Privacy notice
How we look after the personal information you share with us — in line with the Protection of Personal Information Act (POPIA).
Effective date: To be confirmed at launch.
1. Who we are
Epstein Hunt Physiotherapy (the "Practice", "we", "us") is the Responsible Party for personal information processed via this website (https://aquaticphysio.co.za).
Practice address: 18 Leigh Ave, Fairvale, Johannesburg, 2192, South Africa.
Contact for privacy matters: info@aquaticphysio.co.za.
Information Officer: to be designated by the Practice and named here before launch.
2. What information we collect
- Contact form submissions. Your first name, last name, email address, optional phone number, the reason for your enquiry, and your message.
- Booking enquiries. When you book a consultation through our Calendly booking page, Calendly collects your name, email, and the appointment time on our behalf.
- Website analytics. Cloudflare Web Analytics provides aggregate, privacy-preserving statistics (top pages, country, device class). No cookies are set; no individual visitors are identified.
3. Why we collect it
- To respond to your enquiry or booking.
- To plan and deliver physiotherapy care.
- To understand which content on the site is useful.
- To comply with our legal and professional (HPCSA) obligations.
4. Lawful basis
We process this information on the basis of your consent (POPIA §11(1)(a)) and, where applicable, the necessity of doing so to arrange the healthcare services you are requesting (§11(1)(c)).
5. Who processes your information for us
- Cloudflare hosts this website and provides privacy-preserving analytics. Cloudflare operates a global edge network.
- Calendly, Inc. (United States) handles online bookings. This involves cross-border transfer of personal information under POPIA §72; by proceeding with a Calendly booking you consent to this transfer. Calendly's terms and privacy notice apply alongside ours.
- We do not share your information with any other third party for marketing purposes.
6. How long we keep it
- Contact-form messages: 12 months in the receiving inbox, then deleted.
- Booking records: held by Calendly per their retention policy.
- Clinical records (held off this website, at the practice): retained per HPCSA guidance.
7. Your rights under POPIA
You have the right to:
- Access the personal information we hold about you (§23).
- Request correction or deletion (§24).
- Object to processing (§11(3)).
- Lodge a complaint with the Information Regulator (inforeg@justice.gov.za).
To exercise any of these rights, please contact info@aquaticphysio.co.za. We will respond within a reasonable period (typically within 30 days).
8. Children's information
This website is not directed at children. Paediatric clinical engagement happens via the parent or legal guardian, who is the person we collect information from.
9. Security
We use TLS encryption in transit, access controls on the receiving inbox, and minimise the personal information we collect via this website. Clinical records are kept separately at the practice, according to HPCSA-aligned practice.
10. Changes to this notice
We will update this notice when our practices change. The effective date at the top of this page indicates when the current version came into force.
11. Complaints
If you have a concern about how your information is handled, please contact us first. You may also lodge a complaint with the Information Regulator (South Africa) at inforeg@justice.gov.za.