your information, handled with care

1. What We Collect

We may collect the following personal information:

• Your full name, contact details, and ID (for booking confirmation)
• Images and video captured during your session
• Session-related preferences and styling info
• Payment and invoice details
• Consent forms for the use of images (especially for minors)
• Parent or guardian details (if minors are photographed)

2. Why We Collect It

We use your information to:

• Confirm and manage your booking
• Deliver services and retouched images
• Communicate with you regarding your session
• Issue invoices and receipts
• Maintain internal records and backups
• Share selected images publicly only with consent

3. Legal Grounds for Processing

Processing is based on:

• Your consent (e.g. image use, marketing opt-in)
• Fulfilling a contract (your booking)
• Legal obligations (e.g. invoicing or tax compliance)
• Legitimate interests (e.g. fraud prevention or brand protection)

POPIA Section 11(1)(a): Personal information may be processed with the data subject’s consent or where legally required.

4. Data Storage and Security

Your data is stored securely, including in our online booking system. Some data may be hosted outside South Africa via trusted service providers with adequate security protocols.

POPIA Section 72: Cross-border transfers are permitted where there’s adequate protection or contractual safeguards in place.

Only necessary personnel and service providers have access to your data.

5. Children’s Information

If minors are photographed:

• We require written parental/guardian consent
• Children’s images are not used for marketing unless expressly permitted
• All data is handled sensitively and securely

6. Marketing Communication Policy

If you opt in, we may contact you via email or phone to share:

• Studio updates and reminders
• Seasonal promotions or exclusive offers
• Tips or service-related info

POPIA Section 69: You have the right to object to direct marketing. We will only send you marketing messages with your prior consent, and you can opt out at any time via an unsubscribe link or email.

We will never spam you or share your info for third-party advertising.

7. Your Rights Under POPIA

You have the right to:

• Request access to your personal data
• Correct inaccurate or outdated information
• Withdraw previously given consent
• Request deletion of your information (subject to legal recordkeeping)
• Object to processing for specific purposes

Contact: privacy@jepsonmyles.co.za

8. Retention Period

We retain personal data only for as long as needed to provide services and meet legal/accounting requirements. Where consent has been given, images may be archived for portfolio use unless withdrawn.

9. Changes to This Policy

This policy may be updated from time to time. Major changes will be posted on our website or shared directly with clients when necessary.