Privacy Policy

1Who we are

Soul Thai Spa operates three branches in Pretoria: Centurion, Serene and Irene. We offer Thai massage, foot treatments, scrubs, nail care and related spa services, plus gift vouchers, through our website www.soulthai.co.za.

If you have any questions about this policy or how we handle your personal information, contact us at info@soulthai.co.za.

2What personal information we collect

We may collect the following personal information:

• Identity and contact details — your name, phone number, email address, and branch preferences when you book a treatment, make an enquiry or purchase a voucher.
• Booking information — treatment choices, preferred dates and times, and any health or wellness information you voluntarily share with us so we can deliver your treatment safely.
• Payment information — card and payment details. These are processed by our third-party payment provider (currently Payfast), and we do not see or store your full card details.
• Technical information — basic device, browser and usage data (such as pages visited) collected through standard website analytics, where used.

3How we collect it

We collect personal information directly from you when you:

• Book a treatment via our website, by phone, or at one of our branches;
• Purchase a gift voucher;
• Contact us with an enquiry or feedback;
• Sign up to receive marketing communications (where offered).

4Why we process your information (and the legal basis)

We process your personal information for the following purposes:

• To confirm, manage and deliver your bookings and purchases (performance of a contract / to take steps at your request before entering into a contract);
• To communicate with you about your booking or order (legitimate interest / contract);
• To process payments securely via our payment provider (contract);
• To send you marketing about our treatments and specials, only where you have consented and with an easy way to opt out (consent);
• To improve our website and services (legitimate interest).

We do not sell your personal information to anyone.

5Who we share it with

We only share personal information where necessary to provide our services:

• Payment providers — Payfast (and any successor payment gateway) processes card payments securely. Your card details are encrypted and we never store them.
• Service providers — IT and website hosting providers that support our website and booking systems.
• Legal obligations — where required by law or a court order.

All third parties are required to treat your information confidentially and in line with POPIA.

6How long we keep it

We keep personal information only for as long as necessary for the purposes described above, or as required by law (for example, financial records). Voucher and booking records are retained for our records and for the valid redemption period of our vouchers.

7How we protect it

We take reasonable technical and organisational measures to safeguard your personal information against loss, theft, unauthorised access and misuse — including secure connections (HTTPS), restricted access to personal data, and using reputable, compliant payment processors. No method of transmission over the internet is completely secure, but we work to protect your data.

8Your rights

Under POPIA you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information, subject to legal or contractual retention requirements;
• Object to the processing of your information for direct marketing;
• Withdraw consent at any time where processing is based on consent;
• Complain to the Information Regulator (South Africa) if you believe we have not handled your information lawfully.

To exercise any of these rights, contact us at info@soulthai.co.za. We will respond within a reasonable time and in line with POPIA.

9Marketing

We will only send you marketing (such as our monthly specials) if you have opted in. You can unsubscribe at any time using the link in any marketing email, or by contacting us.

10Children

Our services are intended for adults. We do not knowingly collect personal information from children without the consent of a parent or guardian.

11Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the effective date shown above.

12Contact

For any questions, requests or complaints about this policy or your personal information, contact us at:

• Email: info@soulthai.co.za
• Website: www.soulthai.co.za

You may also lodge a complaint with the Information Regulator of South Africa at inforeg.org.za.