Anchorix AnchorixLast updated 31 August 2026 (version 2026-08-31a). This document governs your use of Anchorix, with particular attention to how Anchorix handles the customer and patient data you put into it.
Every clause below is followed by a plain-English explanation of what it actually means. Those explanations are part of this page on purpose — you should not have to guess what you are agreeing to. If an explanation and the clause it sits under ever genuinely disagree, the reading that is better for you is the one that applies.
In one paragraph: you rent software from us. Your clients' records belong to you and to them, never to us. We keep them safe and in South Africa, and we tell you straight away if anything goes wrong. What you collect, who you let see it, and whether your practice follows the rules of your profession — that is yours, and we cannot do it for you.
Anchorix is software you rent by the month to run your practice — the diary, the client records, the notes, the documents and the invoices. You are renting the tool. The practice stays yours.
Anchorix is software: booking, scheduling, customer records, visit notes, document storage and invoicing tools for appointment-based businesses. You use Anchorix to run your own business and to store information about your own clients or patients ("your data").
Your clients' information belongs to you and to them — never to us. You decide what to collect, why, and who on your team can see it. We only hold it and protect it, and we do not make any of those decisions for you.
The law calls you the "responsible party" and us the "operator". The practical difference: if a client asks why their information was collected, that is your question to answer, because you are the one who decided.
Under South Africa's Protection of Personal Information Act (POPIA), the person or business that decides why personal information is collected and how it will be used is the "responsible party." The person or business that merely processes that information on the responsible party's instructions is the "operator."
For any personal information about your own customers or patients that you collect, store, or expose through Anchorix - including special personal information such as health records - you are the responsible party. Anchorix is the operator. You decide what to collect, why you collect it, who on your team can see it, and whether any of it is shown to your own customers through the self-service portal. Anchorix stores and safeguards it on your instructions, and does not decide any of those things on your behalf.
If your business is a healthcare practice, this same operator/responsible-party split applies to your obligations under the National Health Act and any applicable health professional council rules (e.g. the HPCSA) governing patient records - those obligations are yours, not Anchorix's.
This is the list of what we actually do to keep your records safe — encryption, keeping your data away from every other practice, logging who opened which file at a confidential practice, and letting you choose note by note what a client can see.
If we are ever broken into, we tell you promptly and tell you what we know. Deciding whether to tell your clients or the Information Regulator is your call, because only you know what your profession requires of you.
Anchorix maintains real technical safeguards over the data you store, including:
If Anchorix becomes aware of a security compromise affecting your data, Anchorix will notify you (the account owner) without undue delay, describing what happened and what Anchorix has done in response. Deciding whether and how to notify your own customers, patients, or any regulator about that compromise is your responsibility, not Anchorix's - you are in the best position to know what your own legal obligations require.
The moment you download a file or export a spreadsheet, that copy is on your laptop and we cannot protect it, delete it or account for it. From then on it is yours to look after.
When you export, download, print, or otherwise remove data from Anchorix - a CSV export, a downloaded access log, a document your team downloads - Anchorix's responsibility for that copy ends. What you do with it afterward, how long you keep it, and who you share it with is entirely your own responsibility.
You run a practice; we run software. Following the rules of your own profession, registering your own Information Officer if you need one, deciding who on your team gets access, and choosing what a client is shown — those are all yours.
As the responsible party for your own customer and patient data, you are responsible for:
A list of things we deliberately do not do, so you never build a habit around something that is not there. If you need any of these, you need a different tool as well as this one, and we would rather say so upfront than let you find out later.
Anchorix is booking, scheduling, record-keeping and invoicing software. It is deliberately not any of the following, and must not be relied on as such:
Using Anchorix does not make your practice compliant. We give you the safeguards and the records to prove they were on. Whether you are compliant also depends on who you give access to, what you write down, and what you do away from the screen.
Anchorix provides tools and technical safeguards to help you run a compliant business. Using Anchorix does not, by itself, make your business compliant with POPIA, the National Health Act, or any other law - that outcome depends on how you configure and use the platform, and on your own conduct outside it.
We do not own your data, we will never sell it, and we will not use it to train AI. We look at it only to run the service, to fix something you have reported, or where the law forces us to.
