Deep South Contrast (Pty) Ltd
Effective Date: 13 March 2026
1. Introduction
Deep South Contrast (Pty) Ltd (Registration Number 2026/057397/07), trading as Contrast, is a responsible party as defined in the Protection of Personal Information Act 4 of 2013 (“POPI Act”). We are committed to protecting the privacy and personal information of all individuals who interact with our website and booking platform.
This Privacy Policy explains how we collect, use, store, and protect your personal information, and sets out your rights in relation to that information. It applies to all visitors to our website and to all individuals who make or participate in bookings for our contrast therapy sessions at Imhoff Farm, Kommetjie, Cape Town.
By accessing our website or making a booking, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Responsible Party:
- Name: Deep South Contrast (Pty) Ltd
- Trading name: Contrast
- Registration number: 2026/057397/07
- Address: Imhoff Farm, Kommetjie, Cape Town, Western Cape
- Email: info@thecontrast.co.za
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at the details above.
3. Information We Collect
We collect personal information only to the extent necessary to provide our services and fulfil our legal obligations. The categories of information we may collect include:
3.1 Information You Provide Directly
- Full name
- Email address
- Mobile phone number
- Booking preferences (session type, date, time, number of participants)
- Payment information — processed securely through Peach Payments; we do not store card details
- Health self-declaration acknowledgement (checkbox confirmation only — we do not collect underlying health data)
- Communications you send us (enquiries, messages)
3.2 Information Collected Automatically
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time spent on site, and referral source
- Cookie data (see Section 8 below)
3.3 Information We Do Not Collect
We do not collect or store special personal information (as defined in the POPI Act) such as health records, race, religion, political views, or biometric data through our website. Our health disclaimer requires participants to self-assess their own fitness to participate — this is not a data collection event, and no medical data is transmitted to or retained by us.
4. How We Use Your Information
We use your personal information for the following purposes:
- To process and confirm bookings
- To send booking confirmations, reminders, and relevant session information
- To process payments through our authorised payment processor
- To communicate with you about your booking or any changes to it
- To comply with our legal and regulatory obligations
- To enforce our Terms and Conditions and manage liability
- To improve our website and services based on aggregate, anonymised usage data
- To respond to your enquiries or support requests
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
5. Legal Bases for Processing
We process your personal information on one or more of the following grounds:
- Performance of a contract: to fulfil your booking and deliver our services
- Legal obligation: to comply with applicable South African law, including the POPI Act, Consumer Protection Act 68 of 2008, and Electronic Communications and Transactions Act 25 of 2002
- Legitimate interest: to protect the safety of participants, secure our premises, and maintain business records — where such interests are not overridden by your rights and freedoms
- Consent: where you have given us express consent for a specific processing activity (e.g. marketing communications)
6. Sharing Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:
6.1 Service Providers
We engage trusted third-party service providers who process personal information on our behalf, including:
- Peach Payments (Pty) Ltd — payment processing
- Session scheduling and management handled entirely via our own website (thecontrast.co.za)
- Email and SMS service providers — transactional communications
These providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.
6.2 Legal Requirements
We may disclose personal information where required to do so by law, court order, or to comply with a lawful request by a public authority.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, personal information may be transferred as part of that transaction. We will notify affected individuals before their information is transferred and becomes subject to a different privacy policy.
7. Retention of Personal Information
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In practice:
- Booking records are retained for a minimum of 3 years for liability and contractual purposes
- Payment transaction records are retained for 5 years in accordance with tax and financial record-keeping obligations
- Marketing consent records are retained until consent is withdrawn
When personal information is no longer required, we will securely delete or anonymise it.
8. Cookies
Our website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device that helps us recognise returning visitors and understand how our site is used.
8.1 Types of Cookies We Use
- Essential cookies: required for the website and booking functionality to operate
- Analytics cookies: used to understand aggregate site usage (e.g. Google Analytics or similar)
- Preference cookies: used to remember your settings or choices
8.2 Your Cookie Choices
You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we will obtain your consent before placing non-essential cookies.
9. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encrypted data transmission (HTTPS/TLS)
- Secure payment processing via a PCI DSS-compliant payment gateway
- Access controls limiting who within our organisation can access personal information
- Regular review of our security practices
No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security, and you provide information at your own risk.
10. Your Rights Under the POPI Act
As a data subject under the POPI Act, you have the following rights:
- Right of access: to request confirmation of whether we hold your personal information and to obtain a copy of it
- Right to rectification: to request correction of inaccurate or incomplete personal information
- Right to erasure: to request deletion of your personal information, subject to our legal retention obligations
- Right to object: to object to the processing of your personal information on grounds relating to your particular situation
- Right to withdraw consent: where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing
- Right to complain: to lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact us at the details in Section 2. We will respond within a reasonable period, and no later than 30 days.
The Information Regulator of South Africa can be contacted at:
- Website: www.inforegulator.org.za
- Email: inforeg@justice.gov.za
- Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
11. Children’s Privacy
Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of 18 without the consent of a parent or legal guardian. If you are booking on behalf of minors, you represent that you have the authority to provide consent on their behalf and that you accept liability for their participation.
12. Third-Party Links
Our website may contain links to third-party websites (for example, social media platforms or our booking provider). This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you by email or a prominent notice on our website.
Your continued use of our website or services after any changes constitutes your acceptance of the updated Policy.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact:
- Deep South Contrast (Pty) Ltd
- Imhoff Farm, Kommetjie, Cape Town, Western Cape
- Email: info@thecontrast.co.za
This Privacy Policy was last reviewed and updated on 13 March 2026.