Skip to main content
Back to booking|

Privacy Policy

Privacy Policy

POPIA-oriented privacy information for booking, checkout, inquiry, photo-upload, email, and operational processing.

Responsible party and Information Officer contact

Kimberly Gareeb Booking is the responsible party for personal information collected through this booking platform. Contact bookings@kimgareeb.co.za or WhatsApp +27 840 654 302 for privacy questions.

The Information Officer details must be confirmed by Kimberly/legal before this policy is treated as final approved wording.

Personal information categories

The platform may process name, phone number, email address, selected services, appointment dates and times, booking notes, payment status, inquiry details, venue information, uploaded hairstyle references, current hair photos, and technical security data such as IP-derived request metadata.

Some fields are mandatory to submit a booking or inquiry. If mandatory details are not provided, the business may be unable to confirm, contact, quote, or deliver the requested service.

Purposes of processing

Personal information is processed to create and manage bookings, take or record payments, send confirmations and reminders, respond to inquiries, prepare quotes, handle cancellations or refunds, prevent abuse, maintain records, and comply with applicable law.

Photos submitted with hairstyling inquiries are used to assess the requested hairstyle, current hair state, likely preparation, products, timing, and quote requirements.

Recipients and operators

Information may be shared with staff, the relevant business, payment providers, email or messaging providers, hosting and database providers, storage providers, security tools, and professional advisers where needed for the stated purposes.

Operators should process personal information only under the platform instructions and with appropriate confidentiality and security measures.

Retention and security

Records are retained for operational, accounting, support, legal, and audit needs, then deleted or de-identified when no longer required. Exact retention periods should be approved by Kimberly/legal.

The platform uses access controls, private upload flows for inquiry photos, server-side validation, rate limiting, and database row-level security where applicable. No internet system can be guaranteed completely secure.

Data subject rights and complaints

You may ask to access, correct, delete, or object to processing of your personal information where POPIA allows. Requests can be sent to bookings@kimgareeb.co.za.

You may also complain to the Information Regulator South Africa if you believe your POPIA rights have been infringed.

Direct marketing

Direct marketing by email, SMS, WhatsApp, or similar electronic communication should be sent only where legally permitted, including where consent or an existing-customer relationship allows it, and with an opt-out route where required.

Operational booking, confirmation, reminder, payment, inquiry, and support messages are treated separately from direct marketing.

Cross-border transfers, cookies, and scripts

Some providers may process or store information outside South Africa. Where cross-border transfer occurs, the platform should rely on an appropriate POPIA basis such as adequate protection, contractual safeguards, consent, or another lawful ground.

The current platform uses functional browser storage and third-party services needed for booking, security, payments, maps, reviews, hosting, analytics or operational delivery as configured. Any cookie-banner decision should follow an inventory of actual scripts and cookies in production.

Hairstyling inquiries and photo uploads

Hairstyling inquiry photos are requested so Kim can assess the style reference, current hair condition, likely timing, and quote. Submit only images you are comfortable sharing for this purpose.

Do not upload photos containing other people unless you have their permission or another lawful basis to share them.

Last updated: 28 May 2026

Version 1. This page is editable by administrators and should be reviewed by Kimberly/legal before being treated as legal advice or confirmed compliance wording.