PRIVACY POLICY
Last updated: 15 May 2026
1. Introduction
Lizelda Goslin ("the Practitioner", "we", "us", or "our"), a clinical psychologist registered with the Health Professions Council of South Africa (HPCSA), is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website [insert URL] (the "Website"), make an enquiry, or engage our psychological services.
This Policy is issued in compliance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA"), the HPCSA Ethical Rules, and other applicable South African law.
By using this Website or engaging our services, you confirm that you have read, understood, and consented to the processing of your personal information as described in this Policy.
2. Who We Are (Responsible Party)
For the purposes of POPIA, the Responsible Party is:
Lizelda Goslin Clinical Psychologist
HPCSA Registration Number: PS 0041424
Practice Number: PR.8628637
Physical Address: 09 Readman St, Wilkoppies, Klerksdorp, 2571.
Email: info@lgoslin.co.za
Telephone: 018 468 5720
Information Officer: Lizelda Goslin Information Officer Email:info@lgoslin.co.za
3. What Personal Information We Collect
We collect personal information that you provide to us directly, as well as limited information collected automatically when you use the Website.
3.1 Information you provide via the Website:
Name and surname
Email address
Telephone number
The content of any message or enquiry you submit
Any other information you voluntarily include in a contact form or email
3.2 Information collected if you become a client:
When you engage the Practitioner's psychological services, additional personal information will be collected as part of the therapeutic process, including:
Identity number, date of birth, gender
Postal and residential address
Medical aid scheme details and membership number
Next-of-kin / emergency contact details
Referring practitioner details (if any)
Health information, including mental health history, presenting concerns, clinical notes, assessment results, and treatment plans
Payment and billing information
Under POPIA, health information is classified as "special personal information" and is subject to stricter protections. We process this information solely for the purposes of providing psychological care and only with your express consent or as otherwise permitted by law.
3.3 Information collected automatically via the Website:
IP address and approximate location
Browser type and device information
Pages visited and time spent on the Website
Referring website (if applicable)
This information is collected through cookies and similar technologies — see clause 9 below.
4. How We Collect Personal Information
We collect personal information:
Directly from you when you complete a contact form, send an email, or telephone the practice;
Directly from you during consultations and the therapeutic process;
From third parties with your consent, such as a referring medical practitioner, medical aid scheme, or another health professional involved in your care;
Automatically through the Website (cookies, analytics).
5. Why We Process Your Personal Information (Purposes)
We process your personal information for the following purposes:
To respond to enquiries submitted via the Website, email, or telephone;
To schedule, confirm, and manage appointments;
To provide psychological assessment, therapy, and related healthcare services;
To maintain clinical records as required by the HPCSA Ethical Rules and applicable law;
To process payments and submit claims to medical aid schemes (where applicable);
To comply with legal, regulatory, and professional obligations;
To improve the Website and our services;
To send appointment reminders or practice-related communications (where you have consented).
6. Lawful Basis for Processing
We process your personal information on one or more of the following lawful bases under POPIA:
Your consent — for example, when you submit an enquiry or agree to receive therapy;
Performance of a contract — to provide the services you have engaged us for;
Compliance with a legal obligation — for example, retention of clinical records as required by the HPCSA;
Protection of a legitimate interest — yours, ours, or that of a third party (for example, in emergencies involving risk of harm);
Establishment, exercise, or defence of a legal right or claim.
For special personal information (health data), we rely primarily on your express written consent and the exception under section 32 of POPIA, which permits processing by health practitioners for the proper treatment and care of a data subject.
7. How We Share Your Personal Information
We treat your information as strictly confidential and only share it where necessary and lawful.
We may share your personal information with:
Medical aid schemes and administrators, for the purpose of submitting claims (with your consent);
Referring or treating health practitioners, where collaboration in your care is necessary (with your consent);
Service providers (Operators) who assist us in running the practice — for example, the website host, IT support, electronic billing systems, or practice management software. These Operators are contractually bound to protect your information in line with POPIA;
Legal, regulatory, or professional bodies, where required by law (e.g. HPCSA investigations, court orders, statutory reporting obligations under the Children's Act or Mental Health Care Act);
Emergency services or third parties, where there is a serious risk of harm to you or another person.
