PLEASE READ THIS PRIVACY POLICY CAREFULLY.

At Brazilliance Spa, we value your privacy and are committed to safeguarding your personal information. This Privacy Notice explains how we collect, use, store, and protect the personal data you share with us. Our practices comply with the Protection of Personal Information Act (POPIA). By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please refrain from using our services.

Definitions: In this Privacy Notice, the following terms shall have the following meanings:

• "We" or "Us" refers to Brazilliance Spa (Pty) Ltd, Registration Number: 2018/619381/07, located at 154 Main Road, The Equinox Building Suite 101/201, Sea Point, South Africa.
• "POPIA" refers to the Protection of Personal Information Act, No. 4 of 2013.
• "You" or "Your" refers to the person to whom personal information relates.
• "Personal Information" means any information that can identify a person, including but not limited to: name, contact details, or any other personal identifiers.
• "Processing" means any operation performed on personal information, including collection, storage, use, sharing, or destruction.
• "Consent" refers to a data subject's informed, unambiguous, and voluntary agreement to the processing of their personal information.

Purpose of Processing Personal Information
We are committed to respecting your privacy. We will collect, use, store, and process your personal information in compliance with POPIA and applicable laws. The processing of personal data is necessary for the following purposes:

• To provide our products and services
• To fulfil contractual obligations
• To maintain customer relationships
• To comply with legal and regulatory obligations
• For website analytics, improvement and service offerings.
• To manage bookings and communicate with you regarding services, transactions, and any other matters that may be relevant to your engagement with us. 

Types of Personal Information Collected
We collect personal information directly from our data subjects (clients, suppliers, and website visitors) for the following purposes:

• Clients: Name, contact details, addresses, medical conditions (for wellness treatments), and any other information necessary to provide services.
• Suppliers/Subcontractors: Name, company registration number, VAT registration number, contact details, bank details, and addresses.
• Website Visitors: Name, contact details (e.g., email), location data, and information collected through cookies for analytics and user experience purposes.

Note: Personal information collected from employees is subject to a separate agreement.

Legal Basis for Processing
We process your personal information based on the following legal grounds:

1. Consent: We may process your personal data when you have given us explicit consent, for example, when you contact us through our contact form, provide us with feedback or sign up for our services.
2. Contractual Necessity: We process personal data to fulfil our contractual obligations, such as processing payments, managing bookings, providing services, or delivering products.
3. Legal Obligation: We may process your information to comply with legal obligations, including tax and regulatory requirements.
4. Legitimate Interests: We may process personal data where necessary for the legitimate interests of the business, including fraud prevention, IT security, and legal dispute resolution.

Sharing Personal Information with Third Parties

We may share your personal information with third-party service providers, regulators, or government authorities in accordance with applicable laws and regulations. These third parties may include:

• Service providers who assist us in providing services (e.g., payment processors, IT service providers).
• Regulatory bodies, such as the South African Revenue Service (SARS).
• Legal advisors or enforcement authorities when required by law.

Retention of Personal Information
We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected. Once the retention period expires, your information will be securely deleted, unless we are required by law to retain it for a longer period.

Cookies and Website Tracking
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device to recognize repeat users, track usage behavior, offering personalized content and compile data that helps us improve our website. You can manage cookie preferences through your browser settings.

If you do not wish to have cookies placed on your device, you can disable them in your browser settings, though this may limit certain functionalities on our website.

Security Safeguards
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, destruction, or damage. These measures include encryption, access controls, regular security audits, and employee confidentiality agreements.

ALTHOUGH WE TAKE THE AFOREMENTIONED PRECAUTIONS IN PROTECTING YOUR PERSONAL INFORMATION, WE SHALL HOWEVER NOT BE LIABLE FOR ANY LOSS OR DAMAGE, HOWSOEVER ARISING, SUFFERED AS A RESULT OF THE DISCLOSURE OF SUCH INFORMATION IF OUTSIDE OUR REASONABLE CONTROL.

Minors
We do not knowingly collect or process the personal information of individuals under the age of 18. If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete the information.

Transborder Flow of Information
We may transfer your personal information to service providers located outside South Africa for processing and storage purposes. In such cases, we ensure that these providers adhere to privacy standards comparable to POPIA.

Your Rights as a Data Subject
Under POPIA, you have the following rights regarding your personal information:

• Right of Access: You have the right to request a copy of your personal information held by us. Requests must be submitted in writing, in the format and manner as prescribed in our PAIA Manual, available here or upon written request at info@brazilliancespa.co.za.
• Right to Rectification: If you believe your personal information is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request the deletion of your personal information, subject to any legal or contractual obligations that may prevent us from fulfilling such a request.
• Right to Object: You may object to the processing of your personal information on legitimate grounds. We will cease processing your data unless we can demonstrate compelling legitimate grounds that override your rights.

To exercise any of these rights, please contact us at info@brazilliancespa.co.za. 

Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that may significantly affect your rights and freedoms.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website, with the date of the most recent update indicated at the top of the page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

Contact Us
For any questions, concerns, or complaints regarding the processing of your personal information, please contact us at:

Email: info@brazilliancespa.co.za
Phone: +27 67 037 8464
Address: 154 Main Road, The Equinox Building Suite 101/201, Sea Point, South Africa

If you are not satisfied with our response, you have the right to file a complaint with the Information Regulator of South Africa:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints: POPIAComplaints@inforegulator.org.za
General Inquiries: enquiries@inforegulator.org.za