Privacy Policy

Last updated: November 2026 · Compliant with the Protection of Personal Information Act (POPIA)

1. Who's responsible

Powerhouse Pilates (Mikka van Niekerk, Cape Town) is the "responsible party" for your personal information under POPIA. Contact: powerhousepilatesct@gmail.com.

2. What we collect

  • Contact details: name, email, mobile number — when you book, contact us or fill in a form.
  • Health information: injury history, conditions, medications, pregnancy status, practitioner details — from your intake form. This is "special personal information" under POPIA and we treat it with extra care.
  • Emergency contact: name and number.
  • Booking and payment records: what you booked, when, what you paid. Card details are handled by our payment provider; we never see or store them.
  • Medical aid number: only if you give it to us to earn rewards points.
  • Website usage: anonymous analytics (pages visited, device type) via Google Analytics. No personal identification.

3. Why we collect it

  • To design safe, appropriate sessions for your body.
  • To book, confirm and remind you of sessions.
  • To process payments and manage packages/memberships.
  • To contact you or your emergency contact if needed during a session.
  • To report attendance to your medical aid rewards programme, if you've opted in.
  • To improve the website.

4. Your consent

By completing the intake form you consent to us collecting and using your health information for the purposes above. You can withdraw consent at any time by contacting us — though we may then be unable to safely deliver sessions.

5. Who we share it with

  • Booking platform (Bookamat): name, contact, bookings, payment status.
  • Payment provider (Yoco/PayFast): payment amount and reference only.
  • Medical aid rewards (Discovery, Momentum): membership number and session attendance — only if you've opted in.
  • Stand-in instructor: relevant health notes needed to deliver your session safely, only when a stand-in is covering.
  • Your healthcare practitioner: only with your explicit permission.

We don't sell your information. We don't share it for marketing.

6. How we protect it

  • Intake forms are stored in a password-protected system accessible only to Mikka.
  • Health notes are kept separate from marketing lists.
  • We use reputable, secure third-party services with their own POPIA compliance.

7. How long we keep it

Booking and payment records: 5 years (tax requirements). Health information: for as long as you're an active client, plus 2 years, then deleted. You can ask us to delete it sooner.

8. Your rights

Under POPIA you can: ask what information we hold about you; ask us to correct it; ask us to delete it; object to how we use it; and complain to the Information Regulator (inforegulator.org.za). Email us to exercise any of these.

9. Cookies

This site uses Google Analytics cookies to understand how visitors use it. No advertising cookies. You can block cookies in your browser without affecting the site.

10. Children

Clients under 18 need a parent or guardian to complete the intake form and consent on their behalf.

11. Changes

We may update this policy. The version on this page applies.