1. Who is responsible
Nakai Blom Mobile Spa is the responsible party for personal information used to manage its mobile spa enquiries and services in Cape Town, South Africa. Privacy requests may be sent to nakaiblomspa@gmail.com, made by phone or WhatsApp at +27 63 423 3664, or raised through the booking channel.
2. Information we collect
The booking form requires your name, mobile number, email address, selected treatment, number of people, preferred date and time, venue type and full Cape Town service address. Venue or group notes are optional. We may also receive information you choose to provide during later direct communication.
3. Health and sensitive information
Do not enter allergies, injuries, pregnancy information, medical conditions or other health details in the general website form. If information relevant to safe treatment is needed, it should be discussed directly and only to the extent necessary. Health information receives additional protection under the Protection of Personal Information Act, 2013 (POPIA).
4. Why we use information
We use personal information to respond to enquiries, check availability, prepare a complete quote, arrange travel and setup, confirm and deliver a requested service, communicate changes, maintain necessary business records, protect clients and therapists, and meet legal obligations. Processing is based on your request or agreement, consent where required, legitimate operational interests that do not override your rights, and applicable law.
5. WhatsApp and website submissions
This website does not store the booking form submission. It prepares a WhatsApp message for you to review and send. WhatsApp then processes that communication under its own privacy terms and may process information outside South Africa. Do not send card or online-banking credentials through the form or WhatsApp.
6. Cookies, analytics and advertising
The current website does not install Google Analytics, advertising tags, Meta Pixel or other non-essential tracking. A consent banner is therefore not shown. The hosting and security infrastructure may use essential technical data needed to deliver, protect and diagnose the website. If non-essential measurement or advertising technology is introduced, this policy and the consent controls will be updated before it is activated.
7. Sharing and operators
We do not sell personal information. Information may be shared only when necessary with service providers acting for the business, such as website hosting and communications providers; with a person involved in delivering the requested service; to protect safety or legal rights; or where disclosure is required by law. Providers should receive only what they need and must protect it appropriately.
8. Cross-border processing
Hosting or communications providers may process information in other countries. Where this occurs, Nakai Blom Mobile Spa will use a lawful POPIA basis and reasonable contractual or technical safeguards appropriate to the information and provider.
9. Security and incidents
Reasonable organisational and technical safeguards are used for information under the business's control, including limiting access and avoiding payment-data collection on this site. No system is completely secure. Suspected compromises will be investigated, contained and documented, and affected people and the Information Regulator will be notified where POPIA requires it.
10. Retention
Information is kept only as long as reasonably needed for the enquiry or service, safety, disputes, accounting and other legal obligations. Retention depends on the record's purpose, sensitivity and applicable legal period. Records are securely deleted or de-identified when no longer required.
11. Your rights
Subject to POPIA, you may ask whether we hold your information, request access or correction, ask for deletion where lawful, object to certain processing, withdraw consent, or opt out of direct marketing. Withdrawal does not undo earlier lawful processing and some records may need to be retained by law.
12. Marketing
Marketing permission is optional and separate from a booking request. You may withdraw it at any time through the same channel used for the message. Service communications needed to answer or manage your booking are not marketing.
13. Children
A parent or legal guardian must make the booking and authorise any processing for a child where applicable. The website is not intended to collect information directly from children.
14. Automated decisions
The website does not make automated decisions or create profiles that produce legal or similarly significant effects.
15. Complaints
Please first raise a privacy concern through your existing Nakai Blom Mobile Spa enquiry channel. You may also complain to South Africa's Information Regulator using its eServices portal or at POPIAComplaints@inforegulator.org.za.
16. Changes
This policy may be updated when services, providers or legal requirements change. The effective date above will identify the current version.