Legal
POPI Act Compliance
Last Updated: 17 October 2026
Introduction
Wings & Me (“we”, “us”, or “our”) is committed to protecting your personal information and respecting your privacy rights. This notice sets out our compliance with the Protection of Personal Information Act 4 of 2013 (POPIA), which governs how we collect, process, store, share and dispose of personal information.
As a Certified Pranic Energy Healing Centre based in South Africa, we recognise the trust you place in us when you share personal information — particularly where it touches on your health. This notice explains your rights under POPIA and how we meet our obligations as a responsible party.
It also serves as the notification contemplated in section 18 of POPIA.
Responsible Party
Wings & Me is a division of Made in Africa Investments (Pty) Ltd, a company incorporated in the Republic of South Africa. Made in Africa Investments is the responsible party for the personal information described in this notice — the party that determines why and how it is processed.
- Made in Africa Investments (Pty) Ltd
- Registration number: 2016/387423/07
- Registered office: Unit S3 Executive City, cnr Cross Street & Charmaine Avenue, President Ridge, Randburg, 2194, South Africa
The same responsible party stands behind the group’s other divisions, and the group-wide POPIA notice is published at miagroup.africa/popia.
Information Officer
In accordance with section 55 of POPIA, Made in Africa Investments has an Information Officer, registered with the Information Regulator, who is responsible for POPIA and PAIA compliance across all of the group’s divisions, including Wings & Me:
- Name: Valentina Cortini
- Role: Director, Made in Africa Investments (Pty) Ltd
- Email: info@miagroup.africa
You are welcome to write to us at info@peh.africa for anything to do with the centre; requests that concern your rights under POPIA reach the Information Officer either way. We may ask you to verify your identity before we act on a request, so that we do not disclose someone else’s information to the wrong person.
Our Commitment to POPIA Compliance
We adhere to the eight conditions for lawful processing of personal information set out in section 4 of POPIA:
- Accountability (s 8): We take responsibility for complying with POPIA.
- Processing Limitation (ss 9–12): We collect personal information lawfully, only what is adequate and not excessive, and directly from you wherever practicable.
- Purpose Specification (ss 13–14): We collect for explicit, defined and legitimate purposes, and keep records no longer than those purposes require.
- Further Processing Limitation (s 15): We do not use your information for a purpose incompatible with the one it was collected for.
- Information Quality (s 16): We take reasonable steps to keep information complete, accurate and current.
- Openness (ss 17–18): We document our processing, maintain a PAIA manual, and publish this notice.
- Security Safeguards (ss 19–22): We protect our records, bind our service providers in writing, and report security compromises.
- Data Subject Participation (ss 23–25): You may ask what we hold and have it corrected or deleted.
Why We Collect Personal Information
- Responding to enquiries: To answer your questions about our healing services and programmes
- Session booking: To coordinate and confirm appointments for energy healing and somatic neuroplasticity sessions
- Room rental coordination: To process room rental enquiries and manage practitioner bookings
- Communication: To keep you informed about our services, events and updates, where you have asked us to
- Legal compliance: To meet our regulatory, tax and accounting obligations under South African law
What We Collect, and On What Lawful Basis
Section 11 of POPIA permits processing only where it is justified. Supplying your information is voluntary — but without the essentials we cannot book a session or answer you.
| Category | Examples | Lawful basis (s 11) |
|---|---|---|
| Identity information | Name, surname | Consent, and performance of a booking (s 11(1)(a) and (b)) |
| Contact information | Email address, phone number, physical address | Consent, and our legitimate interest in responding (s 11(1)(a) and (f)) |
| Booking information | Session preferences, availability, special requirements | Performance of, or steps towards, a booking (s 11(1)(b)) |
| Professional information | Occupation, qualifications, for room rental enquiries | Steps towards a rental agreement (s 11(1)(b)) |
| Technical information | IP address and browser type from server logs; aggregated, cookieless page-view statistics from our own self-hosted analytics platform, which never stores your IP address | Our legitimate interest in operating and securing the site (s 11(1)(f)) |
Health and Other Special Personal Information
Section 26 of POPIA treats information about your health or sex life, as well as religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, biometric information and criminal behaviour, as special personal information. Processing it is prohibited unless one of the grounds in section 27 applies.
Given the nature of our work, you may choose to tell us about a health condition, an injury, a course of treatment or your reasons for seeking a session. Where you do:
- We process it only with your consent, as section 27(1)(a) permits, and only to deliver the session you have asked for.
- We share it with a practitioner only where that is necessary for your session.
- We do not use it for marketing, we do not disclose it to anyone outside the centre, and we do not transfer it abroad.
- You may withdraw your consent at any time, which does not affect what was already done on the strength of it.
Please share only what is relevant to the session. We do not ask for identity numbers, banking details or payment card data through this website.
Children
Our services are directed at adults. We do not knowingly process the personal information of a child as contemplated in section 34 of POPIA without the consent of a competent person. Where a session is arranged for a minor, we require that consent from the parent or guardian.
