1. Who we are
This website (omniahealth.co.za, including The Skin Store) is operated by OMNIA WELLNESS AND AESTHETICS (Pty) Ltd, registration no. 2026/227662/07, of Suite 6, First Floor, Hilton Health, Cnr Monzali Drive & Hilton Avenue, Hilton, KwaZulu-Natal ("Omnia", "we", "us"). SKN Lab and The Skin Store are brands within the Omnia ecosystem and are covered by this policy.
2. What we collect
- Identity & contact: name, mobile/WhatsApp number, email, booking details.
- Health & skin data (special personal information): skin concerns, consultation and treatment notes, treatment history, prescribed home care, and skin imaging including Observ 520x captures.
- Orders & billing: Skin Store orders, delivery addresses, and payment records processed via PayFast. We do not store full card details.
- Membership: SKN Lab tier, session history and billing records.
- Communications: WhatsApp, email and enquiry-form messages you send us.
- Technical: cookies and analytics — see our Cookie Policy.
3. Why we process it, and our lawful basis
We process personal information to deliver your assessments, treatments and protocols; manage your membership; fulfil, deliver and support Skin Store orders; track clinical results; and communicate with you about your care and orders. Health data is processed only with your explicit consent, obtained at consultation, as POPIA requires for special personal information. You may withdraw consent at any time, subject to our clinical record-keeping obligations.
4. Skin imaging
Your Observ 520x and other skin images are used to prescribe and track your protocol. They are stored securely and are not used for marketing, published, or shared without your separate, specific written consent.
5. Who we share with
Only where necessary: Fresha for bookings, PayFast for payments, BobGo and courier partners for delivery, Mailchimp for newsletters, and the supervising medical team where clinically relevant and with consent. We do not sell your information.
6. Storage, security & retention
We apply appropriate technical and organisational safeguards. Health records are retained for the period required by applicable health-records rules; order and billing records for the period tax law requires; and marketing data until you unsubscribe. Thereafter records are securely destroyed or de-identified.
7. Your POPIA rights
- Access the personal information we hold about you
- Request correction or deletion
- Object to processing, and withdraw consent
- Opt out of direct marketing at any time
- Lodge a complaint with the Information Regulator (South Africa) — inforeg.org.za
To exercise any right, contact us at admin@omniahealth.co.za.
8. Cross-border transfers & changes
If any service provider stores data outside South Africa, we ensure comparable protection as POPIA requires. We may update this policy from time to time; the date above reflects the latest version, and material changes will be flagged on this page.