YOUR PRIVACY

Privacy Notice

How the Body Stress Release Association of South Africa collects, uses, protects and shares personal information.

Last updated: 2026-08-25

1. Who is responsible for your personal information?

The Body Stress Release Association of South Africa ("BSRASA", "the Association", "we", "us" or "our") respects your privacy and is committed to processing personal information lawfully, transparently and securely in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"), the Promotion of Access to Information Act 2 of 2000 ("PAIA"), and other applicable law.

This Privacy Notice explains what personal information we collect, why we use it, when we may share it, and the rights you have in relation to it.

Body Stress Release Association of South Africa
4 Forest Road, George, 6530
Telephone: 083 660 0780
Email: info@bodystressrelease.co.za

Contact the Information Officer

Ingeborg Muhsfeldt
Telephone: 083 660 0780
Email: chairperson.sa@bodystressrelease.com

2. Whose information do we process?

We may process personal information relating to clients, voluntary members, registered practitioners, student practitioners, prospective clients and practitioners, website visitors, suppliers, service providers, educational instructors, committee members, donors, sponsors and other persons who interact with the Association.

3. What personal information do we collect?

Depending on your relationship with us and the service or activity involved, we may collect and process:

Identity information, such as your name, identity number, passport number, company registration number, photograph and practitioner registration code.
Contact information, such as your telephone number, email address, postal address and physical address.
Financial and administrative information, such as banking details, membership fee statements, invoices and tax information.
Professional and educational information, such as qualifications, practitioner registration information, training records, examination results and continuing professional development records.
Information relevant to membership, practitioner registration, student administration, disciplinary processes or community projects.
Website and technical information, such as electronic communications, IP-related information and cookies.
Where lawful and necessary, special personal information, including health, wellness, biometric or criminal-record information.

4. Why do we process personal information?

We process personal information only for lawful, specific and relevant purposes. These may include:

Managing professional memberships and practitioner registrations.
Administering student enrolment, education, examinations and training programmes.
Verifying practitioner credentials and maintaining professional accountability.
Operating the public practitioner directory, where appropriate.
Managing referrals, educational workshops, public-awareness programmes and community projects.
Communicating with members, students, practitioners, suppliers, service providers and other stakeholders.
Managing accounts, billing, payments, accounting, auditing and tax obligations.
Operating, securing and improving our website, systems and information technology.
Meeting legal, regulatory, governance, risk-management and record-keeping obligations.
Establishing, exercising or defending legal rights.

We will not use personal information for a purpose incompatible with the purpose for which it was collected unless permitted or required by law.

5. Our lawful basis for processing

We process personal information where this is permitted by POPIA, including where processing is necessary:

To perform or enter into an agreement with you.
To comply with a legal obligation.
To protect a legitimate interest of you, the Association or a third party.
To perform our legitimate professional, administrative and operational functions.
Where you have given explicit and informed consent, when consent is required.

6. Sharing personal information

We may share personal information where necessary, relevant, lawful and appropriately safeguarded. Recipients may include:

The public, through the official practitioner directory, where applicable.
Educational institutions, independent examiners and training providers.
Auditors, accountants, insurers, legal advisers and other professional advisers.
Information technology providers, website hosts, cloud-storage providers and communication-service providers.
Payment, banking, courier and logistics providers.
Regulatory authorities, professional bodies, law-enforcement bodies or other parties where disclosure is required or permitted by law.

Where a service provider processes information for us, we require it to process that information only on our instructions and to maintain appropriate confidentiality and security safeguards.

7. International transfers

Some service providers or systems used by the Association may be located outside South Africa. Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with POPIA and that suitable safeguards are in place.

8. How we protect personal information

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, alteration or destruction.

These measures may include access controls, secure passwords, multi-factor authentication, firewalls, secure backups, restricted access to records, confidentiality obligations and periodic security reviews. No system can be completely secure, but we continuously work to protect the information in our care.

9. How long we keep personal information

We retain personal information only for as long as necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.

Retention periods may be determined by financial, tax, professional, legal, operational and record-keeping requirements. When personal information is no longer required, we will securely delete, destroy, anonymise or de-identify it, as appropriate.

10. Your rights

Subject to POPIA and other applicable law, you may have the right to:

Ask whether we hold personal information about you and request access to it.
Request correction, updating or amendment of inaccurate, incomplete, irrelevant, excessive, misleading or outdated personal information.
Request deletion or destruction of personal information where legally appropriate.
Object to certain processing of your personal information.
Object to the use of your personal information for direct marketing.
Lodge a complaint with the Information Regulator.

Some requests may be limited where we are required to retain records, where confidentiality or third-party rights apply, or where another lawful basis permits or requires continued processing.

To exercise your rights, contact the Information Officer using the details above.

11. Marketing communications

Where we send marketing or promotional communications, these will be subject to applicable consent requirements. You may opt out of marketing communications at any time by using the unsubscribe option in the communication or by contacting the Information Officer.

12. Cookies

Our website may use cookies and similar technologies to support its operation, improve user experience and understand how visitors use the site.

You can control cookies through your browser settings. Restricting cookies may affect certain website functions.

13. Complaints

If you believe that your personal information has been processed unlawfully, you may first contact our Information Officer so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Regulator (South Africa):

Information Regulator (South Africa)
Website: https://inforegulator.org.za
Email: enquiries@inforegulator.org.za

14. Changes to this notice

We may update this Privacy Notice when our processing activities, website, operational requirements or applicable laws change. The most recent version published on this website is the version that applies.