Governance

Privacy notice

Effective: 18 July 2026 · Jurisdiction: Republic of South Africa

This notice explains how personal information submitted through novatheris.co.za is handled. It applies to the professional access application, product safety and quality reports, and direct website correspondence.

1. Responsible party

NOVATHERIS is a professional therapeutic brand. Veridia Medical (Pty) Ltd (registration number 2025/294884/07) administers professional access and website submissions and acts as the responsible party for information collected through these forms.

Contact: info@veridia.co.za
Address: 265 Main Street, Waterkloof, Pretoria, South Africa

2. Information we collect

Professional applications

We collect identity and contact details, HPCSA registration number, practice information, dispensing-route information, professional interests, declarations and limited technical information used to protect the form.

Product safety and quality reports

We collect reporter contact details, product and batch information, a factual account of the event or concern, action taken and relevant seriousness information. A report may contain health information, which is special personal information under POPIA.

Technical data

The website uses a short-lived, strictly necessary session cookie to secure form submissions. The form records an IP address and browser identifier for security, abuse prevention and evidentiary integrity. The website does not deploy advertising trackers or behavioural analytics in this build.

3. Why we process it

Information is processed only for defined and compatible purposes, including to:

• verify a practitioner’s identity, registration, scope and practice details;
• consider controlled professional access and respond to professional enquiries;
• investigate product safety, quality, labelling or effectiveness concerns;
• contact a reporter for relevant follow-up;
• meet vigilance, quality, recordkeeping, legal and regulatory duties;
• protect the website and its lawful users from fraud, abuse and security incidents; and
• establish, exercise or defend legal rights.

Where consent is requested, it must be voluntary and informed. Certain safety information may nevertheless need to be retained or shared where the law or a regulatory obligation requires it, even if consent is later withdrawn.

4. Who may receive information

Information is restricted to people who need it for the stated purpose. Depending on the matter, this may include authorised NOVATHERIS and Veridia personnel, a relevant licensed manufacturer, wholesaler, distributor or dispensing partner, the treating healthcare practitioner, professional verification services, secure hosting or email service providers, insurers or advisers, and competent regulators including SAHPRA.

We do not sell personal information. Information is not supplied to unrelated marketers. Operators acting for the responsible party must process information only under appropriate instructions and safeguards.

5. Cross-border processing

If a service provider or safety stakeholder outside South Africa must receive information, transfer will occur only where permitted by section 72 of POPIA and with appropriate protection. Unnecessary identifiers should be excluded.

6. Retention

Records are kept only for as long as reasonably required for the purpose, an applicable legal or regulatory retention period, legitimate safety follow-up, dispute resolution or an authorised historical record. When retention is no longer justified, information will be securely destroyed or de-identified.

7. Security

Reasonable technical and organisational measures are used to protect confidentiality, integrity and availability. These include HTTPS, access control, server-side validation, anti-automation controls, minimisation and restricted mail routing. No internet transmission is completely risk-free. Do not submit unrelated medical records, identity numbers, payment card details or unnecessary patient identifiers through a website form.

8. Your rights

Subject to POPIA and any applicable regulatory restrictions, you may ask whether information is held about you, request access or correction, object to certain processing, ask for deletion where retention is not legally justified, withdraw a consent, or complain about the handling of your information.

Send a request to info@veridia.co.za. Identity may need to be verified before a request is completed. You may also lodge a complaint with the Information Regulator (South Africa).

9. Children and persons needing assistance

This website does not offer direct patient purchasing. Where a person cannot lawfully consent to the processing of special personal information, an appropriately authorised parent, guardian, caregiver or healthcare practitioner should assist. Safety concerns should still be reported promptly and with no more identifying information than necessary.

10. Changes

This notice may be updated when the website, processing purpose or law changes. The effective date at the top identifies the current published version.