FIRST LINE Terms and Conditions

Draft version 1.0 — 12 October 2026. For operator completion and South African legal review before public launch.

Please read these terms and the integrated privacy notice before agreeing. They explain what FIRST LINE provides, the limits of its information, and how household information is handled. They do not remove rights that cannot lawfully be excluded. In a real emergency, call the appropriate emergency service immediately; do not wait to register, read these terms or complete a website form.

Operator and contact information

Legal operator name: To be completed by the operator before public launch

Company / registration number (if applicable): To be completed by the operator before public launch

Business / service address: To be completed by the operator before public launch

Contact and privacy email: To be completed by the operator before public launch

Contact telephone: To be completed by the operator before public launch

1. Who provides the service

“FIRST LINE”, “we”, “us” and “our” refer to the legal operator identified above. “You” means a visitor or account holder using this website. “Household information” includes information you enter about yourself, emergency contacts and members of your household. The operator must complete and keep its identity, physical/contact details and privacy contact current before inviting public use. Technical development or hosting does not by itself make a contractor a healthcare provider or the responsible operator.

2. Agreement and eligibility

By selecting the agreement control and continuing, you indicate agreement to the version presented. If you do not agree, do not use the account features. Emergency telephone links remain available. An account holder must be at least 18 years old and have legal capacity to manage the account, or act through an appropriately authorised person. These terms do not authorise you to agree on another adult’s behalf or upload another person’s medical information without a lawful basis. Parents and authorised guardians must supervise use by children.

3. Purpose of FIRST LINE

FIRST LINE provides educational first-aid information, preparedness material, emergency contact links and tools for recording household contacts and first-aid supplies. It is not an ambulance service, emergency call centre, clinical practice, medical scheme or insurance broker. It does not continuously monitor your account, location, symptoms or kit. Creating a profile, pressing a website button or storing a telephone number does not request or dispatch help.

4. Medical information and urgent situations

Information on this website is general and may not apply to a particular person, age, medical history, injury or setting. It does not establish a diagnosis or a clinician–patient relationship and cannot replace emergency dispatch instructions, qualified medical assessment or practical first-aid training. Seek professional assistance for serious symptoms or uncertainty. Never delay an emergency call to search this website, obtain an account, take a photograph, enter details or locate a listed facility. Follow the attending professional or emergency dispatcher’s instructions when they differ from general material.

5. Review and publication of guidance

Draft treatment material is intended for review and is not public emergency guidance. Publication records sources, reviewer details and review dates. A recorded review is not a guarantee that information is suitable in all cases. Revisions, new evidence, regional protocols or incorrect source information may require changes or withdrawal. If a guide is unavailable or marked under review, do not infer a treatment from its title. The website may restrict, remove or replace material while reviewing a safety concern.

6. Photographs, voice and automated assistance

Features may be introduced in stages. An image preview does not mean that an injury or kit item has been analysed. Where automated assistance is available, results may be incomplete or wrong because of lighting, angle, audio quality, missing context or limitations of the technology. It must not be treated as a definitive diagnosis, medicine identification, species identification, proof of safe breathing or proof of sterility. Any future feature that sends images/audio to a provider must identify its purpose and relevant privacy information before collection. Do not upload unnecessary intimate images, identifying documents or photographs of people who have not consented.

7. Registration and credentials

Provide accurate details and keep your email and contact information current. Use a strong, unique password and protect access to your devices. You are responsible for activities you authorise through your account. Notify the operator promptly if you suspect unauthorised access, while taking immediate steps to secure your email and account. Never send passwords or one-time authentication codes to website support. A registered email address is not necessarily verified by the current software. Avoid sharing one account with unrelated people, especially where it contains health records.

8. Household members and permission

You may record another adult’s information only with that adult’s informed permission or another valid legal basis confirmed with the operator. A child’s information requires appropriate authority from a competent person, such as an authorised parent or guardian. Explain what is stored, who can access it and how it will be used. Store only what is necessary for the stated household purpose. Adult household members should be able to ask for correction or removal of their details. A tick box records your confirmation; it does not independently verify your authority, the person’s identity or the legal validity of consent.

