Patient Information Policy
Privacy Policy
Effective Date: 01.01.10
By Grace Massage respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how By Grace Massage collects, uses, stores, protects and otherwise processes personal information when you visit our website, contact us, enquire about our services, complete our client intake form, communicate with us through WhatsApp, or receive services from us.
By Grace Massage operates in Johannesburg, Gauteng, South Africa and processes personal information in accordance with applicable South African privacy laws, including the Protection of Personal Information Act 4 of 2013, commonly known as POPIA.
1. About By Grace Massage
Business Name: By Grace Massage
Address: 394 Vine Avenue, Ferndale, Randburg, Johannesburg, Gauteng, South Africa
Website: https://bygracemassage.com/
Telephone: 074 100 7519
Email: katherine.bygrace@gmail.com
For purposes of applicable data protection legislation, By Grace Massage is responsible for determining how and why your personal information is processed.
2. What Personal Information We Collect
Depending on how you interact with By Grace Massage, we may collect the following personal information.
Contact and identification information
This may include:
-
Full name
-
Date of birth
-
Physical address
-
Email address
-
Telephone or mobile number
-
Occupation
-
How you were referred to By Grace Massage
Emergency contact information
Where provided, we may collect:
-
Emergency contact name
-
Emergency contact telephone number
Health and medical information
When you complete our client intake form, we may collect information relating to your health and wellbeing.
This may include information concerning:
-
Previous massage or bodywork experience
-
Stress
-
Headaches
-
Pregnancy
-
Diabetes
-
High blood pressure
-
Epilepsy
-
Medication
-
Exercise and physical activity
-
Previous surgery
-
Broken bones
-
Muscle tension or soreness
-
Cardiac or circulation problems
-
Back pain
-
Numbness or stabbing pain
-
Other medical conditions
-
Sensitivity to touch or pressure
-
Other information that may be relevant to providing your massage or bodywork session safely
Some of this information may constitute special personal information under applicable South African privacy law.
We collect this information because it may be relevant to your treatment, your safety, the suitability of particular massage or bodywork techniques, and the provision of our services.
3. How We Collect Your Information
We may collect personal information when you:
-
Visit or use our website
-
Submit a lead or enquiry form through Google
-
Contact us by telephone
-
Contact us through WhatsApp
-
Make an enquiry about our services
-
Book an appointment
-
Complete our client intake or patient information form
-
Provide information before or during a massage or bodywork session
-
Provide a testimonial or review
-
Communicate with us regarding an existing or previous appointment
We may also receive limited information through advertising or website services that help us understand how people find and interact with our business.
4. Services We Provide
By Grace Massage provides massage and bodywork services including:
-
Deep tissue massage
-
Pregnancy massage
-
Sports massage
-
Cupping
-
Lymphatic drainage
-
Reflexology
-
Holistic massage and bodywork
The personal information collected will be processed only to the extent reasonably necessary for purposes connected with providing these services and operating the business.
5. Why We Use Your Personal Information
We may use your personal information to:
-
Respond to enquiries
-
Communicate with you about appointments
-
Process and manage bookings
-
Provide massage and bodywork services
-
Understand relevant health information before providing treatment
-
Identify information that may need to be discussed before a session begins
-
Contact you regarding your appointment
-
Process payments
-
Maintain appropriate business and client records
-
Respond to questions or requests
-
Request or publish testimonials or reviews where you have provided the appropriate permission
-
Send marketing communications where we are permitted to do so
-
Operate, maintain and improve our website
-
Understand how visitors interact with our website and advertising
-
Protect the business, our clients and our services
-
Comply with applicable legal and regulatory obligations
6. Health and Medical Information
Your health information is particularly important to us.
Our client intake form asks questions about medical and physical conditions because certain conditions may affect whether particular massage or bodywork techniques are appropriate.
Information provided through the intake form may be discussed with you before your session begins where necessary.
You are responsible for providing information that is accurate and keeping us informed of relevant changes to your health or medical circumstances.
By Grace Massage does not use information collected through the intake form for unrelated purposes.
We do not sell your health or medical information.
7. Payment Information
We accept payment by:
-
Cash
-
EFT deposits
-
Credit cards
Where payment is made through a third-party payment service or financial institution, that provider may process information necessary to complete the transaction.
By Grace Massage does not need to collect or retain more payment information than is reasonably necessary for processing and recording your payment.
8. WhatsApp Communications
We use WhatsApp to communicate with clients and prospective clients.
This may include:
-
Responding to enquiries
-
Discussing appointments
-
Confirming or changing appointments
-
Providing information relating to our services
-
Sending marketing communications where you have provided the required consent or where otherwise permitted by applicable law
WhatsApp is a third-party communication platform. Information sent through WhatsApp may therefore also be processed by WhatsApp in accordance with its own privacy practices.
You should avoid sending unnecessary sensitive medical information through WhatsApp where it is not required.
9. Marketing Communications
By Grace Massage may use WhatsApp to communicate marketing information about our services.
Where applicable, we will obtain the required consent before sending unsolicited electronic direct marketing communications.
