Privacy Policy

1. Who is responsible for your information

[Legal entity name] (“TABLE”, “we”), registered address [address], is the responsible party under POPIA for the personal information described below. Our Information Officer is [name], reachable at [email] — this registration must be filed with the Information Regulator before launch (see the compliance note at the bottom of this page).

2. What we collect

From Clients (visitors booking or reviewing):

• Name, email, and (optionally) phone number, submitted with a booking request or when registering to leave a review.
• The content of any review you submit.
• Basic technical data (IP address, browser type) collected automatically for security and to keep the site working.

From Therapists (applicants and listed therapists):

• Name, email, phone, suburb, gender, experience, bio, tagline, and any photos submitted for a profile.
• Billing information you provide to PayFast to pay your monthly listing fee — TABLE never sees or stores your card or bank details; PayFast processes these directly under its own privacy policy.

3. What we use it for

• To display an approved Therapist’s public profile.
• To pass a booking request to the relevant Therapist and to our own front desk, so an appointment can be confirmed.
• To moderate and, if approved, publish a review under the display name you provide (never your full contact details).
• To contact you about your application, booking, or account where necessary.
• To meet our own legal, accounting, and record-keeping obligations.

We do not sell personal information to third parties.

4. Review confidentiality — our specific promise

When you register to leave a review, only the display name you choose (e.g. “ Sarah M.”) and the review text are ever shown publicly. Your email address and any other account details are kept private and are never published on a Therapist’s profile or shared with the Therapist beyond what’s needed to confirm you had a genuine booking, where applicable.

5. Who we share information with

• Supabase — our database, authentication, and photo-storage provider, which processes data on our behalf under its own data-processing terms.
• PayFast — our payment processor for Therapist subscription billing.
• A Therapist receives the booking details (name, contact, requested time/treatment) of a Client who requests an appointment with them, since that’s necessary to arrange the visit.
• We do not share your information with any other third party except where required by law.

6. How long we keep it

We keep booking and review records for as long as your account/listing is active and for a reasonable period afterward for record-keeping purposes. You can ask us to delete your information at any time (see below), subject to any legal obligation we have to retain it.

7. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct inaccurate information.
• Ask us to delete your information, or withdraw consent, where we’re not otherwise required to keep it.
• Object to certain processing.
• Lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za) if you believe we’ve mishandled your information.

To exercise any of these, contact us at [email].

8. Security

We rely on Supabase’s and PayFast’s security infrastructure (encryption in transit, access controls) to protect your information, and restrict internal access to what’s needed to run TABLE. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.

9. Cookies

We use only the essential cookies Supabase Auth sets to keep you signed in when registering to leave a review or logging in as an admin — no advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time; the current version always applies.

11. Contact

Questions about this policy or your information: [contact email].