9. Allergies, medicines and conditions

These fields are optional, self-reported information. “Unknown” or a blank field must not be interpreted as “no allergies”, “no medicines” or “no conditions”. “No known allergies” is a report, not a clinical determination. Check names, reactions, dosage notes and dates with appropriate professionals. The website does not prescribe medicines, reconcile conflicting prescriptions or calculate safe doses. Do not start, stop or change medicines solely because of a saved profile or kit item.

10. Medical-aid information

Recording a medical-aid scheme, membership number or emergency telephone number is a convenience for the household. FIRST LINE does not confirm membership, cover, benefits, provider network, authorisation, claims eligibility or payment. Obtain current information directly from the scheme or insurer. A scheme emergency number may have different purposes from national emergency dispatch. In an urgent situation, do not delay emergency care while checking benefits. Store membership details privately and share them only when necessary and authorised.

11. ICE contacts

Ask your emergency contact’s permission to record their name, relationship and number. Check the number and keep it current. The website does not automatically notify ICE contacts, guarantee that they answer, or grant them access to household records. Entering someone as an ICE contact does not make them a medical decision-maker or provide a legal mandate to consent to treatment.

12. First-aid kits

Inventory quantities, dates and restock indicators depend on the entries you maintain. Inspect labels, package seals, condition and storage requirements yourself. An item name or photograph cannot establish sterility, efficacy, appropriateness or competence to use it. Indicators do not replace manufacturer instructions, workplace requirements or a risk-specific kit assessment. Items marked expired, damaged or unknown require appropriate checking and replacement. Restock warnings in the current version are displayed in the dashboard; they are not guaranteed email or push notifications.

13. Emergency cards and exports

Printed cards and downloaded files contain personal and potentially sensitive medical information. Review them before sharing, date them and remove obsolete copies. Keep them securely and consider who can read them on a shared printer, computer, cloud drive or phone. You choose what to disclose to responders or trusted people; the website does not transmit cards to emergency services automatically. Cards are self-reported summaries, not medical certificates, insurance authorisations or instructions to a clinician.

14. Maps and service directories

Map buttons may open a third-party provider that applies its own terms, location permissions and privacy policy. Listings, geographic distance and search ranking do not confirm opening hours, emergency capability, capacity, availability, safety of travel or suitability for a person’s needs. Phone a facility when appropriate and follow emergency dispatcher directions. A doctor, dentist or hospital listing is not an endorsement or a guarantee of care. Provider numbers and links may change; notify the operator of a suspected error without placing test calls to emergency lines unnecessarily.

15. Survival and outdoor information

Conditions, weather, terrain, supplies and personal abilities vary. Preparation material cannot replace competent training, local warnings, rescue instructions or site-specific assessment. Do not enter water, fire, traffic, electrical or other hazardous scenes beyond your competence. Do not rely on the website as your only navigation or rescue plan. Lack of internet, battery, satellite coverage or mobile signal may make features unavailable. Some survival topics may remain unpublished pending specialist review.

16. Acceptable use

Do not impersonate another person; access another household; upload unlawful, abusive or unnecessary private material; attempt to bypass permissions; distribute credentials; interfere with security; overwhelm services; submit malicious files; or use the site to mislead responders. Do not scrape private records or republish protected materials without permission. Report suspected vulnerabilities privately to the operator. The operator may restrict an account to investigate abuse or protect users, proportionately and subject to applicable law.

17. Intellectual property

Website branding, original content, software and licensed assets belong to their relevant owners. You receive permission to use the supplied features for their intended personal/household purpose. You retain rights in your own information and grant only the permissions necessary to store and process it for the service. Uploaded manuals or purchased books do not automatically grant republication rights. External source citations do not imply an endorsement, partnership or permission to reproduce illustrations. Copyright restrictions do not prevent you from exporting your own household data.

18. Availability, changes and support

The website may be unavailable during maintenance, outages or safety reviews. Features may change as development proceeds. The operator should communicate material changes affecting stored information or account use where appropriate. Support is not an emergency response channel. No uptime, clinical outcome or email-delivery guarantee is offered by this draft. If a future paid feature is introduced, its pricing, cancellation, renewal and payment terms must be presented and accepted separately; these terms do not authorise a charge or subscription.

