Privacy Policy

1. Responsible party and contact details

Registered legal name

Harmony Touch Aesthetics (Pty) Ltd

CIPC registration number

2026/032139/07

Business, registered office and service address

908 Saint Bernard Drive, Garsfontein, Pretoria, Gauteng, 0042, South Africa

Telephone

+27 82 500 8566

WhatsApp

+27 79 410 8521

Email

harmonytouchaest@gmail.com

Website

https://www.harmonytouchaesthetic.com/

VAT status

Not VAT registered

For queries about online purchases, privacy or website use, contact us using the details above.

2. Information we collect

Depending on how you use our services, we may collect your name, contact details, delivery and billing address, order history, appointment details, communications, consent preferences and technical website information such as browser type, device data and cookies.

Where necessary for a requested skin consultation or treatment, we may ask for information relevant to skin suitability, sensitivities or contraindications. We handle such information with additional care and collect only what is reasonably necessary. Payment card details are ordinarily handled by the relevant payment processor rather than stored by us.

3. Why we process your information

We use relevant information to respond to enquiries; arrange appointments; provide requested treatments; process orders, payments, returns and deliveries; provide customer support; comply with legal, tax and record-keeping duties; protect our business and customers; and improve website functionality.

We use information for direct electronic marketing only where POPIA permits it, including where valid consent or the existing-customer requirements apply. Every promotional electronic message will include a practical way to opt out.

4. Legal justification and choices

Processing takes place on a lawful basis appropriate to the purpose, such as consent, performance of a contract, legal compliance or a legitimate interest recognised by POPIA. Where information is necessary to process a booking, deliver an order or meet a legal obligation, declining it may prevent us from providing that service. Optional marketing information may be declined.

5. Skincare questionnaires and sensitive information

If you use our skincare recommender or consultation questionnaires, we may process skin concerns, treatment preferences and information you voluntarily disclose about suitability. We do not treat automated recommendations as medical diagnoses.

Special personal information will be processed only where a lawful basis or authorisation applies, with proportionate safeguards. Questionnaire answers should not be placed into marketing analytics or publicly accessible URLs.

6. Who may receive information

We may share only the information needed with service providers that help run the business, including website hosting, booking systems, payment processors, delivery/courier companies, customer communications providers and authorised professional advisers. We require reasonable confidentiality and data-protection safeguards appropriate to these services.

Information may also be disclosed where required by law or to protect a lawful right. We do not sell customer personal information.

7. International transfers

Some service providers may host or process information outside South Africa. Where cross-border transfers occur, we take steps required under POPIA, including ensuring an appropriate lawful basis and adequate safeguards.

8. Cookies and website analytics

Our website may use essential cookies for security, functionality and shopping-session continuity. Non-essential analytics or marketing technologies will be managed in accordance with applicable consent and privacy requirements. Browser settings may also allow you to manage cookies, although blocking essential cookies could affect site functionality.

Any specific analytics, advertising pixels or cookie banner should accurately reflect the technologies actually implemented on our website.

9. Information security and payment handling

We use reasonable technical and organisational safeguards appropriate to the information and risks involved, including controlled access and use of reputable service providers. No online system can be guaranteed completely secure.

Where a security compromise triggers legal notification duties, we will follow the applicable POPIA requirements. Payments are processed using the security arrangements of the relevant payment service provider.

10. Retention and deletion

We retain information only for as long as necessary for the relevant purpose or as required or permitted by applicable law, including legitimate transaction and tax-record retention. When retention is no longer justified, information is deleted, de-identified or securely destroyed as appropriate.

11. Your privacy rights

Subject to POPIA and applicable procedures, you may request confirmation of information we hold, access to relevant records, correction or deletion where legally appropriate, and object to certain processing. You may withdraw consent where processing relies on consent, without affecting lawful earlier processing.

Submit a request to harmonytouchaest@gmail.com. We may verify identity before releasing records. You may lodge a complaint with South Africa’s Information Regulator at https://inforegulator.org.za/.

12. Children and age-related information

Where a minor is involved in a booking, consultation or purchase, we apply applicable requirements concerning a competent person, consent and lawful processing. We do not intentionally seek unnecessary personal information from children through general product browsing.

13. External websites and providers

Links to third-party booking, payment or other websites may take you outside our website. Those services may have their own privacy policies, and we recommend reviewing them when using their platforms.

14. Updates to this Privacy Policy

We may update this notice as our services or legal requirements change. The current version will be posted on our website with its effective date. Material changes will be communicated where required by law.