Privacy Policy

In accordance with the Protection of Personal Information Act 4 of 2013 (POPIA)

Last updated: 26 May 2026

DiCeram Planning Centre is committed to protecting the privacy and personal information of all individuals whose data we process. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.

Who We Are (Responsible Party)

For the purposes of POPIA, the Responsible Party is:

DiCeram Planning Centre (Di-Ceram Lab cc)
3rd Floor, De Waterkant Centre, 9 Somerset Road
Green Point, Cape Town, Western Cape 8001, South Africa
VAT: 4400190197

Email: info@diceram.co.za
Phone: +27 82 367 2264
Website: www.diceram.co.za

Where we process patient data on behalf of Healthcare Professionals, we act as an Operator under POPIA, processing that information only on the instructions of the relevant Healthcare Professional (who is the Responsible Party for that patient data).

Our Information Officer

In accordance with POPIA, DiCeram Planning Centre has designated an Information Officer who is responsible for ensuring compliance with the Act, dealing with requests made to us, and working with the Information Regulator in relation to investigations. Our Information Officer can be contacted at:

Information Officer: Kirsten Taylor
Email: info@diceram.co.za

The Information We Collect

Depending on how you interact with us, we may collect and process the following categories of personal information:

Identity and contact details — your name, practice or business name, email address, telephone number, and physical or postal address.
Professional details — your profession, practice information, and account login details where you register on our platform.
Patient data submitted by Healthcare Professionals — dental scans, STL files, dental models, prescriptions, measurements, specifications, and related clinical information necessary to fulfil an order.
Order and transaction information — details of products and services ordered, payment confirmation, and correspondence relating to your orders.
Technical and usage information — information collected automatically when you use our website, including device and browser information and cookies (where applicable).

Special personal information, including health-related information, is processed only where necessary to provide our services and on the basis of the consent and authorisation obtained by the relevant Healthcare Professional from their patients.

How We Collect Personal Information

We collect personal information directly from you when you contact us, register on our platform, place an order, or communicate with us. We also receive patient data from Healthcare Professionals who use our services. Where we collect information from a source other than you directly, we take reasonable steps to ensure that lawful grounds exist for that collection.

Why We Process Personal Information (Purpose)

We process personal information for the following purposes:

To provide our dental design, 3D printing, and prosthetic services, and to fulfil and manage orders.
To communicate with you about your orders, enquiries, and design edits.
To manage your account and our working relationship with you.
To process payments and maintain accurate financial and business records.
To comply with our legal, regulatory, and professional obligations.
To maintain the security and integrity of our systems and services.

We will not use personal information for a purpose other than that for which it was collected, unless you consent or the further processing is otherwise permitted under POPIA.

Lawful Basis for Processing

We process personal information in accordance with the eight conditions for lawful processing set out in POPIA. In particular, we rely on one or more of the following grounds:

Your consent, or the consent obtained by a Healthcare Professional from their patient.
The processing being necessary to conclude or perform a contract with you.
The processing being necessary to comply with a legal obligation.
The processing being necessary to pursue our legitimate interests or those of a third party, balanced against your rights.

We apply the POPIA conditions of accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation throughout our processing activities.

Sharing and Disclosure of Personal Information

We do not sell personal information. We may share personal information only where necessary and on a lawful basis, including with:

Operators and sub-processors who provide services to us (such as IT, hosting, or manufacturing support), under written agreements requiring them to protect the information and process it only on our instructions.
Healthcare Professionals, in respect of patient data relating to their cases.
Regulatory, legal, or governmental authorities where required by law.

Where personal information is transferred outside South Africa, we take reasonable steps to ensure that it is afforded a level of protection consistent with POPIA.

Security Safeguards

We implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, and unlawful processing. These measures include access controls and user management, a password policy, antivirus and firewall protection, audit logs, daily backups, regular security updates, encrypted connections for remote access, and encryption of patient health-related information. Further detail on our security measures is set out in our Terms and Conditions.

Data Breaches

Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected data subjects (or the relevant Healthcare Professional) as soon as reasonably possible after becoming aware of the breach, in accordance with POPIA. The notification will provide sufficient information to allow affected individuals to take protective measures, where this information is available.

Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by law or to resolve outstanding liabilities. Once personal information is no longer required, we will securely delete, destroy, or de-identify it.

Your Rights as a Data Subject

Under POPIA, you have the following rights in relation to your personal information:

The right to be notified that your personal information is being collected and to know whether it has been accessed by an unauthorised person.
The right to request access to the personal information we hold about you.
The right to request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully.
The right to object, on reasonable grounds, to the processing of your personal information.
The right to object to processing for purposes of direct marketing.
The right to withdraw your consent, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
The right to submit a complaint to the Information Regulator.

To exercise any of these rights, please contact our Information Officer in writing at info@diceram.co.za. We may request proof of identity before responding. We will respond to your request within a reasonable time as required by POPIA.

Cookies and Website Data

Our website may use cookies and similar technologies to enable core functionality and to improve your browsing experience. Where required, we will request your consent for non-essential cookies. You can usually manage or disable cookies through your browser settings, although some features of the website may not function correctly as a result.

Direct Marketing

We will only send you electronic direct marketing communications where you have consented or where otherwise permitted by law. You may opt out of marketing communications at any time by contacting us or using the unsubscribe facility provided in the relevant communication.

Complaints to the Information Regulator

If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator of South Africa:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Email: complaints.IR@inforegulator.org.za
Website: inforegulator.org.za

We would, however, appreciate the opportunity to address your concerns directly before you approach the Regulator, and we encourage you to contact our Information Officer in the first instance.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website, and the “Last updated” date at the top of this document indicates when it was most recently revised. Continued use of our website and services following any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

DiCeram Planning Centre
Di-Ceram Lab cc
3rd Floor, De Waterkant Centre, 9 Somerset Road
Green Point, Cape Town, Western Cape 8001, South Africa

Email: info@diceram.co.za
Phone: +27 82 367 2264
Website: www.diceram.co.za