You may withdraw your consent to receive marketing communications at any time.
If you no longer wish to receive marketing messages, you can contact By Grace Massage using the contact details provided in this Privacy Policy.
The withdrawal of marketing consent will not affect processing that was lawfully carried out before your consent was withdrawn.
10. Google and Website Services
Our website is operated using WordPress.
We may use Google services in connection with our website, advertising and lead generation, including Google advertising and Google lead forms.
These services may process information such as technical information, browser information, device information, website interactions and other information necessary for their respective services.
The information processed by these third-party providers is subject to their own privacy policies and terms.
Where cookies, tracking technologies or similar technologies are used, they may be used to help operate the website, understand website usage, measure advertising performance or improve our services.
11. Cookies
Our website may use cookies or similar technologies.
Cookies are small files or pieces of information that may be stored on your device when you visit a website.
Cookies may be used for purposes such as:
-
Operating the website
-
Remembering certain preferences
-
Understanding website traffic
-
Measuring advertising performance
-
Improving the website
-
Supporting marketing activities
You may be able to control or disable certain cookies through your browser settings.
Disabling cookies may affect certain website functionality.
12. Testimonials and Reviews
By Grace Massage may display client testimonials or reviews for business and marketing purposes.
We will only use testimonials or other client feedback in accordance with the permission or consent provided by the person concerned.
We will not publish private medical information as part of a testimonial without an appropriate legal basis and consent where required.
13. Sharing Your Personal Information
By Grace Massage does not sell your personal information.
We generally do not share your personal information with third parties except where this is reasonably necessary for operating the business, providing services, processing payments, operating our website, communicating with you, complying with legal obligations, protecting rights or safety, or where you have otherwise authorized the disclosure.
Third-party service providers may process information on our behalf, including providers associated with:
-
Website hosting and WordPress
-
Google services
-
Online advertising
-
Lead generation
-
WhatsApp communications
-
Payment processing
-
Information technology and business administration
Where third parties process personal information on our behalf, appropriate measures should be taken to protect the confidentiality and security of that information.
14. Who Has Access to Your Information
Access to client information is restricted to the business owner and authorized persons where access is reasonably necessary for the operation of By Grace Massage.
We aim to limit access to personal information to what is reasonably necessary for the relevant purpose.
15. Children’s Information
By Grace Massage may provide services to clients who are under the age of 18.
Because South African privacy law provides additional protection for children’s personal information, information relating to children will be handled with additional care and processed only where there is an appropriate legal basis to do so.
Where required, By Grace Massage will obtain the necessary consent from a parent, guardian or other competent person before processing a child’s personal information.
Parents or guardians may contact By Grace Massage if they have questions about personal information collected from a child.
16. How We Protect Your Information
By Grace Massage takes reasonable steps to protect personal information against loss, misuse, unauthorized access, disclosure, alteration or destruction.
Security measures may include appropriate administrative, technical and organizational safeguards.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
If By Grace Massage becomes aware of a security compromise involving personal information, we will take appropriate steps in accordance with applicable legal requirements.
17. How Long We Keep Your Information
By Grace Massage retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain appropriate business records, resolve disputes, comply with legal obligations, or otherwise as permitted by applicable law.
Our specific record-retention periods may vary depending on the type of information and the purpose for which it was collected.
Where a specific retention period is required by applicable law, By Grace Massage will retain the relevant information for the required period.
When personal information is no longer required, it will be securely deleted, destroyed or anonymized where appropriate.
18. Your Privacy Rights
Subject to applicable law, you may have rights relating to your personal information, including the right to:
-
Request access to personal information we hold about you
-
Request correction of inaccurate or incomplete personal information
-
Request deletion of personal information where applicable
-
Object to certain processing of your personal information
-
Object to direct marketing
-
Withdraw consent where processing is based on consent
-
Request information about how your personal information is being processed
-
Lodge a complaint where you believe your privacy rights have been infringed
Requests should be made using the contact details provided below.
19. Privacy Requests
If you would like to:
-
Access your information
-
Correct your information
-
Request deletion of information
-
Withdraw marketing consent
-
Ask a question about how your information is being processed
-
Raise a privacy concern
please contact By Grace Massage.
Email: katherine.bygrace@gmail.com
Telephone: 074 100 7519
Address: 394 Vine Avenue, Ferndale, Randburg, Johannesburg, Gauteng, South Africa
We will consider and respond to privacy requests in accordance with applicable law.
20. Complaints
If you have a concern about how By Grace Massage handles your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
You may also contact the Information Regulator of South Africa where applicable.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal requirements or privacy practices.
The updated version will be published on our website with an updated effective date.
Where changes are significant, we may take additional steps to notify affected individuals where required.
22. Contact Us
If you have any questions about this Privacy Policy or how By Grace Massage processes personal information, please contact:
By Grace Massage
394 Vine Avenue
Ferndale, Randburg
Johannesburg, Gauteng
South Africa
Email: katherine.bygrace@gmail.com
Telephone: 074 100 7519
Website: https://bygracemassage.com/
Last Updated: 01.09.26
