Privacy Policy
Published on 06.07.2026
Updated on 19.10.2026
This privacy policy document applies to Aurelia Private Health (also referred to as “Aurelia”, “we”, “our”) in relation to AureliaPrivateHealth.com, its educational content, downloadable resources, newsletters, social media channels, digital communications, complimentary strategy sessions and related services.
Aurelia Private Health is a physician-led concierge preventative medicine practice focused on longitudinal health intelligence, executive health assessments and proactive risk reduction. This Privacy Policy describes how Aurelia Private Health collects, processes, stores, protects and shares personal information and special personal information throughout the member journey, including website visits, waitlist applications, complimentary strategy sessions, membership enquiries, consultations, investigations, longitudinal follow-up and digital health services.
Scope
This policy applies to visitors, prospective members, members, authorised representatives and individuals interacting with Aurelia Private Health through its website, email, messaging platforms, telemedicine services or other digital channels.
Regulatory Framework
Aurelia Private Health intends to operate consistently with the Protection of Personal Information Act (POPIA), National Health Act, Electronic Communications and Transactions Act, HPCSA ethical guidance and other applicable South African laws. Where international members are served, additional legal obligations may also apply.
Definitions
Define Personal Information, Special Personal Information, Health Information, Member, Practitioner, Aurelia Age™️ Framework, Longitudinal Health Intelligence, Telemedicine, Biomarker, Wearable Device, Third-Party Service Provider, Information Officer, Processing, Consent, Operator and Responsible Party.
Categories of Information Collected
Aurelia Private Health may collect identity details, contact information, demographic information, emergency contacts, payment information, communication preferences, comprehensive medical history, medication history, allergies, surgical history, family history, occupational history, lifestyle factors, exercise, nutrition, sleep, stress, tobacco and alcohol history, biomarker data, pathology results, imaging studies, physician notes, referrals, prescriptions, wearable-device data, appointment history and correspondence.
The waitlist form on the website asks for a name, email address and mobile number, the service the applicant is interested in and the best time to call, and, optionally, how the applicant heard about Aurelia Private Health. A choice of service, such as genetic testing or cancer screening, is treated with the same care as health information. These details are used only to review the application and contact the applicant about it, and none of them is sent to Meta or to Google.
Special Personal Information
Health information is processed only where authorised by law or with appropriate consent and for legitimate clinical, operational or legal purposes. Where consent has been given, limited website interaction data that may support an inference about an interest in health services is also processed for advertising measurement and website analytics, as described under Meta Pixel and Google Analytics below and in the Cookie Policy.
Clinical Data
Aurelia Private Health may process laboratory biomarkers, imaging, ECGs, DEXA scans, coronary artery calcium scoring, functional assessments and longitudinal trend analysis to support physician-led preventative care.
Aurelia Age™️ Framework
The Aurelia Age™️ Framework is a proprietary clinical methodology designed to support physician interpretation of longitudinal health data. Framework outputs support, but never replace, professional medical judgement and should not be interpreted as guarantees, diagnoses or predictions of lifespan.
Digital Health
Aurelia Private Health may integrate data from continuous glucose monitors, smart blood-pressure monitors, smart scales and future approved digital health technologies where members voluntarily choose to connect them.
Telemedicine
Telemedicine services may be provided using secure communication technologies. Members acknowledge the limitations of remote consultations and understand that emergency medical conditions require immediate local emergency care.
Information Security
Aurelia Private Health aims to maintain administrative, technical and physical safeguards including role-based access controls, encryption where appropriate, secure authentication, audit logging, staff confidentiality obligations, regular software updates and secure backup procedures.
Disclosure
Information may be disclosed only where reasonably necessary to independent laboratories, imaging providers, specialist practitioners, payment providers, technology providers or regulators, subject to appropriate legal and contractual safeguards.
Retention
Clinical records and associated information are retained in accordance with applicable legal, regulatory and professional requirements.
Member Rights
Subject to applicable law, individuals may request access, correction, objection, withdrawal of consent where applicable and may lodge complaints with the Information Regulator.
Cookies, Analytics and Advertising
The Aurelia Private Health website records the cookie choice a visitor has made in browser local storage, which is not a cookie. It also uses two technologies that load only where a visitor has selected Accept on the cookie banner: the Meta pixel, an advertising and measurement technology which sets two cookies, and Google Analytics, a website analytics technology which sets two cookies. Selecting Essential only means neither loads, their cookies are removed and nothing is sent to Meta or to Google. The homepage also includes an introduction film and a Videos section showing short videos, all published by Aurelia Private Health on YouTube, a service supplied by Google LLC. Nothing from YouTube loads until a visitor presses play on a video. The player then loads in YouTube's privacy-enhanced mode, and YouTube receives the technical information described in the Cookie Policy, including which video was played and on which page. Cookie preferences can be changed at any time using the Manage cookie preferences button on the Cookie Policy page, which lists the cookies in use, their purpose and how long they last.
