Privacy Policy

1. Who we are

Aendor Digital (Pty) Ltd ("Aendor Digital", "we") is a private company registered in South Africa (registration number 2026/409432/07), at 1717 Turnberry Crescent, Thornbrook Golf Estate, Akasia, Gauteng, 0182, South Africa. We run paid social advertising and follow-up systems for medical spas in the United States.

For the purposes of the Protection of Personal Information Act, 2013 (POPIA), Aendor Digital is the responsible party for the personal information described here.

Contact: hello@aendordigital.com or +27 72 905 2848.

2. What this policy covers

This policy covers information we collect through aendordigital.com and the booking widget on it.

It does not cover information we handle on behalf of a client under a signed Client Agreement. In that situation the client is the responsible party and we act as an operator on their instructions. Their own privacy policy applies to their patients and enquiries, not this one.

3. What we collect

When you book a call. Your name, business name, business website, email address, phone number, and any details you give us about your advertising, and, if you choose to tick them, your text message consent choices. You choose to give us this. If you do not, we cannot schedule a call.

When you visit. Your IP address, browser and device type, the pages you viewed, how long you stayed, and the site that referred you.

When you email us. Whatever is in the message, and your email address.

We do not collect special personal information, we do not collect payment card details on this website, and we do not ask for medical or health information about anyone.

4. Cookies and tracking

We use a small number of cookies and similar technologies:

• Necessary. Make the site and the booking widget work. These cannot be switched off.
• Analytics. Tell us which pages people read and where they leave.
• Advertising. The Meta pixel, which tells Meta that you visited and which pages you saw, so we can measure our own advertising.

You can block or delete cookies in your browser. The site still works, but the booking widget may not.

5. The Meta pixel

We use, or may use, the Meta pixel on this site. It sends Meta Platforms, Inc. your IP address, information about your browser and device, and the pages you visited on our site. If you are logged in to Facebook or Instagram, Meta can connect that activity to your account.

The pixel never receives your mobile number or your text message consent.

Meta uses that data under its own terms, which we do not control. You can see and change what Meta does with it in your Facebook or Instagram ad settings.

This site is not part of the Facebook website or Facebook Inc. It is not endorsed by Facebook in any way. FACEBOOK is a trademark of FACEBOOK, Inc.

6. Why we use it, and on what basis

• To schedule and hold the call you asked for. Basis: performing at your request, before any contract.
• To reply to you and follow up about that call. Basis: your consent, and our legitimate interest in answering an enquiry you started.
• To run and improve the website. Basis: legitimate interest.
• To measure our own advertising. Basis: consent, where consent is required.
• To meet legal and tax obligations. Basis: legal obligation.

We do not share your personal information with anyone for their own marketing.

7. Text messages (SMS)

If you give us your mobile number and tick a consent box on one of our forms, Aendor Digital (Pty) Ltd may send you text messages. Non-marketing messages are about your strategy call booking, appointment confirmations and reminders, and account updates if you become a client. Marketing messages, sent only if you separately tick the marketing box, are about our advertising services, special offers and updates. Ticking either box is optional and is not a condition of booking a call.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also email hello@aendordigital.com.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Who else handles it

We use service providers who process information on our instructions:

• HighLevel, Inc. Booking widget, forms, text messaging and our CRM. Everything you submit through our forms is stored here.
• Twilio Inc. Text message delivery.
• Meta Platforms, Inc. Advertising measurement, as described above.
• Google LLC. Fonts are served from Google Fonts, which receives your IP address.
• Lovable. Website hosting and server logs.
• Whop Inc. Payments, for clients only. Whop handles card and bank details directly. We never see them.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

9. Information leaving South Africa

We are in South Africa. Most of our clients, and all of the providers listed above, are in the United States. Your information will be stored and processed outside South Africa, including in the United States.

We only use providers who commit by contract to protect personal information on terms comparable to POPIA, as section 72 requires.

10. How long we keep it

• Enquiries that do not become clients: 24 months from your last contact with us, then deleted.
• Clients: for the engagement, then 5 years, which is what South African tax and company record rules require.
• Website logs and analytics: 14 months.

11. Your rights

Under POPIA you can ask us to tell you what we hold about you, correct it, delete it, or stop using it. You can object to processing based on legitimate interest. You can withdraw consent at any time, which does not affect anything we did before you withdrew it.

Every email we send has an unsubscribe link. Using it stops the marketing, not the replies to something you asked us.

If you are in the United States. Depending on your state, you may have the right to know what we collect, to have it deleted, to correct it, and to opt out of targeted advertising. Ask us using the same address below and we will treat your request the same way.

If you are in the United Kingdom or the European Union. You have equivalent rights under the UK GDPR and the GDPR, including the right to data portability and the right to complain to your own supervisory authority.

To exercise anything above, email hello@aendordigital.com. We will respond within 30 days. We may ask you to confirm who you are first.

12. Keeping it safe

We use reputable providers, access controls and encryption in transit. No website is perfectly secure, and we cannot promise otherwise. If a breach puts your information at real risk we will tell you and the Information Regulator, as POPIA requires.

13. Children

This site is for business owners. It is not for anyone under 18, and we do not knowingly collect information about children. If you think we have, email us and we will delete it.

14. Changes

If we change this policy we will update the date at the top. Material changes will be flagged on the site.

15. Complaints

Email us first at hello@aendordigital.com and we will try to sort it out.

If you are not satisfied you can complain to the Information Regulator of South Africa, JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001, or by email to complaints.IR@justice.gov.za.