How Laktis handles personal information, under the Protection of Personal Information Act, 2013. Last updated 8 September 2026.
Laktis (registration number 2026 / 556959 / 07) is a company registered in South Africa. We publish this website and provide practice management software to private medical practices.
This policy covers information we collect about you — as a visitor to this site, or as someone who contacts us about the software.
It does not cover patient records held inside the Laktis software. Where a medical practice uses Laktis, that practice is the responsible party for its patients' information and we act as its operator, processing that information only on the practice's instruction and under a written agreement. If you are a patient of a practice that uses Laktis, contact that practice about your records.
This site does not use analytics, advertising trackers or marketing cookies. Our hosting provider processes standard server request information, including IP address and browser type, for security and availability.
If you email us, we hold your name, email address and the content of your message so that we can reply and keep a record of the correspondence.
We do not sell personal information, and we do not use it for advertising.
We use third-party service providers to run our business, including website hosting, email, cloud storage and messaging delivery. They process information on our instruction under contract and are not permitted to use it for their own purposes. We do not otherwise share personal information except where the law requires it.
Some of our service providers store or process information outside South Africa. Where that happens, we rely on section 72 of the Protection of Personal Information Act and select providers whose contractual terms and safeguards require a level of protection substantially similar to that Act. We maintain a record of the providers involved and the safeguards applying to each.
We keep enquiry correspondence for as long as needed for the purpose it was sent, and thereafter only where a law requires us to retain it. When a retention period ends, records are deleted or de-identified.
We apply technical and organisational measures appropriate to the sensitivity of the information we hold, including encryption in transit, access control, restricted administrative access and logging. No system is perfectly secure, and we do not claim otherwise. Where a security compromise affects personal information, we notify the Information Regulator and the people affected as required by section 22 of the Act.
Under the Act you may ask us to confirm what personal information we hold about you and to give you a copy of it; ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, misleading or unlawfully obtained; object to our processing on reasonable grounds; and withdraw consent where we relied on it.
Write to the address below. We may need to confirm your identity before acting on a request. Requests for access are handled under the Promotion of Access to Information Act, 2000.
If you are not satisfied with how we have handled your information, you may complain to the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg — complaints.IR@justice.gov.za.