Privacy Policy

Our commitment to protecting your personal information in compliance with the Protection of Personal Information Act (POPIA).

Last Updated: January 2026

Effective Date: July 1, 2021

POPIA Compliance

Your Privacy Rights

Talar Group Pty Ltd is committed to protecting and respecting your privacy in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable data protection regulations.

Information Officer

Contact our designated Information Officer for privacy-related inquiries:

Ms. Nomvula Dlamini

Email: privacy@talargroup.co.za

Phone: +27 11 555 1200

Registration

Talar Group is registered with the Information Regulator:

Registration Number: TG-2021-0847

Status: Compliant

Last Audit: December 2025

Your Rights

  • • Access your personal information
  • • Request corrections
  • • Object to processing
  • • Lodge complaints
  • • Request deletion

1. Information We Collect

Personal Information

We may collect the following types of personal information:

  • Identification details (name, ID number, passport number)
  • Contact information (email, phone, physical address)
  • Medical information (for medical travel services only, with explicit consent)
  • Financial information (for payment processing and invoicing)
  • Travel documentation and preferences
  • Professional information (for business advisory services)
  • Website usage data and cookies

Special Personal Information

In accordance with Section 26 of POPIA, we may process special personal information (including medical records) only with your explicit consent and for the specific purposes disclosed to you. This includes:

  • Health and medical records (Talar Medical division)
  • Biometric data (for secure facility access where applicable)
  • Such information is processed under strict confidentiality and security protocols

2. How We Use Your Information

We process your personal information for the following purposes:

  • Providing medical travel coordination and healthcare services
  • Arranging travel, accommodation, and concierge services
  • Managing logistics and supply chain operations
  • Delivering business advisory and strategic consulting services
  • Processing payments and maintaining financial records
  • Communicating with you about services and updates
  • Complying with legal and regulatory obligations
  • Improving our services and customer experience
  • Marketing communications (with your consent, opt-out available)

3. Legal Basis for Processing

We process your personal information based on:

  • Consent: Where you have provided explicit consent for specific processing activities
  • Contractual Necessity: To fulfill our contractual obligations to provide services
  • Legal Obligation: To comply with applicable laws and regulations
  • Legitimate Interests: For business operations, provided your rights are not overridden

4. Information Sharing

We may share your personal information with:

  • Healthcare providers and medical facilities (with your consent)
  • Travel service providers (airlines, hotels, tour operators)
  • Payment processors and financial institutions
  • Logistics and shipping partners
  • Professional advisors (legal, accounting, consulting)
  • Regulatory authorities and law enforcement (when required by law)
  • Third-party service providers bound by confidentiality agreements

We do not sell your personal information to third parties.

5. International Data Transfers

Your personal information may be transferred to and processed in countries outside South Africa for the following purposes:

  • International medical travel arrangements
  • Global logistics and supply chain management
  • Cloud-based service infrastructure

We ensure that such transfers comply with Chapter 9 of POPIA and implement appropriate safeguards, including:

  • Standard contractual clauses
  • Adequacy determinations by the Information Regulator
  • Explicit consent where required

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption of data in transit and at rest
  • Secure access controls and authentication
  • Regular security assessments and audits
  • Employee training on data protection
  • Incident response and breach notification procedures
  • Physical security measures for premises and records

In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

7. Data Retention

We retain your personal information only for as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Comply with legal, regulatory, and contractual obligations
  • Resolve disputes and enforce agreements

Typical retention periods:

  • Client records: 7 years from last service date
  • Medical records: As required by healthcare regulations (typically 7-20 years)
  • Financial records: 5 years from tax year end
  • Marketing consent: Until withdrawn or 2 years of inactivity

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

  • Access: Request copies of your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your information (subject to legal obligations)
  • Objection: Object to processing for direct marketing or legitimate interests
  • Restriction: Request restriction of processing in certain circumstances
  • Data Portability: Receive your information in a structured, machine-readable format
  • Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact our Information Officer at privacy@talargroup.co.za. We will respond within 30 days as required by POPIA.

9. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Enable website functionality
  • Analyze website traffic and usage patterns
  • Personalize content and advertisements
  • Remember your preferences

You can control cookie settings through your browser. Please note that disabling cookies may affect website functionality.

10. Complaints and Disputes

If you believe your privacy rights have been violated, you have the right to:

  • Lodge a complaint with our Information Officer
  • File a complaint with the Information Regulator of South Africa

Information Regulator (South Africa)

Email: inforeg@justice.gov.za

Website: www.justice.gov.za/inforeg

Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Privacy Questions?

Contact our Information Officer for any privacy-related inquiries or to exercise your rights under POPIA.

privacy@talargroup.co.za