Your data
Rights you can actually use.
POPIA gives you rights over your personal information. In Strand they are buttons in the app, not letters to a legal department. This page walks through each one.
1.Your rights, and where to press
| Right | What it means | How to use it |
|---|---|---|
| Access and portability | See everything Strand holds about you, in a format you can take elsewhere | Your studio → Privacy → Export my records; the export link is private to you and expires |
| Correction | Fix anything that is wrong or out of date | Edit directly in the app - profile, clients, formulas, notes |
| Deletion | Erase everything, or only marketing data, permanently | Your studio → Privacy → Delete my data, or see the deletion page |
| Objection | Stop processing based on legitimate interest | Your studio → Privacy → Restrict processing, or email privacy@strand.style |
| Marketing opt-out | Stop marketing on any channel without losing your account | Withdraw the channel consent in the app, or use the opt-out in any message |
| Complaint | Escalate to us, and beyond us to the Regulator | privacy@strand.style first; the Regulator's details are in section 4 |
Deletion in Strand is not a soft delete. The request fans out to every service that holds your data, each confirms, and only then is the deletion reported complete - so “deleted” means every copy, including the analytics plane. Delete your data has the step-by-step.
2.Whose data subject are you?
If you are a stylist, Strand is your responsible party for your account and your operator for your client book - the privacy policy explains the split, and every right above is yours in the app.
If you are a stylist’s client, your stylist is the responsible party for your record and can show, correct or delete it on request - the app gives them one-tap tools for exactly that. If your stylist cannot help, email privacy@strand.style and we will assist directly. Your photos are stored only with your consent, and withdrawing it removes them.
3.The operator register
These are the providers that process personal information on Strand’s behalf, each under a written contract limited to its purpose. This register is the one the privacy policy and terms refer to.
| Provider | What for | Where |
|---|---|---|
| Clerk | Sign-in and account security | United States |
| Didit | Identity verification; holds verification artefacts | EU |
| Meta Platforms | WhatsApp Business Platform and Instagram messaging, when you connect them | United States / Ireland |
| Twilio | Messaging infrastructure, where used as our WhatsApp provider | United States |
| ElevenLabs | Voice transcription and the voice assistant | United States |
| Anthropic | AI answers and drafting (Claude models) | United States |
| Google Cloud | Hosting and infrastructure, South African region preferred for identity data | South Africa / global |
| Resend | Waitlist and transactional email | United States |
4.The information officer, and the Regulator
Strand Hair and Beauty (Pty) Ltd’s information officer is the chief executive officer, reachable at data@strand.style; rights requests go to privacy@strand.style. We respond within 30 days, and to most far faster.
If we let you down, complain to the Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Telephone: 010 023 5200 (toll free 0800 017 160). Complaints: POPIAComplaints@inforegulator.org.za. General enquiries: enquiries@inforegulator.org.za. Website: https://inforegulator.org.za.