Privacy Notice

Last updated: 12 October 2026

Your health information is personal, and I treat it that way. This notice explains what I collect, why, where it goes and what your rights are under the Protection of Personal Information Act (POPIA).

Who is responsible

Ensō Therapeutic Wellness is a solo practice run by Odette Cilliers, Therapeutic Reflexologist (AHPCSA A12486). I am responsible for your information and I am the Information Officer for the practice.

What I collect and why

• New-client intake form: your name, contact details, date of birth, emergency contact, health history, medication, lifestyle and what you would like help with. I use this only to make sure your treatment is safe and suited to you. Health information is "special personal information" under POPIA, so I only process it with your explicit consent, which you give on the intake form.
• Contact form, email and WhatsApp: your name, contact details and message, so that I can reply to you.
• Email sign-ups (the seasonal Journal Notes email and free downloads): your email address, so that I can send you what you asked for.
• Session notes: brief notes from each treatment, so that your care can build from one session to the next.

I do not use your information for anything else, and I never sell it.

Where it goes and who sees it

Only I see your health information. Forms submitted on this website are emailed to my practice inbox and kept in a protected file on the website server, which is hosted in South Africa. Session notes are written by hand during your session, then scanned and kept as a password-protected electronic record in your personal client file.

I share your information with no one without your written consent, unless the law requires it. A few trusted services help me run the practice, and each handles only what it needs:

• Fresha, for online bookings (your name, contact details and appointments).
• MailerLite, for the seasonal email and free downloads (your email address only). MailerLite is based in the European Union, where data protection law is comparable to POPIA.
• WhatsApp, if you choose to message me there.

Health information from the intake form is never sent to MailerLite or Fresha.

How long I keep it

• Client records (intake form and session notes): for at least five years after your last session, as AHPCSA requires, then securely destroyed.
• Enquiries from people who do not become clients: kept for 12 months, after which I delete your contact details and any other personal information that does not relate to a treatment.
• Email sign-ups: until you unsubscribe. Every email has a one-click unsubscribe link.

How I protect it

This website uses a secure (HTTPS) connection, so forms are encrypted on their way to me. Submitted forms are stored in a server folder that cannot be opened from the internet, and my email and devices are password protected.

Cookies

This website does not use advertising or tracking cookies. Fresha may set its own cookies when you book online.

Your rights

You may ask me at any time to:

• see the information I hold about you;
• correct anything that is wrong or out of date;
• delete your information, where I am not required to keep it;
• stop sending you emails, or withdraw a consent you have given.

Simply email or WhatsApp me. I will respond within 30 days, and there is no charge.

If you are unhappy

Please speak to me first, and I will do my best to put it right. You also have the right to complain to the Information Regulator:

Changes to this notice

If I change how I handle your information, I will update this page and the date at the top.