It is stored in Cape Town, on Amazon's infrastructure. Amazon holds the machines; they never decide anything about your data. If we ever move it somewhere else, we will tell you first.
Anchorix does not own the information you put into it and claims no rights over it. Your data remains yours and your customers', and Anchorix will not sell it, licence it, or use it to train anything. Anchorix accesses it only to run the service for you, to fix a fault you have reported, or where the law requires.
Your data is stored in South Africa, on infrastructure operated by Amazon Web Services in its Cape Town (af-south-1) region. AWS acts as a sub-operator: it holds the data on Anchorix's behalf under its own security obligations and never decides anything about it. If Anchorix moves to a different provider or region, you will be told before it happens.
You pay monthly, upfront, in rand. There is no VAT on it, because Anchorix is not a VAT vendor — if that ever changes you will be told first.
If you stop paying we may switch off access after warning you — but nothing is deleted, you can still sign in to download your records, and paying brings it all back. If it stays unpaid for 30 days, the account closes and the deletion clock in section 10 starts. Any price increase comes with at least 30 days' notice.
Subscription fees are the amounts shown on your plan, billed monthly in advance in South African rand. Anchorix is not currently a registered VAT vendor, so no VAT is charged on them; should that change you will be told in advance.
Payment is by EFT into the account shown in your dashboard, and your account is marked paid once the transfer lands. Anchorix does not offer card payment to South African businesses and holds no card details for you, so nothing is ever charged automatically and no subscription renews on its own.
If a subscription goes unpaid, Anchorix may suspend access to the dashboard after giving you reasonable notice. Suspension is not deletion — your data is retained, you may still sign in to export it throughout, and access is restored when the account is brought up to date. If the account remains unpaid for 30 days, it is closed and the export window in section 10 begins from that date. Anchorix will give at least 30 days' notice before increasing the price of an existing plan.
You can leave any month you like. If we end it, you get 30 days' notice unless you have been using the system unlawfully. We can also pause an account straight away if something looks seriously wrong — we will tell you why, and we will not delete anything while we look into it.
After the 30 days, the deletion is automatic and permanent. The only thing we keep is a record that the account existed and was deleted — your business name, the dates, and a count of what was removed — with no client information in it at all.
The part that matters: once the account ends you have 30 days to download everything, and after that we delete it permanently. The law does not let us keep your clients' information once you are no longer a customer. But the HPCSA expects you to keep clinical records for six years, and that duty stays yours — so download your records before the 30 days run out. We cannot get them back for you afterwards.
You may stop using Anchorix at any time; it is a month-to-month service with no fixed term. Anchorix may end the arrangement on 30 days' written notice, or immediately where you use the service unlawfully or in a way that puts other businesses using Anchorix at risk.
Anchorix may also suspend access immediately, without ending the agreement, where it reasonably suspects unlawful use, fraud, a breach of these terms, or conduct that places other businesses using Anchorix, their clients, or the platform at risk. Suspension of this kind is temporary and investigative: Anchorix will tell you the general reason, will restore access if the concern is resolved, and will not delete anything while an account is suspended. If the matter is not resolved, the account is ended under the paragraph above and the 30-day export window below applies from that date. Anchorix is under no obligation to give reasons for a 30 days' notice termination beyond the notice itself.
However the account ends, you will have 30 days from that date to export your data. After that period Anchorix deletes it. This is deliberate rather than unhelpful: POPIA does not permit personal information to be kept longer than there is a reason to keep it, and once you are no longer a customer that reason has gone. Because your own professional record-retention duties usually run for years longer than that, exporting your records before the 30 days expire is your responsibility, and Anchorix cannot recover them afterwards.
One narrow exception, stated plainly because it is the only thing that survives. Anchorix keeps a record of the deletion itself: your business name, when the account ended, when its data was destroyed, and a count of what was removed. It exists so that Anchorix can show the deletion happened and when, as POPIA's accountability condition expects of a responsible party, and it contains no client of yours: no name, no contact detail, no appointment, no clinical information. What you paid Anchorix is evidenced by Anchorix's own bank and bookkeeping records, as the Tax Administration Act requires of any business, and those hold nothing about the people you saw either. Everything about the people you saw is deleted.
We work hard to keep it running, but we are not promising a number like "99.9% uptime" and we do not pay you if it goes down.
