EDRX
Emergency Department Management Group
Privacy Policy
Last updated: June 13, 2026
This Privacy Policy describes how EDRX ("we", "us", or "our") collects, uses, and protects information when you use our internal medical documentation platform.
1. Who We Are
EDRX is an internal medical management system operated by ED Management Group, used by authorised medical practitioners to create and manage statutory medical reports (RAF forms) and related documentation.
Physical address: 8 St Columb Rd, New Redruth, Alberton
Contact email: giela.bester@gmail.com
2. Information We Collect
We collect the following information in the course of operating our platform:
- Patient information — name, surname, ID number, date of birth, and hospital number, as required for RAF statutory medical reports.
- Medical practitioner information — name, practice number, qualifications, and contact details.
- Medical data — treatment plans, ICD10 codes, and clinical details entered by authorised practitioners.
- Account credentials — username and encrypted password for platform access.
- Login activity — timestamps and device information for security and audit purposes.
3. Google Drive Integration
This section specifically addresses our use of Google user data in compliance with Google API Services User Data Policy.
Our platform offers an optional integration with Google Drive to allow authorised medical practitioners to attach supporting PDF documents to their medical reports. Here is exactly how this works:
- When a practitioner chooses to attach a document from Google Drive, they are prompted to sign in with their own personal Google account.
- We request read-only access to the practitioner's Google Drive solely for the purpose of allowing them to browse and select PDF files they wish to attach to a medical report they are actively creating.
- The selected PDF file is retrieved temporarily in the practitioner's browser session and merged into the medical report document.
- We do not store, transmit, share, or retain any Google Drive files or Google account data on our servers.
- We do not use Google user data for any purpose other than the immediate document attachment described above.
- Google access tokens are stored temporarily in the browser's session storage and are automatically cleared when the browser session ends.
- Practitioners can revoke our access to their Google Drive at any time by visiting myaccount.google.com/permissions and removing EDRX from the list of connected apps.
Our use of Google API Services adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Your Information
Information collected on this platform is used exclusively for the following purposes:
- Generating statutory RAF medical reports as required by South African law.
- Maintaining records of completed and draft medical reports.
- Authenticating authorised users and maintaining platform security.
- Logging activity for audit and compliance purposes.
We do not use your information for marketing, advertising, or any purpose unrelated to medical report administration.
5. Data Sharing
We do not sell, trade, or share personal information with third parties except as follows:
- Road Accident Fund (RAF) — medical report data is submitted to the RAF as required by law.
- Legal requirement — we may disclose information if required by South African law or court order.
6. Data Security
We implement appropriate technical and organisational measures to protect your information, including encrypted passwords, secure HTTPS connections, and access controls limiting data to authorised personnel only.
7. Data Retention
Medical report data is retained for as long as required by South African medical record keeping legislation. Login activity logs are retained for a period of 12 months.
8. Your Rights
Under the Protection of Personal Information Act (POPIA), you have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at giela.bester@gmail.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of the platform constitutes acceptance of the updated policy.
10. Contact Us
Terms of Service
Last updated: June 13, 2026
These Terms of Service govern your use of the EDRX internal medical documentation platform. By accessing or using this platform, you agree to these terms.
1. Authorised Use
Access to this platform is restricted to authorised medical practitioners and administrative staff employed by or contracted to ED Management Group. Unauthorised access is strictly prohibited.
2. User Responsibilities
By using this platform, you agree to:
- Keep your login credentials confidential and not share them with any other person.
- Ensure all patient information and medical data entered is accurate and complete to the best of your knowledge.
- Use the platform solely for legitimate medical report administration purposes.
- Comply with all applicable South African laws, including the Health Professions Act, the National Health Act, and POPIA.
- Report any suspected unauthorised access or security breach to giela.bester@gmail.com immediately.
3. Medical Accuracy
The platform is a tool to assist in the preparation of statutory medical reports. The medical practitioner signing and submitting any report generated by this platform remains solely responsible for the accuracy, completeness, and correctness of all medical information contained therein.
4. Google Drive Integration
When using the optional Google Drive attachment feature, you agree to:
- Only attach documents you are authorised to use and share in the context of medical reporting.
- Comply with Google's Terms of Service when authenticating with your Google account.
- Take responsibility for the content of any documents attached from your personal Google Drive.
5. Prohibited Activities
You may not:
- Attempt to gain unauthorised access to any part of the platform or its underlying systems.
- Use the platform to create fraudulent or misleading medical reports.
- Share, export, or distribute patient data outside of the intended RAF submission process.
- Attempt to reverse engineer, copy, or replicate any part of the platform.
6. Availability
We aim to keep the platform available at all times but do not guarantee uninterrupted access. We are not liable for any loss resulting from platform downtime or technical issues.
7. Intellectual Property
All platform software, design, and content is the property of EDRX and ED Management Group. You may not reproduce or distribute any part of the platform without written permission.
8. Limitation of Liability
EDRX and ED Management Group are not liable for any direct, indirect, or consequential loss arising from:
- Errors or omissions in medical reports created using the platform.
- Unauthorised access resulting from failure to protect login credentials.
- Issues arising from the use of the Google Drive integration.
9. Termination
We reserve the right to suspend or terminate access to the platform at any time if these terms are violated or if a user's authorisation is withdrawn.
10. Governing Law
These terms are governed by the laws of the Republic of South Africa. Any disputes shall be subject to the jurisdiction of the South African courts.
11. Changes to These Terms
We may update these Terms of Service from time to time. Continued use of the platform after changes are posted constitutes acceptance of the updated terms.
12. Contact Us