Introduction

This Privacy Policy / POPI Act Notice explains how Laser Aesthetics South Africa collects, uses, stores, and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPI Act"). It applies to visitors to laseraestheticssa.com and to our customers.

What we collect

Depending on how you interact with us, personal information we collect may include:

• Full name
• Company name
• Email address
• Telephone number
• Business information (e.g. clinic type, business type)
• Quote and enquiry information
• Product and category interests
• Service and repair request details
• Communication history with our team
• IP address
• Browser and browser version
• Operating system and device type
• Referring URL and landing page
• Website activity, including pages viewed, products and categories viewed, and quote history
• Session information (an anonymous session identifier)
• Cookies and similar technologies (see our Cookie Policy)

Why we collect it

We use personal information to:

• Respond to enquiries
• Provide quotations
• Process orders
• Provide customer service and technical support
• Manage service and repair requests
• Manage customer accounts
• Improve this website
• Maintain website security and prevent fraud
• Understand aggregate customer interests and improve our products and services
• Communicate with customers about their enquiries, orders, or service requests
• Send direct marketing, only where you have consented or as otherwise permitted by law

Website activity linked to enquiries

This website includes a quote and enquiry tracking system. When you submit an enquiry or quote request, we may associate relevant website activity from your visit with that enquiry, which may include:

• Products and product categories viewed
• Pages viewed and time spent on pages
• Number of pages viewed
• The first page you visited and the last page viewed before submitting your enquiry
• The referring page and landing page
• Brochures downloaded and videos interacted with
• Search terms used on our website
• IP address, browser, and device information
• Date, time, and an anonymous session identifier

This information helps our team understand your enquiry and provide more relevant assistance. It is stored with your enquiry record and is only accessible to authorised staff — it is never displayed publicly.

IP address

An IP address associated with a quote or enquiry submission is collected for security, fraud and abuse prevention, enquiry management, technical troubleshooting, and legal compliance. Your IP address is never displayed on the public website, never shown to other customers, never included in public URLs, and never exposed through any public API. It is only accessible to authorised administrators and systems where necessary.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies (analytics, marketing, and functional) are only set with your consent, which you can change at any time.

Data security

We implement technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), secure database access, encryption at rest where supported by our infrastructure, secure authentication for staff, role-based access control, rate limiting, and protection against common web vulnerabilities (CSRF, XSS, SQL injection). See "Data Security" in our internal governance documentation for further detail.

Security breaches

If a security compromise occurs that has affected, or may affect, your personal information, we will investigate promptly and, where required by POPI Act, notify the Information Regulator and affected data subjects.

Third-party service providers

We may share personal information with trusted third-party service providers who help us operate this website or our business (for example, email delivery, hosting, or finance application processing), under agreements requiring them to protect your information and use it only for the purposes we specify.

International data transfers

Where a service provider processes personal information outside South Africa, we take reasonable steps to ensure it is subject to a comparable level of protection, as required by POPI Act.

Direct marketing

We will only send you direct marketing communications where you have given consent (an opt-in checkbox on our forms), or otherwise as permitted by law. You may withdraw consent or opt out of marketing at any time — every marketing email includes an unsubscribe option, and we honour opt-out requests promptly.

Your rights under POPI Act

As a data subject, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your information, where legally applicable
• Be informed about how your information is processed
• Object to certain processing of your information
• Withdraw consent, where processing is based on consent
• Opt out of direct marketing

You can exercise these rights using our POPI Act Data Subject Request form. You also have the right to lodge a complaint with the Information Regulator (South Africa) if you believe your information has been processed unlawfully.

Information Officer

Our Information Officer's contact details are published on our PAIA Manual and Privacy Contact pages.

Retention

We retain personal information only for as long as necessary for the purposes described in this notice, or as required by law. Retention periods are configured and reviewed internally and are not indefinite.

Changes to this notice

We may update this notice from time to time. The "Last Updated" date at the top of this page reflects the most recent change.

Contact us

For privacy-related questions or to exercise your rights, contact us via our Privacy Contact page or at info@laseraestheticssa.com.