Privacy Policy

1. Introduction
GLP-1 SA (“we”, “us”, “our”) operates the website at glp1sa.com (the “Platform”). We are committed to protecting your privacy and handling your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and applicable South African law.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights in relation to it. Please read it carefully before registering or using the Platform.

2. Who We Are
GLP-1 SA is a South African health information platform providing evidence-based, patient-first information about GLP-1 medications including semaglutide and tirzepatide. We are the responsible party for the purposes of POPIA.

For privacy-related queries, contact us at: info@glp1sa.com

3. Personal Information We Collect
3.1 Information you provide directly
• First name
• Email address
• Province of residence
• Password (stored in encrypted form — we never see your plain-text password)

We collect this information when you register for a free account on the Platform.

3.2 Information collected automatically
• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website or link

This information is collected via server logs and, where you consent, via cookies. See our Cookie Policy for details.

4. How We Use Your Information
• To create and manage your account on the Platform
• To send you a one-time email verification link when you register
• To unlock access to members-only articles after your email is verified
• To send future GLP1SA updates via email or WhatsApp messages, for example, newsletters
• To understand how the Platform is used and improve our content
• To comply with legal obligations

We do not use your personal information for automated decision-making or profiling in a manner that produces legal or similarly significant effects.

5. Legal Basis for Processing
Under POPIA, we process your personal information on the following grounds:
• Consent — when you register, you consent to us processing your name, email, and province for the purposes described above
• Legitimate interest — for basic server logging and Platform security
• Compliance with legal obligation — where required by South African law

6. How We Store and Protect Your Information
Your account information is stored in a database hosted on our WordPress server. Passwords are hashed using WordPress’s built-in bcrypt-based hashing. We use SSL/TLS encryption for all data transmitted between your browser and our servers.

We retain your account information for as long as your account is active. If you request deletion of your account, we will remove your personal information within 30 days, except where retention is required by law.

7. Sharing Your Information
We do not sell your personal information. We share it only with:
• Mailchimp — if you subscribe to our newsletter (email and first name only)
• Our hosting provider — who processes data on our behalf under a data processing agreement
• Law enforcement or regulatory bodies — where required by South African law

We do not share your province, full registration details, or reading history with any third party.

8. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information (“right to erasure”)
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at info@glp1sa.com. We will respond within 30 days.

The Information Regulator can be contacted at: inforeg@justice.gov.za

9. Children’s Privacy
The Platform is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. Continued use of the Platform after notification constitutes acceptance of the updated policy.

11. Contact
Questions or concerns about this Privacy Policy should be directed to: info@glp1sa.com