Meta Pixel
The Meta pixel (pixel identifier 1050298607530341) is supplied by Meta Platforms Ireland Limited, the company behind Facebook and Instagram, and Aurelia Private Health uses it to measure how its advertising on Facebook and Instagram performs. It is present on every page of the website. Where a visitor has consented, Aurelia Private Health fires two events, and Meta receives both. A PageView event records that a page was opened. A second event, named WaitlistSubmit01, is sent once the waitlist application form has been successfully submitted, and records only that a submission happened. Neither event carries any parameters, so nothing entered into the form is passed to Meta. Meta is, however, told that the person using that browser completed an enquiry for a private healthcare service, and a visitor who would rather it were not should choose “Essential only” on the cookie banner, or withdraw consent afterwards, in which case neither event is sent.
Aurelia Private Health passes Meta no parameters with either event, and the pixel is initialised with the pixel identifier alone, with no customer matching information passed alongside it. Advanced matching is switched off in the code of the website, so no name, email address or telephone number entered on the waitlist form is sent to Meta. No medical history, biomarker, pathology, imaging, clinical or other health information is sent to Meta. The pixel runs on the public website only and is not present in the systems that hold member clinical records.
Aurelia Private Health processes this information on the basis of consent under section 11(1)(a) of POPIA, and treats the fact of a visit to the website of a medical practice as capable of being special personal information concerning health, so that consent also serves as consent under section 27(1)(a). Consent may be withdrawn at any time under section 11(2)(b) of POPIA, using the Manage cookie preferences button on the Cookie Policy page, which sets out in full what the pixel sends, the cookies it uses, how long they last, how health information is treated and what rights apply.
Google Analytics
The website also uses Google Analytics 4 (measurement identifier G-04Q0K7XXY5), supplied by Google LLC, to understand how the website is used. It loads only where a visitor has selected Accept on the cookie banner. It records each page opened and, through an event named generate_lead to which Aurelia Private Health attaches no parameters, the fact that a waitlist application was successfully submitted. Google also collects technical information about the visit, including the page address, the referring page, the browser and device, and an approximate location derived from the IP address. Google signals and advertising personalisation are switched off, and no name, contact detail, form answer or health information is sent to Google.
Aurelia Private Health processes this information on the basis of consent under section 11(1)(a) of POPIA and, for the reasons given under Meta Pixel above, section 27(1)(a). Google LLC is situated in the United States of America, and the transfer relies on consent under section 72(1)(b) of POPIA, as described under Transfers Outside South Africa below. Consent may be withdrawn at any time using the Manage cookie preferences button on the Cookie Policy page, which deletes the Google Analytics cookies and stops further collection. The Cookie Policy sets out in full what Google Analytics collects, the cookies it uses and how long they last.
Transfers Outside South Africa
This section concerns the Meta pixel and Google Analytics described above, and the YouTube video player. Where a visitor presses play on a video on the homepage, information is received by Google LLC, which may process it in the United States of America and elsewhere, as described in the Cookie Policy. That transfer takes place only at the visitor's request, when a video is played, and does not take place for visitors who do not play a video. Other transfers, including the hosting and form-handling providers that receive waitlist application details and any transfer of clinical information, are not described here.
The recipients of Meta pixel information are Meta Platforms Ireland Limited, situated in Ireland, and Meta Platforms, Inc., situated in the United States of America. When the pixel reports an event, the information it carries leaves South Africa. That is a transborder flow of personal information under section 72 of POPIA, and Aurelia Private Health relies on section 72(1)(b), which permits the transfer where the data subject consents to it. Consent to the pixel, given through the cookie banner, is consent to this transfer.
The recipient of Google Analytics information is Google LLC, situated in the United States of America. The same basis applies: consent given through the cookie banner is consent to that transfer under section 72(1)(b) of POPIA, Aurelia Private Health does not represent that United States law affords a level of protection substantially similar to POPIA, and withdrawing consent stops any further transfer without deleting information Google has already received.
Aurelia Private Health does not represent that United States law affords a level of protection substantially similar to POPIA, and does not put the standard business tools terms set by Meta forward as a binding agreement providing POPIA-equivalent protection under section 72(1)(a). Consent is the basis on which the transfer takes place. Withdrawing consent stops any further transfer, although it does not delete information Meta has already received. Meta processes that information as a responsible party in its own right and for its own purposes, and not as an operator of Aurelia Private Health, so Aurelia Private Health does not control or instruct that processing. The Cookie Policy explains this in full.
Advertising Choices
Consent can be withdrawn at any time using the Manage cookie preferences button on the Cookie Policy page. Withdrawing consent deletes the cookies the pixel and Google Analytics have set and stops both loading on any page opened afterwards. Google also offers a browser add-on that prevents Google Analytics from running on any website. Information Meta has already received is controlled through a Facebook or Instagram account, and the Cookie Policy sets out where those settings are found. Individuals may also object to this processing for the purposes of direct marketing under section 11(3)(b) of POPIA, and may lodge a complaint with the Information Regulator of South Africa, whose contact details and prescribed complaint form are published on its website at inforegulator.org.za.
Amendments and Contact
Aurelia Private Health may amend this Privacy Policy periodically. The website should identify the Information Officer and provide contact details for privacy-related requests. For privacy-related questions, contact concierge@aureliaprivatehealth.com.