Privacy Policy
Published on 06.07.2026
Updated on 07.08.2026
This privacy policy document applies to Aurelia Private Health (also referred to as “Aurelia”, “we”, “our”) in relation to AureliaPrivateHealth.com, its educational content, downloadable resources, newsletters, social media channels, digital communications, complimentary strategy sessions and related services.
Aurelia Private Health is a physician-led concierge preventative medicine practice focused on longitudinal health intelligence, executive health assessments and proactive risk reduction. This Privacy Policy describes how Aurelia Private Health collects, processes, stores, protects and shares personal information and special personal information throughout the member journey, including website visits, waitlist applications, complimentary strategy sessions, membership enquiries, consultations, investigations, longitudinal follow-up and digital health services.
Scope
This policy applies to visitors, prospective members, members, authorised representatives and individuals interacting with Aurelia Private Health through its website, email, messaging platforms, telemedicine services or other digital channels.
Regulatory Framework
Aurelia Private Health intends to operate consistently with the Protection of Personal Information Act (POPIA), National Health Act, Electronic Communications and Transactions Act, HPCSA ethical guidance and other applicable South African laws. Where international members are served, additional legal obligations may also apply.
Definitions
Define Personal Information, Special Personal Information, Health Information, Member, Practitioner, Aurelia Age™️ Framework, Longitudinal Health Intelligence, Telemedicine, Biomarker, Wearable Device, Third-Party Service Provider, Information Officer, Processing, Consent, Operator and Responsible Party.
Categories of Information Collected
Aurelia Private Health may collect identity details, contact information, demographic information, emergency contacts, payment information, communication preferences, comprehensive medical history, medication history, allergies, surgical history, family history, occupational history, lifestyle factors, exercise, nutrition, sleep, stress, tobacco and alcohol history, biomarker data, pathology results, imaging studies, physician notes, referrals, prescriptions, wearable-device data, appointment history and correspondence.
Special Personal Information
Health information is processed only where authorised by law or with appropriate consent and for legitimate clinical, operational or legal purposes. Where consent has been given, limited website interaction data that may support an inference about an interest in health services is also processed for advertising measurement, as described under Meta Pixel below and in the Cookie Policy.
Clinical Data
Aurelia Private Health may process laboratory biomarkers, imaging, ECGs, DEXA scans, coronary artery calcium scoring, functional assessments and longitudinal trend analysis to support physician-led preventative care.
Aurelia Age™️ Framework
The Aurelia Age™️ Framework is a proprietary clinical methodology designed to support physician interpretation of longitudinal health data. Framework outputs support, but never replace, professional medical judgement and should not be interpreted as guarantees, diagnoses or predictions of lifespan.
Digital Health
Aurelia Private Health may integrate data from continuous glucose monitors, smart blood-pressure monitors, smart scales and future approved digital health technologies where members voluntarily choose to connect them.
Telemedicine
Telemedicine services may be provided using secure communication technologies. Members acknowledge the limitations of remote consultations and understand that emergency medical conditions require immediate local emergency care.
Information Security
Aurelia Private Health aims to maintain administrative, technical and physical safeguards including role-based access controls, encryption where appropriate, secure authentication, audit logging, staff confidentiality obligations, regular software updates and secure backup procedures.
Disclosure
Information may be disclosed only where reasonably necessary to independent laboratories, imaging providers, specialist practitioners, payment providers, technology providers or regulators, subject to appropriate legal and contractual safeguards.
Retention
Clinical records and associated information are retained in accordance with applicable legal, regulatory and professional requirements.
Member Rights
Subject to applicable law, individuals may request access, correction, objection, withdrawal of consent where applicable and may lodge complaints with the Information Regulator.
