M-Bay Specialists

Legal

Privacy policy

How M-Bay Specialists collects, uses, shares and protects personal information under the Protection of Personal Information Act, 2013 (POPIA).

This notice explains how we handle personal information under the Protection of Personal Information Act, 2013 (POPIA). It describes our current practice; where a matter is governed by statute we have cited the section it comes from.

1. Who we are

M-Bay Specialists provides medico-legal services to attorneys and legal firms throughout South Africa, from rooms at 1st Floor, Gateway West, 22 Magwa Crescent, Midrand, 2066, Gauteng, South Africa.

For any question about this notice, contact us on 010 224 0709 or admin@m-bay.co.za.

2. What personal information we collect

Website visitors. This website sets no cookies, runs no analytics, and makes no third-party requests. If you send an enquiry we receive only what you type into it.

Claimants and examinees. In the course of a medico-legal assessment we receive and generate health information, which POPIA treats as special personal information.

3. Why we collect it, and our lawful basis

Personal information is processed to carry out the instruction we have accepted from an attorney or legal firm: to assess a claimant and produce an expert medico-legal report.

We rely on section 11(1)(f) of POPIA: processing is necessary to pursue the legitimate interests of a party to whom the information is supplied — here, the instructing attorney and their client.

4. Special personal information (health data)

Health information is special personal information under section 26 of POPIA. We rely on the exemption in section 27(1)(b), which permits processing where it is necessary for the establishment, exercise or defence of a right or obligation in law.

5. Who we share it with

Reports and their supporting material are provided to the instructing attorney or legal firm. Depending on the matter, information may also reach the Road Accident Fund, a court, and any specialist sub-contracted to contribute to the assessment.

6. Cross-border transfer

This website is hosted on infrastructure that may store data outside South Africa, which is a cross-border transfer for the purposes of section 72 of POPIA. Assessment records themselves are held in our own systems.

7. How long we keep it

Records are retained for as long as required by section 14 of POPIA and by the health records retention guidance applicable to registered health practitioners.

8. How we protect it

We apply the security safeguards required by section 19 of POPIA, taking account of the sensitivity of health information.

9. Your rights

Under POPIA you may request access to the personal information we hold about you (section 23), request correction or deletion (section 24), and object to processing (section 5(d)).

You may also lodge a complaint with the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg — inforegulator.org.za.

10. Cookies, analytics and third parties

This website sets no cookies, runs no analytics and embeds no third-party content. Fonts are served from this domain rather than a font CDN, and there is no map embed, so no data about your visit is transmitted to any third party.

If analytics or an embedded map are added in future, this section must be updated before they go live.

11. Changes to this notice

We may update this notice. The current version is the one published on this page.

Effective 18 August 2026. Related: Terms of service · Professional standards