Privacy Policy

Last updated: 10 July 2026

Who we are

Clinzo is a booking platform for aesthetics businesses, operated by Vanta Flows, South Africa. You can reach us at hello@clinzo.co.za. This policy explains how we handle personal information under the Protection of Personal Information Act (POPIA).

Two kinds of personal information

Business account information. When a business signs up, we collect the owner's name, email, business name and billing details to provide the service. For this information, Clinzo is the responsible party.

Client booking information. When a client books with a business through Clinzo, the business is the responsible party. Clinzo processes that information as an operator on the business's behalf, only to deliver bookings, confirmations, reminders and follow-ups.

What we collect

For business accounts: name, email, business details and subscription status. For clients: name, contact details, appointment details and any notes the client chooses to add when booking. We do not collect special personal information.

How we use it

We use personal information to run bookings and send booking-related emails, to bill business subscriptions, to provide support, and to keep the service secure. We do not sell personal information, and we do not use client information for marketing.

Who we share it with

We share information only with trusted service providers who process it on our instructions:

• Supabase, for database hosting
• Resend, for email delivery
• PayFast, for subscription payments (business billing only)
• Netlify, for website hosting

Each is bound to protect the information they process.

How long we keep it

We keep business account data for the life of the account and a reasonable period after cancellation for legal and accounting purposes. Client booking data is kept for as long as the business's account requires it, and businesses can request removal of client records.

Your rights under POPIA

You may request access to, correction of, or deletion of your personal information, and object to processing, by emailing hello@clinzo.co.za. Clients can also contact the business directly. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa) at inforeg.org.za.

Security

We protect personal information with encrypted connections, access controls that restrict each business's data to that business, and reputable hosting providers. No system is perfectly secure, but we take reasonable, appropriate measures as POPIA requires.

Direct marketing

We only send marketing to people who have consented or who we may lawfully contact under section 69 of POPIA, and every such message includes a way to opt out. Booking confirmations and reminders are service messages, not marketing.

Changes and contact

We may update this policy from time to time; the latest version always lives at this page. Using Clinzo is also subject to our Terms of Service. Questions: hello@clinzo.co.za.