19. Liability and mandatory rights

Use reasonable care, verify self-entered information and obtain professional help. To the extent lawfully permitted, the operator does not promise that general information, third-party listings or user records are complete, current or suitable for every situation. Any proposed exclusion or limitation must be interpreted under applicable law and brought to your attention appropriately. Nothing in these terms excludes liability that cannot legally be excluded, including applicable liability for gross negligence or wilful misconduct, or removes mandatory consumer, privacy or other statutory rights. This draft does not impose a blanket waiver of injury claims or require a user to indemnify the operator for its own unlawful conduct.

20. Complaints, suspension and termination

Send ordinary service or privacy complaints to the operator contact above, including enough information to investigate without unnecessary medical details. The operator should acknowledge and address complaints within a reasonable period. You may stop using the service and request removal of private household data. Clearing household details in the dashboard leaves the WordPress login and account email intact; ask the operator for account deletion if required. Suspension for abuse must not prevent the exercise of lawful privacy rights or access to your own information where required by law.

21. Changes to these terms

The website records a terms version and may request agreement again when terms or operator information materially change. The entry popup remembers a version in this browser; that browser record is not proof that another household member consented to processing. Registration records the version agreed to for the account. Updates do not retrospectively validate unauthorised processing. Where the law requires fresh consent for a new purpose, acceptance of revised general terms is not a substitute for that consent.

22. Governing law and disputes

South African law applies to the service operated in South Africa, subject to mandatory rights and protections that may apply to a user elsewhere. Parties should first attempt to resolve ordinary disputes through the operator’s complaint process. These terms do not prevent complaints to competent regulators, ombuds, consumer bodies or courts. No clause requires a consumer to surrender a mandatory forum, statutory remedy or right of access to justice. Any unenforceable provision should be limited or separated only to the extent permitted by law.

23. Integrated privacy notice: information and purposes

The operator processes account identity and contact details to create, authenticate and maintain accounts; household contacts and member information to provide the user-requested private dashboard; medical-aid and health information only for the stated optional household purpose; kit data for inventories and reminders; and limited technical logs for security and service operation. The current registration rate limit temporarily stores a keyed hash derived from an IP address rather than a raw IP in that plugin mechanism. Hosting, WordPress or security software may separately log IP addresses. Terms agreement, login sessions and browser kit features use cookies or browser storage as applicable.

Medical information and children’s information require particular care and a lawful basis under POPIA. You must not supply someone else’s sensitive information simply because they are related to you. General website agreement is separate from permission to store optional health details or another person’s information. The operator must document the relevant purpose, lawful basis, safeguards and any required authorisation before public processing.

24. Privacy: recipients, security and retention

Household records are intended for the account holder’s private access. Authorised staff and contracted hosting/technical providers may access information as necessary to operate, secure, support or lawfully administer the service, under appropriate confidentiality and processing arrangements. They are not public profiles. The current software encrypts private household records using a site-derived key, but authorised server operators may still be able to decrypt them. Encryption does not eliminate security risk or administrator access. The operator must protect server credentials, authentication salts, backups and cache configuration.

Third-party map providers receive information when you use their sites. Any future voice or image analysis provider must be disclosed before transfer. Do not assume that no cross-border processing occurs; the operator must assess and disclose actual hosting and supplier locations before launch and apply required safeguards. Household data is retained while needed for the chosen account purpose, until valid erasure, or for a justified legal/security retention period. Backups may retain deleted records for a limited documented cycle. The operator must publish its actual retention schedule and must not retain health information indefinitely without justification. No permission to sell health records or use them for marketing or AI training is granted by this notice.

25. Privacy rights and consent withdrawal

Subject to applicable law, you may ask to access, correct or erase information, object to processing, or withdraw consent where consent is the basis. Account holders can edit, export and clear household records through the dashboard. A household member may contact the operator directly to challenge an unauthorised record. The operator may request proportionate identity verification to avoid disclosing records to the wrong person. Withdrawing consent may prevent the affected optional feature from continuing; it does not automatically invalidate earlier lawful processing. You may complain to South Africa’s Information Regulator through its official channels. The operator must supply its privacy contact and any applicable PAIA information before public launch.

26. Operator completion and review checklist

Before public launch, complete the operator identity/contact fields; confirm the clinical scope; obtain an appropriate South African legal review of these terms and the entry process; document health/children’s-data authority; identify actual processors and cross-border transfers; publish retention and breach-response procedures; test privacy rights and cache exclusions; and verify emergency contacts. This checklist identifies remaining work and is not a certification of compliance. The website should clearly describe development-stage features and never present pending clinical material as approved.

