26 November 2025
This Privacy Policy explains how we obtain, use and disclose your personal information, as we are required in terms of the Protection of Personal Information Act, 2013 (“POPIA”) and constitutes our commitment to comply with the POPIA and provides insights on how we process personal information of data subjects, as set out in POPIA.
This portion of the website, namely, www.aftpharm.com/za-en (“Website”), is operated by AFT Pharmaceuticals SA (Pty) Ltd (“AFT”, “our”, “we” or “us”). AFT Pharmaceuticals SA (Pty) Ltd is a private company with limited liability, duly registered and incorporated in accordance with the company laws of South Africa under registration number: 2013/103862/07 and with its registered address situated at Suite A, Rubenstein Ridge, 617 Rubenstein Drive, Moreleta Park, Gauteng, South Africa. AFT Pharmaceuticals SA (Pty) Ltd is part of the AFT Pharmaceutical Group, which is comprised of different companies, the details of which can be found at aftpharm.com.
If you proceed to access or use this Website, you are agreeing to abide by this Privacy Policy and agree that we may process your personal information. The meanings of “processing” and “personal information” are as defined in POPIA. You also agree that we may use your information, (i) the purposes of providing you with access to the Website and the Website content and (ii) for any of the purposes listed in this Website. You may not access or use this Website if you do not agree to this Privacy Policy.
Who is responsible for the Processing of Your Personal Information?
The AFT entity responsible for the processing of your personal information will depend on how you interact with AFT’s Website and where you are located in the world. Please review our list of local entities on our Website for the name of the AFT entity responsible and it’s appropriate contact information.
What Personal information do we Use and Collect and When do we do so?
The type of personal information that we will collect from you, and you voluntarily provide to us on this Website, will vary depending on your particular interaction or engagement with us and on how you use our Website. The kinds of personal information AFT may collect and hold about you may include some or all of the following depending on the type of user you are:
| Storage Type | What we Store |
| User-Generated Content/Data | Name, Email Address, Free Format Text (Subject and Message for “Contact us” submission including any information about complaints, feedback, testimonials and preferences) |
| Website Usage Data | IP Address, Browser Type and Version, Operating System, Device Information (e.g., device type, screen resolution), Date and Time of Website Visits, Pages Visited on the Website, Clickstream Data (User’s navigational path) |
| Cookies and Tracking Data | Cookies (e.g., session cookies, persistent cookies), User Tracking Information (for analytics and personalisation) |
AFT may also hold other kinds of personal information as permitted or required by law or other kinds of personal information that AFT notifies you of at or about the time of collection. This may include (but is not limited to) your age, date of birth or gender.
In some cases, AFT may also be required to collect sensitive information from you to the extent that it is reasonably necessary to provide our products or services, including health information (such as information about reactions and conditions or medications you have taken). If we do need to collect sensitive information about you, we will only do so with your consent or where we are required to do so by law.
If you are a healthcare professional, we may also collect information about your professional details, practice areas and specialities, membership of associations or dealings with us in respect of enquiries, reactions or other events, trial involvement or otherwise.
Using Your Personal information
Personal information collated and held by or on behalf of AFT may be used for a variety of purposes, depending on the circumstances in which it was collected. These include communicating with you, providing a product or service you have requested, managing and complying with our legal requirements, facilitating product recalls and compliance, direct marketing and/or to enable your participation in activities.
AFT will collect, store, and use your personal information in compliance with provisions of the POPIA and all other applicable laws in South Africa. In this regard, we may use, process and in limited cases disclose your personal information to provide you with various information and/or services and rely on certain lawful bases to do so, including but not limited to the following:
As necessary for our own legitimate interests or those of other persons and organisations, including but not limited to:
- Providing our business or perform the services or provide the products you have requested.
- Market research, analysis, and developing statistics.
- Ensuring the security of our website.
As necessary to comply with a legal obligation, including but not limited to:
- When you exercise available rights under Access to information and privacy legislation and make requests to access or update your information.
- For compliance with legal and regulatory requirements (including, where relevant, in relation to product recalls and related requirements) and related disclosures
- For the establishment and defence of legal rights and for the conduct of proceedings.
When you use our Website “Contact Us” submission form
When you make an online query on our website using the “Contact” section, we will use your name, email address, phone number, and any other information provided to us in order to manage and respond to your query.
If your query relates to an adverse reaction to any product, we will hold and manage your information in order to meet our legal requirements and may disclose information to any relevant regulators to the extent we are legally required to do so. Wherever possible, and legally permitted, we will take steps to anonymise any information before it is transferred.
To Protect Our or Others’ Rights, Property or Safety
We may also use personal information about how you use our Website and platform, to prevent, detect, or investigate fraud, abuse, illegal use, violations of our Terms of Use, and to comply with court orders, governmental requests, or applicable law. Information collected may also be used to facilitate and manage product recalls or product withdrawals.
Sharing of Your Personal information
We do not sell your personal information. We may share your personal information with other organisations in the following circumstances:
- We may use third party service providers who process your personal information as part of their services to us including IT service providers.
- Where we are required to share personal information to comply with legal and regulatory obligations (such as tax authorities).
