Privacy
Privacy-first wellness care.
Last updated: July 2026. Your weight-care information is sensitive. This policy explains how Cendara handles personal information, health-related details, account data, and service communications.
Pre-launch waitlist
Contact details stay separate from health details.
- Cendara may collect your email address, optional WhatsApp number, communication preferences, source route, consent timestamp, and technical anti-abuse metadata for pre-launch updates.
- Cendara uses Resend or another trusted email provider to send waitlist emails.
- You may unsubscribe or update preferences at any time.
- Health details are not collected in the pre-launch waitlist form.
How information is used
Only what responsible care needs.
Cendara collects the information needed to assess, review, coordinate, support, and protect the Cendara Weight journey. Access is intended to be limited, secure, and handled in line with South African privacy expectations, including POPIA.
- To prepare, save, and help you claim a private assessment record.
- To support licensed South African clinician review where online care may be appropriate.
- To coordinate required lab steps, programme support, payment support, care updates, and patient portal updates.
- To maintain security, fraud prevention, dispute handling, service quality, and legal records.
- To send optional wellness or programme updates only where consent allows.
Privacy note
Keep sensitive details out of public channels.
- Keep health details, lab values, identity documents, payment secrets, and urgent medical concerns out of public contact channels.
- Patient-specific information belongs in the secure portal and protected care systems.
- Analytics and ad systems must not receive intake answers, lab details, care updates, payment health context, or patient identifiers.
- Access is limited to trusted people and systems that help provide or protect the service.
- Cendara may update this policy as POPIA, partner, payment, legal, or service requirements change.
Your rights
You stay in control of your information.
- You may ask what personal information Cendara holds about you.
- You may ask for incorrect information to be corrected.
- You may ask for deletion or restriction where the law allows it.
- You may object to certain processing or withdraw optional marketing consent.
- You may contact the Information Regulator if you believe your privacy rights have not been respected.
Operators and transfers
Trusted providers support the service.
- Cendara may use trusted hosting, database, authentication email, notification, payment, support, security, and storage providers to run the service.
- Some providers may process information outside South Africa. Cendara uses provider review, contractual controls, access limits, and security safeguards for those transfers.
- Payment providers receive payment information needed to process and reconcile transactions. They should not receive health history, lab details, diagnosis, or clinician notes from Cendara metadata.
- Analytics and advertising tools, if used, must stay on public-route activity and must not receive patient-specific health, payment, lab, or portal details.
Retention and security
Records are kept for clear reasons.
- Cendara keeps personal information only for as long as needed for care coordination, legal duties, finance records, security, dispute handling, and service quality.
- Where information no longer needs to be identifiable, Cendara may delete, anonymise, or aggregate it.
- If a security compromise affects personal information, Cendara will investigate, contain the issue, and notify affected people and regulators where required by law.
- Privacy questions can be sent to privacy@cendara.co.za. Use the secure portal for patient-specific support.