27. Company annual plan and workplace information

A company account holder must be authorised to act for the organisation and to publish the business contacts, responder details and documents they submit. One account currently manages one company and its permitted number of locations. Do not upload employee medical records, security codes, restricted site diagrams or documents that must remain private. Anyone with a location’s QR link may view its enabled emergency page. The QR link is a public distribution mechanism, not access control.

The annual-plan price, tax and payment method are shown at checkout by the operator’s WooCommerce store. Access is granted for 365 days from successful payment or from the end of existing active access, whichever is later. This version uses manual renewal and does not automatically debit a card or bank account. Dashboard renewal warnings do not guarantee that an email reminder will be delivered. Refunds, cancellation requests, statutory remedies and any paid-plan changes must be handled by the operator under applicable law; these terms do not impose a blanket no-refund rule.

Paid access allows additional location setup within the configured plan limit. Essential pages already deliberately published remain readable after expiry, and their owner may update existing contacts for safety. The operator may restrict unsafe or unlawful content. Companies must verify their evacuation plans, emergency responsibilities, training and equipment with competent people and applicable workplace requirements. Uploading a plan does not certify legal, fire or occupational-safety compliance. Each location should display contact numbers and its address on printed posters alongside the QR code.

28. Staff workspace, protected documents and renewal reminders

A company owner may invite viewers or managers by email. Invitees must use the matching account email and accept the invitation; acceptance does not independently verify the real-world identity or employment of the person. Invitations expire after seven days. The owner is responsible for assigning appropriate access and removing it when staff leave. Company permissions do not grant access to personal household medical records or WordPress administrator powers.

Protected company documents are available to authorised company members through authenticated downloads. They are not automatically included in a public QR page. The current implementation accepts PDFs up to 2 MB and a maximum of 20 documents per company; file-type checks do not guarantee that a document is free of malicious content. Upload only authorised operational material. Do not store employee medical records, passwords or sensitive security information in this workspace. Encryption relies on the site’s authentication salts and does not eliminate access by authorised server operators.

Renewal reminders are operational emails to the company owner’s account email. Their delivery depends on WordPress scheduling, website visits, hosting and mail configuration; they are not guaranteed emergency alerts. The company must still maintain its own renewal and safety-review process. Managers may edit company kits and upload/remove documents while annual access is active. Existing authorised staff retain read access to their workspace while awaiting renewal unless the owner revokes it. Essential published emergency information remains available independently of staff login.

29. Optional annual Health and Safety upgrade

The Basic company plan provides the company profile, permitted locations, emergency QR posters, company kits and staff workspace. The optional Health and Safety plan additionally provides internal safety registers, inspections, incident records, risk assessments, corrective actions, training records, drills, document references and safety committee records. These tools support administration and evidence recording; they do not certify compliance, replace competent workplace assessment, dispatch emergency responders or submit statutory notifications.

The separate upgrade price and applicable taxes are confirmed at checkout. The upgrade grants 365 days of Health and Safety access from successful payment, or from the end of current active upgrade access when renewed. Basic access is extended where needed to cover that upgrade term. Existing longer Basic access is retained. There is no automatic credit, refund of previous Basic purchases or proration at upgrade checkout; any agreed adjustment must be arranged with the operator before payment. Renewal is manual and no automatic recurring debit is made.

When upgrade access expires, new safety records and edits are restricted, while previously saved records remain available to authorised users for reading and export. Existing Basic access and already published essential emergency information follow their own access rules. Buying or renewing Basic access alone does not renew Health and Safety access. Refunds and cancellations remain subject to applicable rights and operator review; later renewals or manual access changes may require manual reconciliation.

The company owner controls its invitations and private records. Incident records and owner-only supporting PDFs are restricted to the owner. General safety records can be read by authorised company staff, and edited by authorised managers while upgrade access is active. Record only necessary personal information with appropriate authority. Company safety records, previous versions and audit history require a defined retention policy; deletion and data-subject requests may require operator review rather than automatic removal. Optional safety reminders are not guaranteed and must not replace urgent reporting or scheduled workplace checks.