Privacy Policy
How Meg's Pilatescollects and uses your personal information, in line with South Africa's Protection of Personal Information Act (POPIA).
Who we are
Meg's Pilates (Vredehoek, Cape Town) is the responsible party for your personal information. For any privacy query, contact us at email me.
What we collect
Your name, email address and mobile number, and a record of the classes you book, attend, cancel or miss. We collect only what we need to run the booking service.
Why we use it & your consent
To manage your bookings, enforce class capacity and our cancellation policy, send you booking confirmations and account emails, and total your classes for monthly billing. We only message you on WhatsApp if you opt in; you can withdraw that consent at any time from your profile or by contacting us.
Who processes it for us
We use trusted operators who process data on our behalf under contract: our hosting and database provider (Supabase) and our email provider (Resend). They may store data outside South Africa (e.g. the EU); we rely on their contractual and technical safeguards as permitted under POPIA's rules on trans-border information flows. We do not sell your information or share it for marketing.
How we protect it
Data is encrypted in transit and at rest, and access is restricted by database-level security so members can only see their own information.
Your rights
You may request access to your information, ask us to correct or delete it, or object to its processing. Email email me. You also have the right to lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
Retention
We keep attendance and billing records for as long as required for tax and accounting purposes, and delete personal information when it is no longer needed.
Last updated: July 2026.