- We may use data processors who are third parties who provide elements of services for us, such as cloud service providers and payment processing platforms. We have Data Processing Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or further sub-processors who must comply with our Data Processing Agreement. They will hold your personal information securely and retain it for the period we instruct. For more information about the third parties we work with, please refer to the “Third-Party Processors and Service Providers” subheading of this policy.
- We may share it with AFT entities for the purposes and under the conditions outlined above. This includes our subsidiaries, related companies and affiliated companies.
Our Website contains links to Websites owned and operated by third parties. If you use these links, you leave our Website. These links are provided for your information and convenience only and are not an endorsement by AFT of the content of such linked Websites or third parties. AFT has no control over the contents of any linked Website and is not responsible for these Websites or their content or availability.
Where We Store Your Personal Information and International Data Transfers
The personal information that we hold about you will be processed in South Africa and stored on servers which are located in New Zealand. Your personal information may also be stored in other countries, and shared with third-party service providers.
The personal information you provide may be transferred across foreign borders in terms of Chapter 9 of POPIA. Where we disclose your data outside of South Africa, we endeavour to ensure a similar degree of protection by using contracts which set out comparable safeguards to those that exist under POPIA and other relevant legislation in South Africa.
How Long We Keep Your Personal Information
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Where the same record has to be kept for more than one purpose and there is a different retention period for each of those purposes, the record is kept for the longer period.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Rights under Data Protection Law
The Right to be Informed about our Collection and Use of Personal information
You have the right to be informed about the collection and use of your personal information. We ensure we do this with our internal data protection policies and through this Privacy Policy. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
Right to Access and Correct Your Personal Information
You have the right to access the personal information that we hold about you, by making a request to access such information in terms of the Promotion of Access to Information Act No. 2 of 2000 (“PAIA”). If any of the personal information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct, erase and/or restrict such information. In certain circumstances, however, your rights may be limited if we have legal grounds to process your personal information. Should you wish to access or correct any information, please view our PAIA manual which will guide you through the process.
Right to Correction Your Personal Information
If any of the personal information we hold about you is inaccurate, incomplete, or out of date, you may also ask us to correct it. If it is reasonable in the circumstances for us to do so, we will make the requested change or correction, otherwise we’ll take reasonable steps to mark that information as having been subject to a change or correction request. In the alternative, you may follow the procedures as set out in our PAIA manual, which will guide you through the process.
Third-Party Processors and Service Providers
Our partners and service providers may process personal information about you on our behalf as described below:
| Service | Description |
| Security Vendors | These trusted experts employ advanced cybersecurity measures, such as intrusion detection, threat monitoring, and malware scanning, to protect your personal information from unauthorised access and cyber threats. |
| Customer Support Providers | We work with dedicated customer support providers. They assist in addressing your queries, resolving issues by securely managing and accessing relevant customer data. |
| Content Delivery Networks (CDNs) | To optimise the speed and reliability of our online services, we rely on Content Delivery Networks (CDNs). CDNs efficiently deliver web content to you by strategically distributing it across global servers. Personal information is cached and served from the nearest server, reducing latency, and enhancing your overall experience. |
| Content Management Systems | To assist us in the creation, management, and design of our Website. |
| Analytics and Advertising | To improve our products and provide you with relevant content and advertisements, we collaborate with analytics and advertising partners. They analyse user behaviour, preferences, and demographics to personalise your experience and deliver targeted ads. |
| Hosting Services | Providing the facilities needed to create and maintain our Website, as well as make it accessible through the internet. |
| Third Party | Service Provided | Description of Service |
| Podcom | IT infrastructure and development services | Podcom offers managed IT support and development services for AFT Group. |
| Fastly | Content Delivery Network and Web protection services | Fastly offers web efficiency and protection services for our platform. |
| P29 | Website Management and Administration | P29 offer Website design and management services for our product. |
| WordPress | Content Management | WordPress offers web content management systems. |
Cookies
We use cookies on our Website, which are small text files stored on your device. We use this information to better understand, customise and improve your experience with our Website, services and offerings. For us to do this, we place functional cookies to make the Website function as well as marketing cookies which help us target the right people and show them advertisements. Some of these cookies track your use of our Website and visits to other Websites and allow us to show you advertisements when you browse other Websites. By using this Website, you agree to our use of cookies as explained in our Cookie Policy.
Please view our Cookie Policy for more information on how we use cookies.
Security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Platforms, systems, and facilities in which personal information is processed are protected by secure network architectures that contain firewalls and intrusion detection devices.
In addition, we limit access to your personal information to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
Whilst we do have the above security measures in place, the internet is an unsecure environment and we cannot guarantee the security of your personal information. As a result, you send or transmit your personal information to us online at your own risk and we cannot be held liable for any loss of privacy or personal information occurring during the course of such transmission.
Changes to our Privacy Policy
From time to time, we may change, amend, replace or modify this Privacy Policy. Any changes will be effective immediately upon the posting of the revised Privacy Policy. This Privacy Policy was updated as of the effective date listed above. We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this Privacy Policy or the way your personal information is processed, please contact us by one of the following means:
- By sending an email to general@zaf.aftpharm.com.
- By contacting our Information Officer, the details of which can be found in our PAIA manual.