1. About this policy
Luma Life Therapy respects your privacy and aims to process personal information responsibly and in accordance with South Africa's Protection of Personal Information Act, 4 of 2013, commonly known as POPIA. This policy explains, in plain language, what information we may handle and why.
2. Information we may collect
Depending on how you interact with us, we may receive your name, contact details, appointment or package information, communications with us and information you choose to provide about your goals or suitability for a session. Where you voluntarily provide health-related information, we treat it as sensitive and use it only where reasonably necessary for suitability, service delivery, record keeping or legal and safety obligations.
When you visit this website, our hosting and security service providers may also process limited technical information, such as your IP address, browser or device information and security logs, to deliver and protect the website.
3. How we use personal information
We may use personal information to respond to enquiries, arrange and manage appointments, provide requested services, communicate about bookings, maintain appropriate business records, improve our service, protect our website and systems, and meet legal or regulatory obligations.
4. Sharing and service providers
We do not sell your personal information. We may share only what is reasonably necessary with trusted service providers that help us operate, such as website hosting and security, communications, booking or payment providers where these are used. Those providers may have their own privacy terms when you use their platforms directly, for example WhatsApp or an external booking service.
5. Cross-border processing
Some technology service providers may process information outside South Africa. Where this occurs, we take reasonable steps to use providers and arrangements intended to provide appropriate protection for personal information.
6. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate records, or to meet legal, regulatory or dispute-resolution requirements. Information that is no longer required should be securely deleted or de-identified where appropriate.
7. Security
We use reasonable technical and organisational measures intended to protect personal information against loss, misuse, unauthorised access or disclosure. No website, device or electronic communication method can be guaranteed to be completely secure.
8. Cookies and website tracking
This website does not intentionally use advertising or behavioural-marketing cookies. Essential technical cookies or similar technologies may be used by infrastructure or security providers where required to operate and protect the site.
9. Your rights
Subject to POPIA and applicable law, you may ask whether we hold personal information about you, request access to it, ask us to correct or delete information that is inaccurate or no longer lawfully required, object to certain processing, or withdraw consent where processing relies on consent.
10. Contact and complaints
For a privacy request or question, email hello@lumalife.co.za. If you believe your personal information has been processed in a way that does not comply with POPIA, you may also lodge a complaint with the Information Regulator of South Africa.