Cookie and Tracking Policy

Introduction

This Cookie and Tracking Policy explains how Med Report Solutions (Pty) Ltd uses cookies and similar tracking technologies on the MedReport website (www.medreport.co.za) and the MedReport web application. It is issued in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 (ECTA).

By continuing to use our website or platform, you consent to our use of cookies as described in this policy. You may withdraw consent at any time by adjusting your browser settings or using the cookie preference centre on our website.

Categories of Cookies We Use

• Strictly necessary — Required for the platform to function (authentication, session management, security). Cannot be disabled.
• Functional — Remembers user preferences and settings to improve the experience.
• Performance / Analytics — Measures how users interact with the platform to help us improve it. Data is aggregated and anonymised.
• Marketing / Advertising — MedReport does not use marketing or advertising cookies.

Third-Party Cookies

We use third-party service providers for authentication and content delivery. These providers may set strictly necessary session cookies.

How to Control Cookies

Cookie consent banner

When you first visit www.medreport.co.za, a cookie consent banner will appear. You may accept cookies or reject non-essential cookies. To change your choice later, clear the site's stored consent in your browser (or contact us) and reload the page so the banner appears again. Browser controls below also apply.

Browser Settings

You can also control cookies through your browser settings. Most browsers allow you to view and delete stored cookies, block cookies from specific websites, or block all third-party cookies. Note: blocking all cookies will prevent the MedReport platform from functioning.

Cookies in the Authenticated Platform

When you are logged in to the MedReport platform, additional session management cookies are used. These are strictly necessary for the platform to function and cannot be disabled. They include:

• Authentication and session tokens managed by our identity provider (e.g. after sign-in) — expire on logout or after inactivity according to security settings.
• Security and anti-abuse tokens as required by the authentication and application stack.
• Local preferences (such as cookie consent choice) stored in the browser where you set them.

These cookies do not contain patient clinical information. They contain only the minimum identifiers needed to maintain a secure authenticated session.

Contact

Information Officer — Devereaux Joubert
Deputy Information Officer — Angela Grant
Email:legal@medreport.co.za
Website:www.medreport.co.za/legal

Policy Review

Version 1.1 · July 2026 · Consent wording aligned to the live banner; authenticated-session cookie description updated.