We do not sell your personal information to third parties under any circumstances.
8. Cross-Border Transfers
Some of our service providers (for example, email or cloud hosting providers) may store data on servers located outside South Africa. Where this occurs, we ensure that the recipient is subject to laws, binding rules, or agreements that provide an adequate level of protection comparable to POPIA, in line with section 72 of POPIA.
9. Cookies and Website Analytics
The Website uses cookies and similar technologies to function properly and to help us understand how visitors use the site.
Types of cookies we use:
Strictly necessary cookies — required for the Website to function;
Analytics cookies — for example, Google Analytics, which helps us understand visitor behaviour in aggregate;
Functional cookies — to remember preferences such as language or display settings.
You can disable cookies in your browser settings, but doing so may affect the functionality of the Website.
10. How Long We Keep Your Personal Information
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Website enquiries: retained for up to 12 months unless you become a client, in which case the information is incorporated into your clinical file;
Clinical records: retained for a minimum period as required by the HPCSA Ethical Rules — currently a minimum of 6 years from the date of last consultation for adult clients, and until a minor client reaches the age of 21, whichever is longer. Records may be retained for longer where clinically or legally justified;
Financial and billing records: retained for a minimum of 5 years in accordance with the Tax Administration Act;
Website analytics data: retained in line with the relevant analytics provider's standard retention periods.
Once the retention period expires, your information will be securely destroyed, deleted, or de-identified.
11. How We Protect Your Personal Information
We take reasonable technical and organisational measures to safeguard your personal information, including:
Secure storage of physical records;
Password protection and access controls for digital records;
Encryption of sensitive data where appropriate;
Regular review of security practices;
Confidentiality undertakings by anyone authorised to handle your information.
However, no system is entirely secure. While we take all reasonable precautions, we cannot guarantee absolute security of information transmitted to or from the Website, particularly via unencrypted email. Please avoid sending sensitive clinical information through unsecured channels.
12. Your Rights as a Data Subject
Under POPIA, you have the following rights:
Right of access — to be informed whether we hold personal nformation about you, and to request a copy;
Right to correction or deletion — to request that we correct or delete inaccurate, irrelevant, excessive, outdated, or unlawfully obtained information;
Right to object — to object, on reasonable grounds, to the processing of your personal information;
Right to withdraw consent — where processing is based on consent, subject to legal or professional obligations that may require continued retention (e.g. clinical records);
Right to lodge a complaint — with the Information Regulator (see clause 14).
To exercise any of these rights, please contact the Information Officer in writing at [insert email]. We may require you to verify your identity before processing your request. We will respond within a reasonable period and in accordance with POPIA's prescribed timeframes.
Note: Certain rights are subject to limitations. For example, you cannot require deletion of clinical records during the legally mandated retention period set by the HPCSA.
13. Children's Privacy
Where the Practitioner provides services to a minor (under 18), personal information will only be processed with the consent of a competent person (parent or legal guardian), except where the minor is legally entitled to consent independently in accordance with South African law. The Website is not directed at children, and we do not knowingly collect personal information from children through the Website without parental consent.
14. Complaints
If you believe we have processed your personal information unlawfully or in breach of POPIA, you may:
14.1 Contact our Information Officer in the first instance: Email: [Insert] Telephone: [Insert]
14.2 Lodge a complaint with the Information Regulator of South Africa:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 PO Box 31533, Braamfontein, 2017
Email: complaints.IR@justice.gov.za
General enquiries: inforeg@justice.gov.za
Website: www.inforegulator.org.za
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The updated version will be posted on the Website with a revised "Last updated" date. Material changes will, where reasonably practicable, be brought to your attention.
16. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact:
Lizelda Goslin
Practice address: 09 Readman St, Wilkoppies, Klerksdorp, 2571
Email: info@lgoslin.co.za
Telephone: 018 468 5720