GDPR Principles
How we honour EU data-protection principles worldwide.
Protecting personal information through internationally recognised privacy standards.
WHOLE believes that privacy is a fundamental human right.
Although WHOLE is based in South Africa and primarily operates under the Protection of Personal Information Act (POPIA), we also strive to align our privacy practices with internationally recognised principles, including those reflected in the European Union's General Data Protection Regulation (GDPR).
These principles guide how we collect, use, protect and manage personal information across our platform.
Lawfulness, fairness and transparency
We are committed to processing personal information lawfully, fairly and transparently.
Whenever WHOLE collects personal information, we aim to explain:
- what information is collected;
- why it is collected;
- how it will be used;
- how long it may be retained; and
- what rights users have regarding that information.
Transparency is essential to building trust.
Purpose limitation
Personal information should only be collected for clear, legitimate and specific purposes.
WHOLE collects information to provide lifestyle medicine services, personalise user experiences, improve platform functionality, support consultations, deliver educational content and maintain platform security.
We do not use personal information for unrelated purposes without an appropriate legal basis.
Data minimisation
We believe that collecting less information often provides greater protection.
WHOLE aims to collect only the personal information reasonably necessary to provide our services effectively.
Users are never required to share more information than is appropriate for the services they choose to use.
Accuracy
Accurate information leads to better experiences.
WHOLE encourages users to keep their personal information up to date so that recommendations, reports and educational guidance remain as relevant and accurate as possible.
Where appropriate, users may review and update their information through their WHOLE account.
Storage limitation
Personal information should not be retained indefinitely without purpose.
WHOLE retains information only for as long as reasonably necessary to provide services, comply with legal obligations, resolve disputes, maintain security or fulfil legitimate operational requirements.
When information is no longer required, appropriate deletion or anonymisation processes are applied where reasonably possible.
Integrity and confidentiality
Protecting personal information requires both responsible governance and secure technology.
WHOLE implements reasonable technical and organisational safeguards designed to protect information from:
- unauthorised access;
- accidental loss;
- misuse;
- unlawful disclosure;
- alteration; and
- destruction.
Security is continuously reviewed as technology and threats evolve.
Accountability
Privacy is an ongoing responsibility.
WHOLE is committed to maintaining policies, procedures and governance practices that promote responsible handling of personal information.
We regularly review our privacy practices and continue improving our systems to meet evolving legal, technological and ethical standards.
Your privacy rights
Depending on applicable laws and your location, you may have rights relating to your personal information, including the ability to:
- access your information;
- request corrections;
- request deletion where appropriate;
- object to certain processing activities;
- withdraw consent where applicable;
- request information about how your data is used.
WHOLE is committed to responding to legitimate privacy requests respectfully and within a reasonable timeframe.
Artificial intelligence and privacy
WHOLE uses artificial intelligence to personalise educational experiences and provide lifestyle medicine guidance.
Artificial intelligence does not replace human judgement.
WHOLE does not use personal information to make solely automated decisions that produce legal effects or similarly significant consequences for users.
Users remain in control of their health decisions, and professional healthcare advice should always be sought where appropriate.
Our commitment
Privacy is not simply about complying with legislation.
It is about respecting every individual who places their trust in WHOLE.
By following recognised privacy principles, strengthening our safeguards and continuously improving our governance, we aim to create a platform where members feel confident that their personal information is treated with dignity, care and responsibility.
Because trust begins with protecting what people choose to share.