1. Introduction

When you visit this website, submit a booking request, or contact us, you're trusting us with your information — sometimes including sensitive health details. We take that responsibility seriously and only collect what we need to provide our light therapy services safely and communicate with you.

This policy applies to www.iridescence.co.za and to information collected through our booking form, contact form, WhatsApp, email, and phone.

2. Information We Collect

We collect information directly from you when you interact with this website or book a session:

2.1 Information You Provide

• Your name, email address, and phone number, when you use the booking or contact form, WhatsApp, or email
• Your preferred treatment area, appointment date, and practitioner, selected in the booking form
• Details you choose to share about your injury or condition, in the optional booking message field or in conversation with your practitioner — this is health information, treated by POPIA as "special personal information" that we handle with extra care and only use to prepare for your session
• Any message you type into our on-site chat assistant

2.2 Automatically Collected Information

Like most websites, our hosting and security infrastructure may automatically log basic technical information such as your browser type, general device information, and pages visited, to keep the site secure and running properly. We do not currently use third-party analytics, advertising, or tracking cookies on this site; if that changes in future, we will update this policy accordingly.

When you first open this website, a short notice appears each time explaining this Privacy Policy and our Terms of Service in brief, so you can review them before browsing further or booking a session.

3. How We Use Your Information

We use the information we collect only for purposes connected to running Iridescence and providing our services, specifically to:

• Respond to your booking request and schedule your session
• Prepare appropriately for your treatment based on any condition or injury details you share
• Communicate with you about your appointment, by email, WhatsApp, or phone
• Respond to general enquiries submitted through our contact form
• Maintain the security and proper functioning of this website

4. Information Sharing and Disclosure

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We only share information in the following limited circumstances:

4.1 With Your Consent

Where you've asked us to, for example if you'd like us to liaise with another healthcare provider on your behalf.

4.2 Service Providers

We may use trusted third-party tools purely to operate this website and communicate with you — for example, email delivery, website hosting, and WhatsApp Business messaging. These providers only process information as needed to provide that service to us.

4.3 For Legal Reasons

Where we're required to by South African law, a court order, or a lawful request from a regulatory authority, or to protect the safety, rights, or property of Iridescence, our clients, or the public.

5. Data Security

We take reasonable technical and organisational measures to protect the personal information we hold from loss, unauthorised access, alteration, or disclosure, in line with POPIA's security safeguard requirements. In particular:

• We only collect the information we genuinely need to provide our services
• We limit access to booking and health-related information to those involved in preparing for or delivering your treatment
• Booking requests submitted through this website are sent directly to Iridescence and are not stored in a public or searchable database on the site itself

6. Your Rights Under POPIA

As a data subject under South African law, you have the right to:

• Ask us what personal information we hold about you and request a copy of it
• Ask us to correct any information that is inaccurate, outdated, or incomplete
• Ask us to delete personal information we no longer have a valid reason to keep
• Object to, or ask us to restrict, certain uses of your information
• Withdraw consent you previously gave us, where our use of your information is based on consent
• Lodge a complaint with South Africa's Information Regulator if you believe your information has been mishandled

To exercise any of these rights, simply contact us using the details below.

7. How Long We Keep Your Information

We keep booking and contact information for only as long as reasonably necessary to provide our services, maintain accurate client records, and meet any legal or accounting requirements, after which it is securely deleted or anonymised.

8. Age Requirement

Our services are intended for clients aged 18 and older. Where a client under the age of 18 wishes to receive a session, we require a signed letter of consent from a parent, legal guardian, or other person responsible for the child's care before any personal or health information is collected or treatment takes place.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post any changes on this page and update the effective date at the top.

Your continued use of this website or our services after any changes to this Privacy Policy constitutes your acceptance of those changes.