Privacy Policy

Golden Tan Privacy Policy (POPIA Compliant)

Effective Date: 01/01/2024

Golden Tan is committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently, in line with the Protection of Personal Information Act, No. 4 of 2013 (POPIA).

By engaging with us, booking a service, purchasing products, or using our website, you agree to the processing of your personal information as set out in this Policy.

1. The Responsible Party

Business Name: Golden Tan
Responsible Party: Marlene Malan
Information Officer: Gerrit Malan
Contact for Privacy Matters (Physical Address): 42 Main st. Heatherdale, Akasia Pretoria, 0182
Contact for Privacy Matters (Email): info@goldentan.co.za

2. Information We Collect (Personal Information)

We collect and process the following types of personal information:

Category	Example of Information Collected	Purpose of Processing
Identity and Contact	Full Name, Surname, Phone Number, Email Address.	Booking management, appointment reminders, communication, order fulfillment.
Transaction/Service	Date of service, type of tan/product purchased, booking history.	Service delivery, billing, and record-keeping for service consistency.
Health (Special Personal Information)	Skin/Tanning History, known allergies, sensitivities, medical conditions (relevant to spray tan).	Crucial for safety and service customization. This is collected with your explicit, voluntary consent through a consultation/client card and is handled with extra care as required by POPIA.
Marketing (Optional)	Consent for newsletters, promotions, or direct marketing.	To send you promotional offers and updates only with your explicit opt-in consent.
Website Data (If Applicable)	IP address, browsing data, cookies.	To improve website functionality and service.

3. Basis for Processing (Lawfulness)

We will only process your personal information under the following conditions as permitted by POPIA:

Consent: You have given us voluntary, specific, and informed consent (e.g., ticking an opt-in box, signing a client card).
Contract: The processing is necessary to conclude or perform a contract with you (e.g., taking your name and phone number to secure a booking).
Legal Obligation: The processing is required by law (e.g., tax records).

4. How We Use Your Information (Purpose Specification)

We use your personal information solely for the purposes for which it was collected:

To provide and manage your spray tan services and product purchases.
To ensure the safety and suitability of the spray tan service based on your health/allergy profile.
To process payments and generate invoices.
To communicate important updates, appointment confirmations, and follow-up care instructions.
To send you direct marketing about our services, products, and promotions if you have explicitly opted in.

5. Sharing of Personal Information

Golden Tan will not sell, rent, or trade your personal information. We only share information when necessary to operate our business and only with third parties who are also compliant with POPIA (or equivalent international standards).

Service Providers: Third-party processors, such as our online booking platform, payment processors, or courier service (for product sales), may have access to necessary data to perform their service. We ensure they are bound by confidentiality and data protection agreements.
Legal Requirements: We may disclose your information if required to do so by law or in response to a court order.

6. Security Safeguards

We are committed to securing the integrity and confidentiality of the personal information in our possession. We implement appropriate physical, technical, and organisational measures to prevent loss, damage, unauthorised destruction, and unlawful access to your data. These measures include:

Password protection and access control on electronic booking systems and computers.
Secure, locked storage for physical client consultation cards.
Regular security updates and staff training on POPIA compliance.

7. Your Rights as a Data Subject

Under POPIA, you have the right to:

Be informed that your information is being collected (as per this policy).
Access the personal information we hold about you (upon written request).
Request correction, destruction, or deletion of your personal information (where we no longer have a lawful basis to keep it).
Object to the processing of your personal information, including for direct marketing purposes.
Lodge a complaint with the Information Regulator of South Africa.

8. Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law (e.g., financial records for 5 years). Special Personal Information (health/allergy data) will be retained for the duration of your active client relationship with us. After the retention period, records will be securely destroyed or de-identified.

9. Contacting the Information Regulator

If you believe that Golden Tan has processed your personal information in a manner that is inconsistent with POPIA, you have the right to lodge a complaint with the Information Regulator.

Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints Email: complaints.IR@justice.gov.za

This policy is subject to change. The updated version will always be posted on our website.