Privacy Policy

Who we are

Rohalya Wellness, Kyalami Country Villa, 29 Begonia Rd, Kyalami, Midrand, 1684 and Studio 113, 113 11th St, Parkmore, Sandton, 2916. For any privacy question or request, email help@rohalya.com.

What we collect

• Contact details — name, email address, phone number and, optionally, date of birth.
• Booking details — the location, treatment, date and time you choose, notes you send the team, and your booking history.
• Health information — your acceptance of our treatment terms and any condition or medical clearance you disclose so we can assess whether treatment is safe for you.
• Payment information — the amount, status and reference of your payment. Card details are entered directly with our payment provider and are never stored by us.
• Account and affiliate data — your login details and, for affiliates, referral activity and the banking details you supply so we can pay commission.
• Technical data — basic usage and device information collected by our website and analytics or advertising tools.

Why we use it

• to take, confirm, reschedule and manage your bookings
• to assess your suitability for treatment and deliver the service safely
• to take payment, issue refunds and manage packages and coupons
• to send booking confirmations, reminders and service notices by email
• to run our affiliate programme and pay commission
• to send marketing only where you have opted in
• to meet our legal, tax and record-keeping obligations

Health information

Health information is treated as sensitive. We collect it only with your consent, use it solely to assess suitability and provide treatment safely, restrict access to authorised staff, and never sell it or use it for advertising.

Who we share it with

We do not sell your information. We share the minimum necessary with service providers who help us operate: our hosting and database provider, our payment provider (Yoco), and our email delivery provider. We may also disclose information where the law requires it, or to establish or defend a legal claim.

How we protect it

Data is stored on access-controlled infrastructure, encrypted in transit, and visible only to staff accounts that need it for their role. No system is perfectly secure, but we take reasonable technical and organisational steps to keep your information safe.

How long we keep it

We keep booking, treatment and payment records for as long as needed to provide the service and to satisfy legal and financial record-keeping requirements, after which they are deleted or anonymised. Marketing contact details are kept until you opt out.

Your rights

You may ask us to give you a copy of the information we hold about you, correct it, delete it where we are not required to keep it, or stop using it for marketing. You may withdraw consent at any time — this will not affect processing already carried out, but may mean we can no longer treat you safely. Email help@rohalya.com and we will respond as soon as reasonably possible. You also have the right to complain to the Information Regulator of South Africa.

Cookies and tracking

Our site uses cookies and similar technology to keep you signed in, remember your booking progress, and measure how the site and our advertising perform. You can block or delete cookies in your browser, though parts of the booking flow may stop working.

Changes

We may update this policy from time to time. The current version is always published on this page.