Cookies, Analytics and Advertising
The Aurelia Private Health website records the cookie choice a visitor has made in browser local storage, which is not a cookie. It also uses one advertising and measurement technology, the Meta pixel, which sets two cookies and loads only where a visitor has selected Accept on the cookie banner. Selecting Essential only means the pixel never loads, its cookies are removed and nothing is sent to Meta. No analytics product is installed on the website at present, and this policy and the Cookie Policy will be updated before any analytics technology is used. Cookie preferences can be changed at any time using the Manage cookie preferences button on the Cookie Policy page, which lists the cookies in use, their purpose and how long they last.
Meta Pixel
The Meta pixel (pixel identifier 1050298607530341) is supplied by Meta Platforms Ireland Limited, the company behind Facebook and Instagram, and Aurelia Private Health uses it to measure how its advertising on Facebook and Instagram performs. It is present on every page of the website. Where a visitor has consented, Aurelia Private Health fires two events, and Meta receives both. A PageView event records that a page was opened. A second event, named WaitlistSubmit01, is sent once the waitlist application form has been successfully submitted, and records only that a submission happened. Neither event carries any parameters, so nothing entered into the form is passed to Meta. Meta is, however, told that the person using that browser completed an enquiry for a private healthcare service, and a visitor who would rather it were not should choose “Essential only” on the cookie banner, or withdraw consent afterwards, in which case neither event is sent.
Aurelia Private Health passes Meta no parameters with either event, and the pixel is initialised with the pixel identifier alone, with no customer matching information passed alongside it. Advanced matching is switched off in the code of the website, so no name, email address or telephone number entered on the waitlist form is sent to Meta. No medical history, biomarker, pathology, imaging, clinical or other health information is sent to Meta. The pixel runs on the public website only and is not present in the systems that hold member clinical records.
Aurelia Private Health processes this information on the basis of consent under section 11(1)(a) of POPIA, and treats the fact of a visit to the website of a medical practice as capable of being special personal information concerning health, so that consent also serves as consent under section 27(1)(a). Consent may be withdrawn at any time under section 11(2)(b) of POPIA, using the Manage cookie preferences button on the Cookie Policy page, which sets out in full what the pixel sends, the cookies it uses, how long they last, how health information is treated and what rights apply.
Transfers Outside South Africa
This section concerns the Meta pixel described above. Other transfers, including the hosting and form-handling providers that receive waitlist application details and any transfer of clinical information, are not described here.
The recipients of Meta pixel information are Meta Platforms Ireland Limited, situated in Ireland, and Meta Platforms, Inc., situated in the United States of America. When the pixel reports an event, the information it carries leaves South Africa. That is a transborder flow of personal information under section 72 of POPIA, and Aurelia Private Health relies on section 72(1)(b), which permits the transfer where the data subject consents to it. Consent to the pixel, given through the cookie banner, is consent to this transfer.
Aurelia Private Health does not represent that United States law affords a level of protection substantially similar to POPIA, and does not put the standard business tools terms set by Meta forward as a binding agreement providing POPIA-equivalent protection under section 72(1)(a). Consent is the basis on which the transfer takes place. Withdrawing consent stops any further transfer, although it does not delete information Meta has already received. Meta processes that information as a responsible party in its own right and for its own purposes, and not as an operator of Aurelia Private Health, so Aurelia Private Health does not control or instruct that processing. The Cookie Policy explains this in full.
Advertising Choices
Consent can be withdrawn at any time using the Manage cookie preferences button on the Cookie Policy page. Withdrawing consent deletes the cookies the pixel has set and stops the pixel loading on any page opened afterwards. Information Meta has already received is controlled through a Facebook or Instagram account, and the Cookie Policy sets out where those settings are found. Individuals may also object to this processing for the purposes of direct marketing under section 11(3)(b) of POPIA, and may lodge a complaint with the Information Regulator of South Africa, whose contact details and prescribed complaint form are published on its website at inforegulator.org.za.
Amendments and Contact
Aurelia Private Health may amend this Privacy Policy periodically. The website should identify the Information Officer and provide contact details for privacy-related requests. For privacy-related questions, contact concierge@aureliaprivatehealth.com.