How We Process Your Information
- Internally: By authorised staff and practitioners who need access to fulfil their duties
- Service providers (operators): Carefully selected third parties who assist with email, form processing and website hosting
- Legal requirements: Where required by law, court order or a regulatory authority
- Protection of rights: To protect our legitimate interests or those of third parties
Sections 20 and 21 of POPIA require every operator to be bound by a written agreement to maintain confidentiality and appropriate security, and to notify us of any compromise. Some operate outside South Africa, so your information may be transferred across borders; section 72 permits this only where the recipient is subject to a law, binding corporate rules or a binding agreement upholding principles substantially similar to POPIA’s, where the transfer is necessary for a contract with you, or where you consent. We do not sell, rent or trade your information.
Security Measures
- Confidentiality: All personal information is treated as strictly confidential
- Technical safeguards: Encrypted connections, access controls, and current software
- Organisational measures: Access on a need-to-know basis, and awareness of data protection obligations among staff and practitioners
- Data retention: Information is kept only as long as necessary, or as the law requires
Where there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, section 22 obliges us to notify the Information Regulator and you as soon as reasonably possible after discovering it. Our notification will describe the possible consequences, what we are doing about it, what you can do to limit the harm, and — if we know it — the identity of the unauthorised person.
No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, though we will not let that stand in the way of telling you promptly if something goes wrong.
Your Rights Under POPIA
Section 5 of POPIA gives you the right to:
| Right | Description |
|---|---|
| Notification (ss 18, 22) | To be told that we are collecting your information, and if it has been accessed by an unauthorised person |
| Access (s 23) | To confirm whether we hold your personal information, and to request a record of it together with the identity of any third party that has had access |
| Correction or deletion (s 24) | To have information corrected, deleted or destroyed where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained |
| Objection (s 11(3)(a)) | To object, on reasonable grounds relating to your situation, where we rely on legitimate interests |
| Withdrawal of consent (s 11(2)(b)) | To withdraw consent at any time, without affecting processing already carried out |
| Direct marketing (s 69) | To object to unsolicited electronic marketing; every message we send carries a free means of opting out |
| Automated decisions (s 71) | Not to be subject to a decision based solely on automated processing — we make none |
| Complaint and civil action (ss 74, 99) | To complain to the Information Regulator and to institute civil proceedings |
How to Exercise Them
Write to the Information Officer at info@miagroup.africa, or to us at info@peh.africa. A plain email is enough to start, and we will tell you if a prescribed form is needed. The forms below are published by the Information Regulator.
| If you want to… | Use |
|---|---|
| See what we hold about you | Form 2 of the PAIA Regulations — request for access to a record of a private body |
| Object to our processing | Form 1 of the POPIA Regulations |
| Have information corrected or deleted | Form 2 of the POPIA Regulations |
| Complain about how we handled your information | Form 5 of the POPIA Regulations, to the Regulator |
We acknowledge requests promptly and deal with access requests within the thirty days PAIA allows, which may be extended by a further thirty days where a request is complex or voluminous — we will tell you if that happens, and why. Where we refuse, we give reasons and explain how to take it further.
Exercising these rights costs you nothing, except that a prescribed fee may apply to a PAIA access request. A request for the record of your own personal information carries no request fee.
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law — in particular the retention periods that tax and accounting legislation prescribes. When it is no longer needed, we dispose of it securely.
Access to Records and Our PAIA Manual
The Promotion of Access to Information Act 2 of 2000 governs requests for access to records held by a private body. The manual of Made in Africa Investments in terms of section 51 of PAIA describes the records held and how to request them, and is available free of charge from the Information Officer on request.
Contact Us
- Email: info@peh.africa
- Phone: +27 76 129 7140
- Address: 266 Oak Ave, Ferndale, Randburg, 2194, South Africa
Wings & Me — Certified Pranic Energy Healing Centre, a division of Made in Africa Investments (Pty) Ltd.
Complaints
Please raise your concern with our Information Officer first. We would rather put something right ourselves, and the Regulator in any event expects a private body to have had the opportunity to respond before it investigates.
If you remain dissatisfied, you may complain to the Information Regulator.
The Information Regulator (South Africa)
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
- Phone: 010 023 5200 · Toll-free: 0800 017 160
- POPIA complaints: POPIAComplaints@inforegulator.org.za
- PAIA complaints: PAIAComplaints@inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- Website: inforegulator.org.za
A complaint must be made in writing, on Form 5 of the POPIA Regulations, which the Regulator publishes on its website.
Nothing in this notice limits your right to institute civil proceedings under section 99 of POPIA, whether or not you first complain to the Regulator.
Updates to This Notice
We may update this notice to reflect changes in our practices or in the law. Changes are posted on this page with a new “Last Updated” date, and we encourage you to review it periodically.
For more information about how we use cookies, please see our Cookie Policy. For our full privacy practices, please refer to our Privacy Policy.