Privacy Policy

Global Privacy Policy - The Protection of Personal Information Act (POPIA), The Australian Privacy Principles (APPs) under the Privacy Act 1988 and International Compliance

​At Heartful Therapy, your privacy is deeply valued. We are committed to protecting your personal information and adhering to all applicable privacy laws, including:

• The Protection of Personal Information Act (POPIA) – South Africa

• The Australian Privacy Principles (APPs) under the Privacy Act 1988 – Australia

• General international privacy standards, including principles aligned with global best practices (e.g., transparency, rights of access, data minimisation, security)

By using our services or visiting www.heartfultherapies.com, you consent to the practices described below.
​
1. Information We Collect
To provide safe and effective therapeutic services, we collect information that may include:
Personal Information

• Full name

• Contact details (email, phone number)

• Occupation

• Communication via website, email, WhatsApp, or phone

Sensitive & Special Personal Information
Collected only when relevant to therapy:

• Mental health information

• Health history and medical needs

• Special needs

• Information contained in the intake form

Session & Booking Information

• Preferred dates and times

• Scheduling notes and information voluntarily shared

Website & Technical Information

• IP address

• Browser and device information

• Cookies and anonymous analytics data

We collect only what is necessary for ethical, legal, and effective service provision.
​
2. Purpose of Collection (POPIA Section 13 & APP 3)
Your information is collected and processed to:

• Deliver counselling and therapeutic services

• Plan, structure, and personalise therapy sessions

• Communicate regarding appointments, updates, or enquiries

• Manage administration and bookings

• Improve website functioning and user experience

• Comply with professional, ethical, and legal obligations

We ensure information is adequate, relevant, and not excessive for these purposes.
​
3. Legal Grounds for Processing Health Information
Because health and mental health data is considered special personal information, we process it under:

• POPIA Section 26(1)(a): Processing of health information by a healthcare provider or counsellor

• Australian Privacy Principles (APPs): Collection of health information by a health service provider

• International privacy principles: Processing based on explicit consent and therapeutic necessity

​
4. Consent (POPIA Section 11 & APP 5)
By providing your information through our website, email, WhatsApp, or phone, you consent to our use of it for the purposes outlined in this policy.
You may withdraw consent at any time (unless restricted by legal or therapeutic obligations).
To withdraw consent, email: hello@heartfultherapies.com
​
5. Confidentiality in Therapy
Everything discussed in therapy is confidential. Information will only be disclosed:

• With your explicit written consent,

• Where legally required (e.g., risk of harm, court order), or

• Where professional ethical guidelines mandate disclosure.

​
6. Sharing of Personal Information
We do not sell, rent, or trade your personal information.
Information may be shared only with trusted third-party service providers who assist with:

• Website hosting

• Email services

• Secure data storage

These parties are bound by strict confidentiality and privacy requirements under POPIA, the APPs, and international standards.
Information may also be disclosed where required by law or regulatory bodies.
​
7. Cross-Border Transfer of Personal Information (POPIA Section 72 & APP 8)
If you reside outside South Africa, including Australia or any other country, your personal information may be processed or stored in South Africa.
We take reasonable steps to ensure that international data transfers uphold privacy protections consistent with:

• POPIA (South Africa)

• The Australian Privacy Principles (Australia)

• International data protection best practices (e.g., transparency, security, limited use)

​
8. Data Storage, Security, and Retention (POPIA Section 19 & APP 11)
We use appropriate technical and organisational measures to protect your information from:

• Loss

• Unauthorised access

• Misuse

• Alteration or disclosure

Information is stored on:

• A password-protected and encrypted device

• Secure platforms hosted in South Africa whenever possible

Records are retained for the period required by health and professional regulations, then securely deleted or destroyed.
​
9. Your Privacy Rights (POPIA + APP 12 & 13)
As a data subject, you have the right to:

• Access the personal information we hold about you

• Request corrections of inaccurate or outdated information

• Object to certain types of processing

• Withdraw consent (where applicable)

• Request deletion, where legally permissible

• Ask how your data is stored, used, or shared

To exercise your rights, email: hello@heartfultherapies.com
​
10. Cookies and Website Analytics
Our website may use cookies to improve functionality and collect anonymous analytics.
You may choose to disable cookies in your browser settings.
​
11. Links to External Websites
We may include links to external websites for convenience.
We are not responsible for the privacy practices of these sites and encourage you to review their privacy policies.
​
12. Policy Updates
This Privacy Policy may be updated when necessary.
The most recent version will always be available on this page along with the updated date.
​
13. Contact Details for Privacy Enquiries
Heartful Therapy – Information Officer
Email: info@heartfultherapies.com or hello@heartfultherapies.com
Website: www.heartfultherapies.com