Your Privacy
Privacy Policy
How The Aesthetics Institute collects, uses and protects your personal information when you visit this website or send us an enquiry.
Last updated 17 September 2026
On This Page
Who We Are
The Aesthetics Institute (“we”, “us”, “our”) is an aesthetic and wellness practice at Ground Floor, 1 Waterhouse Place, Century Boulevard, Century City, Cape Town, 7441.
This policy explains how we handle personal information collected through this website, consultation.aestheticsinstitute.co.za, including our consultation and Infuse IV therapy pages. We are the responsible party for that information, and we process it in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
Information you share with us as a patient during treatment, such as your medical records, is also bound by the confidentiality rules that apply to registered healthcare practitioners.
Information We Collect
Information you give us. When you request an appointment or book an infusion, we ask for:
- your name
- your email address
- your mobile number
- the treatment or infusion you’re interested in
- your preferred day and time, if you give one
- anything you choose to write in the message box
Information sent with your form. When you submit a form, the page you sent it from, the date and time, your IP address and your browser and device type are sent along with it.
Information about your visit. As you use the website, we collect information about how you use it: the pages you view, where you click, tap and scroll, your device and browser, your approximate location based on your IP address, and whether you arrived through one of our adverts. See Cookies, Analytics And Advertising.
When you call or message us. If you phone us or contact us on WhatsApp, we receive your phone number and anything you tell us.
A Note About Health Information
The treatment you’re interested in, and anything you write in your message, may say something about your health. POPIA treats health information as special personal information, and we use it only to respond to your enquiry and prepare for your consultation. Please don’t include detailed medical history in the form. We’ll discuss it with you in private.
How We Use Your Information
We use your personal information to:
- respond to your enquiry, and book, confirm or change your appointment
- match you with the right specialist for your needs
- contact you about your enquiry by phone, WhatsApp, SMS or email
- understand how visitors use these pages, so we can make them clearer and easier to use
- measure how well our Google Ads perform
- keep the website secure and working properly
We process your information because you’ve asked us to contact you about a service, because you’ve given your consent, or because we have a legitimate interest in running, improving and advertising our practice.
Giving us your information is voluntary. Without your name and a way to reach you, though, we can’t respond to your enquiry.
Marketing Messages
We only send you promotional messages if you’ve agreed to receive them, or if you’re already a patient, the messages are about similar services and you haven’t asked us to stop. Every message gives you a simple way to opt out, and you can ask us to stop at any time by contacting us.
Who We Share It With
We don’t sell your personal information. We share it only with service providers who help us run this website and our practice, and who may use it only on our instructions:
- Our practice team, who receive your enquiry by email.
- HighLevel, the customer relationship management system where we manage enquiries and appointments (privacy policy).
- Google, for Google Ads conversion measurement (privacy policy).
- Microsoft, for Microsoft Clarity analytics (privacy statement).
- WhatsApp (Meta), if you choose to message us there (privacy policy).
- Our website hosting provider, which runs the servers this website is on.
Form submissions aren’t stored in this website’s own database. We may also disclose information where the law requires it, or where it’s needed to protect the rights and safety of our patients, staff or practice.
Cookies, Analytics And Advertising
Cookies are small files stored on your device. This website uses them, and similar technologies, for the following:
Google Ads. The Google tag measures the results of our adverts, for example whether a visitor who clicked an ad went on to send an enquiry, tap our phone number or open WhatsApp. You can manage how Google personalises ads in Google’s My Ad Center.
Microsoft Clarity. Clarity shows us how visitors use these pages through heatmaps and session recordings: where people click, tap and scroll. We use it to find and fix parts of a page that are confusing or hard to use. Clarity never records what you type into our forms, because form fields are always hidden from it. Microsoft keeps most session recordings for 30 days and heatmap data for up to 9 months.
Managing cookies. You can block or delete cookies in your browser settings. The website will still work, but we won’t be able to measure visits as accurately.
Sending Information Outside South Africa
Some of our service providers, including HighLevel, Google, Microsoft and Meta, store or process information on servers outside South Africa, such as in the United States. POPIA allows this where the recipient is bound by laws, binding corporate rules or an agreement that protect your information to a standard similar to POPIA. We use established providers that commit to protecting personal information in this way.
How Long We Keep It
We keep your information only for as long as we need it for the purposes in this policy, or for longer if the law requires it.
- If you don’t go on to become a patient, we delete or de-identify your enquiry once we no longer need it.
- If you become a patient, your records are kept for the periods required for healthcare records in South Africa.
- Analytics data is kept for the periods set by Google and Microsoft.
How We Protect It
This website uses an encrypted (HTTPS) connection. Access to enquiries is limited to the people who need it to help you, and our service providers must keep information secure. No way of sending information over the internet is completely secure, but we take reasonable technical and organisational steps to prevent loss, misuse and unauthorised access.
If we believe your personal information has been accessed without authorisation, we’ll let you and the Information Regulator know, as POPIA requires.
Your Rights
Under POPIA, you have the right to:
- ask whether we hold personal information about you, and request a copy
- ask us to correct information that is wrong, out of date or incomplete
- ask us to delete your information, where we’re not required to keep it
- object to how we process your information, including for marketing
- withdraw your consent at any time (this doesn’t affect anything we did before you withdrew it)
- complain to the Information Regulator
To make a request, email info@aestheticsinstitute.co.za. We may ask you to confirm your identity first, and we’ll respond within a reasonable time.
The Information Regulator
If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You can also contact the Information Regulator.
010 023 5200
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Children
Our treatments and this website are intended for adults. We don’t knowingly collect personal information from anyone under 18. If you believe a child has sent us their details, please contact us and we’ll delete them.
Other Websites
Our pages link to other websites, such as Google and Fresha for reviews and bookings, and WhatsApp. Those websites have their own privacy policies, and we’re not responsible for how they handle your information.
Changes To This Policy
We may update this policy from time to time. The date at the top of this page shows when it last changed.
Contact Us
If you have a question about this policy, or want to make a request about your personal information, contact our Information Officer.
