Privacy Policy

Plumstead Rusoord (PlumRus)
Version: 1.0
Effective Date: 17 August 2026
Last Reviewed: 17 August 2026

1. Introduction

Plumstead Rusoord (trading as PlumRus), a registered non-profit organisation (NPO No. 011-891), is committed to protecting the privacy and personal information of our residents, families, care clients, website visitors, and all other individuals with whom we interact.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and any other applicable South African legislation.

By using our website (www.plumrus.co.za), submitting an enquiry, applying for accommodation or services, or engaging with us in any capacity, you acknowledge that you have read and understood this policy.

2. Who We Are

PlumRus is a faith-based, non-profit retirement and care facility located in the Constantia Valley, Cape Town. We operate under the auspices of Badisa, a ministry of compassion of the Dutch Reformed Church: Western Cape and the United Reformed Church: Cape.

Responsible Party (Information Officer):
[Full Name of Information Officer]
[Title / Position]
Email: info@plumrus.co.za
Tel: (021) 761 2323
Address: Plumstead Rusoord, Constantia Valley, Cape Town

3. Personal Information We Collect

We may collect the following categories of personal information:

3.1 Residents & Prospective Residents

• Full name, identity number, date of birth, and nationality
• Contact details (address, telephone, email)
• Medical history, health assessments, and care needs
• Financial information, including proof of income and bank details
• Next-of-kin and emergency contact details
• Social worker and medical practitioner reports
• Signed contracts and agreements (e.g., life right agreements, rental agreements)

3.2 Family Members & Authorised Representatives

• Name, contact details, and relationship to resident
• Power of attorney or legal authority documentation, where applicable

3.3 Care Services Clients (Home-Based, Day Care & Respite)

• Personal and contact information
• Health, care, and medical information
• Financial information for billing and membership purposes

3.4 Website Visitors & Newsletter Subscribers

• Name and email address (newsletter sign-up)
• Enquiry and contact form submissions
• Cookie data and basic usage analytics (see Section 9)

4. How We Use Your Personal Information

We collect and process personal information for the following lawful purposes:

• Assessing applications for accommodation and care services
• Providing residential, care, and compassion services
• Communicating with residents, families, and care clients
• Billing, financial administration, and statutory reporting
• Compliance with the Older Persons Act 13 of 2006, the Social Assistance Act, and other applicable legislation
• Employment equity and human resources administration
• Sending newsletters and updates (where consent has been given)
• Improving our website and digital services
• Training and quality assurance purposes

5. Legal Basis for Processing

We process personal information on the following grounds:

• Consent: Where you have given us clear, informed consent (e.g., newsletter subscription)
• Contractual necessity: To fulfil our obligations under a residency, care, or service agreement
• Legal obligation: To comply with the Older Persons Act, POPIA, and other statutory requirements
• Legitimate interest: To operate, manage, and improve our facility and services, where this does not override your rights

6. Special Personal Information

We process special categories of personal information, including health and medical data, as required to provide appropriate care and accommodation to our residents and clients. This is done with your explicit consent and/or as required by law.

All special personal information is handled with the highest level of care, confidentiality, and security.

7. Sharing of Personal Information

We do not sell your personal information. We may share information with:

• Medical practitioners, healthcare providers, and social workers involved in your care
• Badisa and its affiliated entities, as required by our operational framework
• Government bodies and regulators (e.g., Department of Social Development, Department of Health) as required by law
• Service providers and contractors who assist in operating our facility (subject to confidentiality obligations)
• Legal and financial professionals, where necessary

All third parties are required to handle your personal information in accordance with POPIA and any applicable confidentiality agreements.

8. Retention of Personal Information

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. In general:

• Resident records are retained for a minimum of [INSERT PERIOD] after the end of residency
• Financial records are retained for a minimum of 5 years in accordance with the Companies Act and tax legislation
• Unsuccessful applications may be retained for [INSERT PERIOD]

Once information is no longer required, it is securely destroyed or de-identified.

9. Cookies & Website Analytics

Our website uses cookies to improve your browsing experience and to collect basic analytics data. Cookies are small text files stored on your device. You can manage or disable cookies through your browser settings.

We use the following types of cookies:

• Strictly necessary cookies: Required for the website to function
• Analytics cookies: To understand how visitors use the site (e.g., Google Analytics)

By continuing to use our website, you consent to our use of cookies as described in our Cookie Policy.

10. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention requirements
• Object to the processing of your personal information
• Withdraw consent at any time, without affecting prior lawful processing
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact our Information Officer at the details provided in Section 2.

Information Regulator contact details:
Website: www.inforegulator.org.za | Email: inforeg@justice.gov.za

11. Security of Personal Information

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. These include:

• Secure storage of physical and digital records
• Access controls and authorisation protocols for staff
• Staff training on data privacy and confidentiality

In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

12. Children’s Information

Our services are directed at adults. We do not knowingly collect personal information from individuals under the age of 18 without appropriate parental or guardian consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on our website with a revised effective date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact:

[Information Officer Name]
PlumRus — Plumstead Rusoord
Tel: (021) 761 2323 | WhatsApp: 082 816 1479
Email: info@plumrus.co.za
Address: Constantia Valley, Cape Town
Registered NPO: 011-891