We keep backups so we can recover the whole system after a disaster. They are not a personal undo button — if you delete a client's file yourself, do not assume we can restore it.
Anchorix aims to keep the service running continuously but does not promise a specific uptime percentage and does not offer service credits. Maintenance may require short planned interruptions, notified in advance where practical.
Anchorix keeps backups as part of running the service. Backups are a disaster-recovery measure for the platform, not a personal archive: they are not a substitute for your own exports, and Anchorix does not undertake to restore individual records you deleted yourself.
You are telling us you have the right to collect and keep everything you put in here. We cannot check that, and we do not try to — we would have to read your files to do it.
You confirm that you are entitled to collect and store everything you put into Anchorix, that you have whatever consent or other lawful basis POPIA requires for it, and that you will not use Anchorix to store information you have no lawful reason to hold. You are responsible for the accuracy, quality and lawfulness of the data you collect, and for the conduct of your own staff accounts.
If somebody sues us because of something you did — you collected information you had no right to, or a client of yours has a complaint about your conduct — you cover our costs, because it was never our decision to make.
This does not apply if the problem was ours: if we broke our own promises or failed to keep your data secure, that is on us, not you.
If someone brings a claim against Anchorix because of what you collected, stored, or did — personal information gathered unlawfully, records kept with no lawful basis, a breach of your own professional obligations, or a claim by one of your own customers about your conduct — you agree to cover Anchorix's reasonable costs and any resulting liability. This does not apply where the claim arises from Anchorix's own breach of these terms or its own failure to keep the data secure.
The most we could ever have to pay you is the subscription fees you paid us in the year before the problem. On the R500 plan that is R6,000. This is a small business, and that ceiling is what makes it possible to run one.
We also do not cover knock-on losses — profits you did not make, clients who left, work you had to redo elsewhere. Those can run to any amount at all, and no one could price a R500-a-month service against them.
What this cap does not touch. If we are grossly negligent, if we defraud you, or if we injure someone, none of the above protects us and we would not want it to. Nor does it reduce our duties under the Privacy Act to keep your data safe and to tell you if it is breached. South African law does not allow those to be signed away, and we are not trying to.
Anchorix is provided as it stands. Beyond what these terms expressly promise, and beyond what South African law requires of a supplier, Anchorix gives no other warranties — in particular it does not warrant that the service will be uninterrupted or error-free, or that it will suit a particular purpose you have in mind.
Anchorix is not liable for indirect or consequential loss — including lost profits, lost business, lost goodwill, or the cost of replacement software — even if the possibility was raised beforehand.
Anchorix's total liability to you, for everything arising out of these terms taken together, is limited to the subscription fees you actually paid Anchorix in the 12 months before the event that gave rise to the claim.
Two things this clause does not do, because South African law does not permit it. It does not limit liability for Anchorix's own gross negligence, fraud, or deliberate wrongdoing, nor for death or personal injury caused by Anchorix. And it does not reduce Anchorix's own duties as an operator under section 21 of POPIA — to process your data only as you instruct, to keep it confidential, to secure it, and to tell you promptly if it is compromised. Those duties are owed under the Act itself, and no contract can sign them away.
South African law, South African courts. Nothing in this agreement takes away any right you have under the Consumer Protection Act or the Privacy Act, and you can always complain to the Information Regulator.
These terms are governed by South African law, and the South African courts have jurisdiction over any dispute arising from them. Nothing here limits a right you have under the Consumer Protection Act or POPIA, or your right to complain to the Information Regulator.
If any part of these terms is found to be unenforceable, the rest continues to apply.
If we change anything that matters, you will be asked to read and accept the new version before you carry on using the dashboard. We cannot change the deal quietly.
Anchorix may update these terms from time to time. A material change requires the account owner to accept the updated terms again before continuing to use the dashboard.
If any of this is unclear, ask before you accept it. The Information Officer is a real person who reads the mail, and the contact details are in your dashboard under Account → Legal & responsibilities.
Questions about these terms can be directed to Anchorix's Information Officer - see the contact details provided in your dashboard.
Anchorix is one person: Stephen Oosthuizen, trading as a sole proprietor in Randburg. There is no company between you and him. The law requires anyone selling online to publish these details, and here they are.
Published as required by section 43 of the Electronic Communications and Transactions Act.