Privacy Policy
Last updated: 1 October 2026
Who we are
Clinzo is a booking platform for beauty, grooming and wellness businesses, operated by Vanta Flows, South Africa. You can reach us at hello@clinzo.co.za. This policy explains how we handle personal information under the Protection of Personal Information Act (POPIA).
Two kinds of personal information
Business account information. When a business signs up, we collect the owner's name, email, business name and billing details to provide the service. For this information, Clinzo is the responsible party.
Client booking information. When a client books with a business through Clinzo, the business is the responsible party. Clinzo processes that information as an operator on the business's behalf, only to deliver bookings, confirmations, reminders and follow-ups.
What we collect
For business accounts: name, email, business details and subscription status. For clients: name, contact details, appointment details and any notes the client chooses to add when booking. We do not collect special personal information. Businesses can also keep notes about their clients and import client lists they are responsible for.
How we use it
We use personal information to run bookings and send booking-related emails, to bill business subscriptions, to provide support, and to keep the service secure. We do not sell personal information, and we do not use client information for marketing.
Who we share it with
We share information only with trusted service providers who process it on our instructions:
- Supabase, for database hosting
- Resend, for email delivery
- PayFast, for subscription payments (business billing only)
- Netlify, for website hosting
Each is bound to protect the information they process.
How long we keep it
We keep business account data for the life of the account and a reasonable period after cancellation for legal and accounting purposes. Client booking data is kept for as long as the business's account requires it, and businesses can request removal of client records.
Your rights under POPIA
You may request access to, correction of, or deletion of your personal information, and object to processing, by emailing hello@clinzo.co.za. Clients can also contact the business directly. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa) at inforeg.org.za.
Security
We protect personal information with encrypted connections, access controls that restrict each business's data to that business, and reputable hosting providers. No system is perfectly secure, but we take reasonable, appropriate measures as POPIA requires.
Direct marketing
Clinzo does not send marketing to the clients of the businesses that use it. The only emails we send on a business's behalf are about a booking you made: a confirmation, a reminder before your appointment, and, after a completed visit, one thank-you and one request to tell the business how it went, which may link to the business's Google reviews page. A business sends you at most one review request every 90 days, every one has an unsubscribe link, and unsubscribing stops them from that business for good. None of these emails is ever sent to anyone who has not booked. Replies go to the business.
Cookies
Business accounts use cookies to stay signed in. If you reach Clinzo through a link on a business's booking page, a cookie remembers which business sent you for 30 days, so that business can see that someone joined through them. We use no advertising cookies.
Changes and contact
We may update this policy from time to time; the latest version always lives at this page. Using Clinzo is also subject to our Terms of Service. Questions: hello@clinzo.co.za.