Who is responsible for this website

This website is operated by Astros Marketing (Pty) Ltd, 2 Makro Place, Sunnyrock 1401, on behalf of Dialysis Supplies Direct. For the purposes of this website, personal information is handled in line with the Protection of Personal Information Act, known as POPIA, and related South African law.

This website is intended for registered renal units and authorised procurement, stores, pharmacy, nursing, clinical engineering or administration staff acting in a business capacity. We do not supply the public through this website and we do not request patient treatment information through the enquiry form.

What personal information we collect

When you use the contact form or browse the website, we may collect personal information that identifies you or your organisation, or that can reasonably be linked to you. The information collected depends on what you choose to submit and how you interact with the site.

Name and surname of the contact person
Job title or role within a renal unit or related facility
Name of the renal unit, practice or business
Contact details provided in the enquiry form
Delivery town, province and related order planning details
Website usage data such as IP address, browser type, pages viewed and basic device information

Please do not include patient records, identity numbers, medical results or other special personal information in a website enquiry. If such information is submitted, it will be handled with appropriate care and only for the purpose of addressing the message or protecting legal rights.

Why we use personal information

We use personal information only for lawful business purposes connected to this wholesale service. The main reason is to respond to enquiries from registered renal units and to arrange supply, delivery and account-related communication where appropriate.

To respond to product and delivery enquiries
To confirm whether an enquiry relates to a registered renal unit
To prepare quotations, order discussions and delivery planning
To keep a record of correspondence and instructions
To maintain website security and reduce misuse of the contact form
To comply with legal and regulatory duties where required

We do not sell personal information to third parties. We do not use website enquiries to provide clinical advice, patient-specific recommendations or public retail services.

How information is shared

Personal information is shared only where this is reasonably necessary for the operation of the website, the handling of an enquiry or the fulfilment of a legitimate business purpose. Access is limited to authorised persons who need the information for their role.

Information may be shared with service providers who assist with website hosting, form processing, business administration, data storage, courier coordination or information technology support. Where information is shared, we require that it be handled confidentially and with suitable security safeguards. We may also disclose information if required by law, court order, regulatory process or to protect legal rights.

Storage, security and retention

We take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, disclosure, alteration or destruction. These steps may include controlled access, password protection, secure systems, routine monitoring and appropriate record handling procedures.

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, or for longer where retention is required by law or needed for lawful business records. Because this service supports delivery planning between Midrand and major centres, some correspondence and order-related records may need to be retained for audit, reconciliation or dispute resolution. When information is no longer required, it is deleted, de-identified or destroyed in a secure manner.

Your rights under POPIA

Subject to POPIA, you may have the right to ask whether we hold personal information about you, request access to it, ask for correction where it is inaccurate, or object to certain processing where the law allows. You may also ask that information be deleted where retention is no longer necessary or where processing is unlawful.

Request access to personal information held about you
Request correction of incomplete, inaccurate or outdated information
Object to processing on lawful grounds where applicable
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Regulator if you believe your rights have been infringed

To exercise any of these rights, please use the enquiry form on our contact page and provide enough detail for us to identify your request. We may ask for reasonable proof of identity or authority before acting on a request.