Privacy notice
Effective 15 August 2026. This notice explains our handling of personal information under South African privacy requirements.
Responsible party
Host Routehub is the responsible party for personal information handled through this website and our audit engagements. Privacy enquiries may be sent to info@host-routehub.digital or addressed to the Information Officer at our published office address.
Information we collect
The enquiry form collects your name, email, chosen review type, application stage and message. Please do not include identity numbers or medical details there. If you engage us, we may receive contact details, application forms, contribution and payroll records, relationship or prior-membership evidence, correspondence, payment records and other information agreed in the scope. Some records can contain special personal information.
We also receive limited technical logs needed to secure and operate the website. Optional analytics are used only with consent as described in our cookie notice.
Why and on what basis we use it
We process information to answer enquiries, quote and contract, complete the requested audit, communicate findings, keep financial records, protect our services and comply with legal obligations. Depending on the context, processing is based on consent, performance of a contract, legal duty or a legitimate interest that does not override your rights. Special personal information is handled only where an applicable legal ground permits it.
Sharing and processors
We do not sell personal information. Limited information may be handled by providers supporting secure communications, document storage, accounting or website hosting under appropriate terms. We disclose information where law requires it or where you authorise communication with an employer, adviser, scheme or other party. An engagement does not itself authorise us to contact a medical scheme.
Retention and security
Unaccepted enquiry correspondence is ordinarily retained for 12 months. Engagement records and reports are generally retained for five years after completion where needed for contractual, tax or professional record purposes; copies of source documents may be deleted sooner under the engagement protocol. A legal hold or dispute may require longer retention.
We use access controls, restricted folders, purposeful data minimisation and appropriate transfer arrangements. No internet transmission or storage method is risk-free. If a breach creates a legal notification duty, we will notify affected people and the Information Regulator as required.
International transfers
Some contracted infrastructure may process information outside South Africa. Before such transfer, we require an appropriate protection basis, such as a recipient subject to comparable privacy rules or contractual safeguards consistent with the Protection of Personal Information Act.
Your rights
Subject to legal limits, you may ask whether we hold your information, request access or correction, object to certain processing, withdraw consent, or request deletion where retention is no longer justified. We may verify identity before acting. You may also complain to South Africa’s Information Regulator.
Changes and contact
We will post material notice changes here with a new effective date. To exercise a right or ask a privacy question, email info@host-routehub.digital with “Privacy request” in the subject line.