Who we are

Dare to Flourish (“we”, “us”) is the responsible party for personal information we process in connection with our Offerings.

Our contact details bronwyn@daretoflourish.co.za appear in the Schedule to our Terms and Conditions and/or on our website.

What personal information we collect

Information you provide to us. Depending on your engagement with us, we may collect:

1.1. identity and contact details (name, email, phone);

1.2. billing and transaction details (product/service purchased, payment status, invoices);

1.3. scheduling details (availability, session attendance);

1.4. content you share in coaching/healing contexts (notes you provide, reflections, and session-related information);

1.5. communications (emails, messages, support requests);

1.6. delivery information for physical products (address).

Some Offerings may involve information that could be considered “special personal information” (for example health-related information). We only process such information when necessary for your requested Offering and with appropriate safeguards.

Website and technical information. If you visit our site, we may collect limited technical data (such as device/browser information and basic analytics) through cookies or similar tools, depending on your cookie settings.

Why we collect and use your information

We process personal information to:

2.1. provide and administer Offerings (deliver sessions/courses, provide materials, manage events);

2.2. process orders and payments; note that payment processing may be handled by third-party payment platforms;

2.3. communicate with you about scheduling, changes, and support;

2.4. maintain business records (accounting, tax, audit);

2.5. protect our business and clients (fraud prevention, security);

2.6. send marketing communications only where lawful and appropriate and with opt-out options (see “Marketing” below).

Sharing your information

We do not sell personal information.

We may share personal information with service providers who support our operations (for example: booking tools, email providers, cloud storage, video meeting tools, and payment platforms). We only share what is necessary for the relevant purpose and expect appropriate security. POPIA requires written contracts and appropriate safeguards with operators.

If you pay via a third-party payment platform (including Walletdoc where applicable), that platform processes payment information under its own controls and terms.

We may disclose information where required by law, lawful authority, or to protect rights and safety.

Cross-border transfers

Where we use service providers or cloud systems located outside South Africa, we will only transfer personal information outside South Africa where an appropriate transfer basis exists (for example, adequate protection, consent, or necessity for contract performance), consistent with POPIA cross-border rules.

Security safeguards

We take reasonable technical and organizational measures to protect personal information against loss, damage, unauthorised access, or unlawful processing. POPIA requires these safeguards and risk-based security management.

We limit access to personal information to those who need it for legitimate business purposes.

Security compromises

If there are reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, POPIA requires notification to the Information Regulator and (subject to certain limits) the affected data subject, and requires that the notice contain sufficient protective information.

Retention

We retain personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted for legal, tax, accounting, or legitimate business reasons.

Your rights and requests

You may request:

3.1. confirmation whether we hold personal information about you and access to it;

3.2. correction, deletion, or updating where appropriate;

3.3. to object to certain processing; and

3.4. to lodge a complaint with the Information Regulator. POPIA’s notice requirements explicitly include disclosure of these rights and the right to complain.

To exercise your rights, contact our Information/Privacy contact (listed in your Schedule or on our website).

Marketing

We will not send direct marketing via electronic communications unless permitted and we will include a way to opt out. POPIA’s section 69 sets strict rules for direct marketing by electronic communications, including consent/opt-out requirements.

Children

Our Offerings are generally intended for adults. Where information about a child is provided, we require the consent of a competent person/guardian.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be made available on our website.