/

How to Exercise Your Rights: To exercise any of these rights, contact me as Information Officer at info@helpingprediabetics.com. Please include:

  • Your full name and email address
  • The specific right you wish to exercise
  • Any relevant details to help me locate your information

I will respond to your request within a reasonable timeframe as required by POPIA. In most cases, I aim to respond within 30 days.

Managing your data:

  • Unsubscribe from emails: Click the unsubscribe link in any email
  • Delete account data: Email info@helpingprediabetics.com with your request

Data Security
I use SSL encryption to protect your data. Sensitive information (e.g., payments) is processed securely through third-party providers including Payhip and PayPal. I do not store payment card details on my servers.

Health Information and Consultations

If you book a consultation, I collect health information that you choose to give me, such as your medical history, medication and test results. This is special personal information under POPIA. I collect it only with your written consent, and I use it only to give you health education and to follow up with you.

Sessions are health education only. They are not medical advice, diagnosis or treatment, and I do not prescribe or advise on starting, changing or stopping any medicine.

As a registered pharmacist, I am bound by a professional duty of confidentiality. Your records are stored securely in access-restricted online storage (Google Drive) and are kept for 6 years after your last session (until age 21 if you were under 18), then deleted. They are not shared without your permission, except where the law requires it. With your permission, I may share relevant details with your doctor or a practice nurse if I refer you.

Content on this website is for information only and does not replace your doctor’s advice.

Where Your Data Is Sent
Visitor comments may be checked via automated spam detection services. Subscriber and customer data is processed by my trusted third-party service providers (MailerLite, Payhip, PayPal) who maintain their own privacy protections.

International Data Transfers

Some of my trusted third-party service providers process personal information outside South Africa. I ensure these providers maintain data protection standards equivalent to or exceeding POPIA requirements:

MailerLite (Lithuania, European Union):
Processes email list data. MailerLite is GDPR-compliant and provides adequate data protection safeguards. Privacy Policy: https://www.mailerlite.com/legal/privacy-policy

Google Analytics (United States):
Processes anonymized website usage data. Google processes this data in the United States under its own security and contractual safeguards. Privacy Policy: https://policies.google.com/privacy

Google Workspace, including Google Drive and Gmail (United States and other countries):
Stores my email and consultation records in access-restricted storage. Privacy Policy: https://policies.google.com/privacy

Zoom (United States):
Hosts online consultation sessions. Zoom applies its own security and contractual safeguards to the data it processes. Privacy Policy: https://explore.zoom.us/en/privacy/

PayPal (United States):
Processes payment transactions securely. PayPal is PCI-DSS compliant and maintains industry-standard payment security. Privacy Policy: https://www.paypal.com/za/webapps/mpp/ua/privacy-full

Payhip (United Kingdom):
Processes digital product sales and customer order data for one-off purchases such as ebooks. Payhip Limited is a UK company and states that it is GDPR-compliant. Payhip does not currently handle any subscription products of mine. Privacy Policy: https://payhip.com/privacy

Amazon Associates (United States):
Processes affiliate referral cookies (no personally identifiable information). Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496]

These international transfers are necessary to provide my services (email marketing, payment processing, website analytics, consultations and digital product delivery). All providers use encryption, secure servers, and contractual safeguards to protect your information. If you book a consultation, your written consent includes storing and processing your information with these providers outside South Africa.

Data Breach Notification
I implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, destruction, or damage. However, no system is completely secure.

In the unlikely event of a data breach that compromises your personal information and poses a risk to your rights and privacy, I will:

  • Notify the Information Regulator: I will report the breach to the South African Information Regulator within a reasonable timeframe as required by POPIA.
  • Notify Affected Individuals: If the breach poses a significant risk to you, I will notify you directly via email to the address I have on file. This notification will include:
    • Description of the breach and what information was affected
    • Likely consequences of the breach
    • Measures I have taken or propose to take to address the breach
    • Recommendations for steps you can take to protect yourself
  • Remedial Action: I will take immediate steps to contain the breach, assess the damage, and implement measures to prevent future incidents.

I maintain regular security audits, use SSL encryption for data transmission, and work only with reputable third-party providers who meet international security standards.

Contact Me
For POPIA-Related Requests (Access, Correction, Deletion, Objections):
Contact the Information Officer: info@helpingprediabetics.com

For General Privacy Questions or Other Inquiries:
Email: info@helpingprediabetics.com
Mail:
HELPINGPREDIABETICSDOTCOM PTY LTD
39 Boswewer Street, Louwville, 7380

Updates to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in my practices, services, or legal requirements. I will post any changes on this page with an updated “Last Updated” date.

I encourage you to review this Privacy Policy regularly to stay informed about how I protect your personal information.

Last Updated: 21 September 2026