What we keep, and how to have it removed.

Grace Nails and Beauty Spa is the responsible party for your information under the Protection of Personal Information Act. The booking system is run on the studio’s behalf by whoever operates this site, which makes them an operator: they may only process your details on the studio’s instructions, for the purposes below.

Ask the studio anything about your information:

• 11 Amanda Ave, Glenanda, Johannesburg, 2091
• 063 352 5374
• WhatsApp 063 352 5374

When you book, the form asks for three things:

• Your name, so the therapist knows who is coming.
• Your mobile number, so we can reach you about the appointment. It is also how we recognise you next time, instead of making you set up an account.
• Your email address, which is optional. Give it and you get a confirmation you can keep; leave it out and everything still works.

Alongside that we keep the bookings themselves (the treatment, the time, the therapist and the price on the day) because that is the diary. If you tell us something about an appointment over the phone, the studio may note it against your booking.

If you use the chat button on the site, we also keep what you typed and what the assistant replied. There is a section on that below.

We ask for nothing else. There is no account to create and no payment taken online.

Making and keeping your booking, and contacting you about that booking. Specifically: confirming it by email if you gave us one, letting the studio know it came in, and telling the studio if you cancel.

That is the whole list. We do not send marketing, and there is no mailing list to be added to. Details you give us to book a treatment are used to book that treatment. If the studio ever wants to send you anything else, it has to ask you first, separately.

We do not sell your details, and we do not share them for anyone else’s advertising.

The studio’s own staff, through the private diary they sign in to. Beyond that, only the suppliers that make the site work: the booking database is hosted with a cloud database provider, and confirmation emails are sent through an email delivery provider. They process your details to provide those services and for nothing else.

The link in your confirmation is how you move or cancel a booking without phoning. It carries a long random code and nothing else: no name, no number. The address itself gives nothing away if it is seen over your shoulder. Anyone with that link can see and change that one booking, so treat it like a ticket. Manage pages are also kept out of search engines.

Vouchers are bought and paid for in the studio, never online — the site never takes a payment. When one is issued, the studio may record who bought it, a phone number for them, and an email address to send the code to. All three are optional: a voucher works with none of them.

There is no account for a voucher either. The short code on the card, and the link it can be emailed with, are what let anyone holding them check the balance — the same way your booking link works above. A voucher is transferable by law, so it is not tied to whoever bought it, and the balance page shows nothing about the purchaser: no name, no phone number, only the value, the history and the expiry date.

The chat on this site is answered by an AI assistant, not by a person. It can tell you about treatments and times, and it can make a booking for you.

We keep what you typed and what it replied for 30 days, and then it is deleted automatically. The studio reads these to see what people are asking for. Nothing else is stored with them: no name, no number, no record of who was at the keyboard. If the conversation ends in a booking, it is linked to that booking so that deleting your details deletes the conversation too.

If you book through the chat, the name and number you type into the confirmation card are sent straight to the booking system. They are never part of the conversation, so they are never sent to the AI provider and never appear in what we keep. The messages themselves are sent to that provider in order to be answered, and to nobody else.

Anything you type into the chat yourself is kept as you typed it, so please do not type anything into it you would not want kept for a month. You never have to use it: the booking page does everything the chat does, and asks only for a name and a number.

Past bookings stay on the diary as the studio’s record of work done, which is what a diary is for. Your name and contact details stay with them until you ask us to remove them.

Chat conversations are the exception: those are deleted after 30 days, every time.

Open your booking link and choose Delete my details. Your name, number and email address are erased immediately, along with any notes kept against you or your appointments. The appointments themselves stay on the diary without them, so the studio’s record of the day does not develop a hole, but they will no longer be connected to you, and nobody can look them up by your name or number afterwards. Any chat conversation that led to one of your bookings is deleted outright at the same time.

Your booking link stops working at that point, and it cannot be undone. Any booking still to come is cancelled at the same time, since we would have no way to reach you about it. If you would rather ask a person, phone or WhatsApp the studio on the number above.

If your name, phone number or email is recorded against a gift voucher, that is erased the same way and at the same time. The voucher itself keeps working exactly as before — its balance, its history and its expiry are the studio’s financial record, not yours to erase, and whoever is holding the card or the link can still use it. Only who it names is removed, and the link it was emailed with stops working, so an old email cannot be used to identify you afterwards.

You can also ask the studio for a copy of what it holds about you, or to correct anything that is wrong.

Browsing the site and booking a treatment set no cookies at all. There is no analytics, no advertising and no tracking on this site, which is why you were not asked to agree to any. The only cookie the site ever sets is a sign-in session for the studio’s own staff on the private diary pages, and it is required for signing in to work.

One thing that is not a cookie but is worth saying plainly: if you use the chat, your browser keeps that conversation on your own device so that closing the panel or reloading the page does not lose it. It is not sent anywhere by being there, it is not used to recognise you, and your browser discards it when you close the tab.

Speak to the studio first. It is two people and a phone, and most things are sorted in a minute. If that does not resolve it, you have the right to complain to the Information Regulator (South Africa), the body that oversees POPIA, at inforegulator.org.za.