Preened connects you with independent beauty professionals and lets you book them directly. This notice explains what personal information we collect, why, who we share it with, where it's processed, and your rights. It is written plainly and is not legal advice.
Who is responsible for your information
The responsible party for the Preened booking service is Jake Burgess, trading as Preened (a sole proprietor based in Cape Town, South Africa), contactable at privacy@preened.co.za. When you book, your details are also shared with and used by the provider you book with — they run their own business and own their client relationship. In POPIA terms, the provider and Preened each act as responsible parties for the parts they control.
What we collect
The name, phone number and (optionally) email address you enter when booking; for a mobile appointment, the address you ask the provider to visit; the booking details themselves (service, date, time); and whether you chose to receive marketing. We do not ask for or store ID documents.
Why we use it (and our basis)
To create and manage your booking and let the provider contact you about it (this is necessary to provide the service you requested); to send you booking updates (requested, confirmed); and — only if you opt in — to send marketing. Marketing consent is always optional and you can withdraw it at any time.
Is providing your information required?
The name, phone and (for a home visit) address are necessary to fulfil the booking you requested — without them the provider can't confirm or reach you. Marketing is entirely voluntary.
Who we share it with
We share your information only with these categories of recipient: the provider you booked; our email delivery provider (Resend) to send booking emails on our behalf; and our hosting and database providers (Vercel and Supabase) who store the data securely for us under contract. We do not sell your personal information to anyone.
Where your information is processed (cross-border)
Our hosting, database and email providers process data on servers outside South Africa (our database is hosted in the European Union; our other providers may process data elsewhere). We rely on the fact that this processing is necessary to provide the booking you requested and that these providers are bound by data-protection agreements offering comparable protection, as POPIA permits.
How long we keep it
For as long as needed to provide the service and keep reasonable business records, or until you ask us to delete it (subject to any records we must keep by law).
Your rights
You may ask to access, correct, or delete your personal information, and to withdraw marketing consent. Contact the provider you booked with, or email us at privacy@preened.co.za. You also have the right to complain to South Africa's Information Regulator (inforegulator.org.za) if you believe your information has been mishandled.
Keeping it safe
Access to client data is restricted to the provider who owns it, enforced at the database level. We take reasonable steps to protect your information, though no system is perfectly secure.
Questions? Email privacy@preened.co.za. This notice may be updated as Preened grows.