Privacy Policy

This policy explains what personal information we collect on gracestevens.co.za, why we collect it, who sees it and how you can control it. We follow South Africa’s Protection of Personal Information Act (POPIA).

The responsible party is Grace Stevens, Cape Town. You can reach us at grace@gracestevens.co.za.

What we collect

When you book an in-person class or order an online class

Your name, email address and phone number (the phone number is for class bookings).
The name of each person who will attend, and any answers you give to a class’s questions, such as allergies or experience.
Anything you write in the note to Grace.
What you ordered, what you paid and when. We keep a record of each payment, with the reference we gave your order, but we never see or store your card or bank login details.

When you fill in the survey after a class

Your ratings and comments about the class. They are kept with your booking, so Grace knows which class they are about.

When you log in to an online class

Your email address, to send you a one-time login code, and a cookie that keeps you logged in (see “Cookies” below).

When you email or message us

Whatever you send us, so that we can answer you.

When you browse the website

Anonymous visit counts: which pages are opened, from which country and with which kind of browser. We do not know who you are from these numbers.

Why we use it

To take your booking or order, hold your seats, and tell you if anything changes.
To confirm your payment and give you access to an online class you bought.
To send emails about your booking or order, such as the order details, a payment reminder and a login code.
To ask, the day after your class, how it went, so that we can improve our classes.
To answer your questions and keep our financial records, as the law requires.
To see which pages are useful, so that we can improve the website.

We do not sell your information, and we do not use it for advertising.

Who else handles it

We use a small number of services to run the website. They handle your information only to provide that service:

Cloudflare hosts the website and stores our bookings, orders and course accounts. It also runs the bot check on the order forms and a simple, cookie-free visit counter.
Resend delivers our emails, such as your order details and login codes.
SnapScan processes payments made with SnapScan. If you pay by EFT, the payment goes through your bank and ours.
PostHog (servers in the European Union) counts visits to the public pages. It does not use cookies, does not record your screen and does not collect your IP address.
Vimeo plays some of our class videos. When you play one, Vimeo may collect information under its own privacy policy. We are moving these videos onto our own hosting.

Some of these services keep information outside South Africa. We choose services that protect it to a standard comparable to POPIA. We may also share information when the law requires it.

Cookies

The website uses only the cookies it needs to work. We set a cookie to keep you logged in to your online classes and another while you request a login code. Neither is used for tracking. Our visit counters do not use cookies, so there is no cookie banner.

How long we keep it

Bookings, orders and payment records: for as long as we need them for our accounts and tax records, which is normally five years.
Online class accounts: for as long as you have access to a class.
Class feedback: for as long as it helps us improve our classes. Ask us and we will delete yours.
Login codes and login sessions: a day for codes, and up to 30 days for a login session.
Emails you send us: for as long as we need them to deal with your question.

Your rights

You can ask us at any time to:

tell you what information we hold about you;
correct it if it is wrong;
delete it, unless we must keep it by law (for example, payment records); or
stop using it for something you did not agree to.

Email grace@gracestevens.co.za. We may ask you to confirm who you are first, so that we do not give your information to someone else.

If you are not happy with how we handled your information, you can complain to the Information Regulator of South Africa.

Keeping it safe

Our website uses HTTPS. Access to bookings and orders is limited to Grace, and order pages can be opened only with the private link we send you. No system is perfectly secure, but we take care to protect your information, and we will tell you and the Information Regulator if a leak puts you at risk.

Children

Our online classes and bookings are for adults. If a child attends a class, please book for them as their parent or guardian.

Changes to this policy

We may update this page. The date it was last changed is at the bottom of the page we publish, and the new version applies from then.

Last updated 7 November 2026.