Privacy policy

Privacy Policy

Privacy policy of Lush Haircare South Africa (Pty) Ltd ( Registration number: 2022/369001/07) (Hereinafter referred to as “Be Beautiful”, “we” or “us”). 

Protection of Personal Information Act 

Our policy is as per the guidelines established by law of Republic of South Africa in Protection of Personal Information Act 4 of 2013. 

 

Safeguarding your Personal Information is of utmost importance to us, and we deeply value your privacy. Our commitment is to provide exceptional service whenever you make a purchase from us, which necessitates the use of certain Personal Information. This Privacy Policy outlines our procedures for managing and utilizing the Personal Information we gather or receive from you. By utilizing our Platforms, you consent to the processing of your Personal Information in accordance with the terms specified in this Privacy Policy. 

 

Within this Privacy Policy, the following terms have specific meanings: 

  • "Personal Information" and "process/processing" carry the same definitions as outlined in POPI. 
  • "we," "us," or "our" pertains to Be Beautiful. 
  • "you" and "your" pertain to any individual who accesses or utilizes our Platforms, also referred to as a user. 
  • "registered user(s)" pertains to individuals who have registered on our Platforms, provided us with a unique email address and password, as well as other Personal Information necessary for ordering goods and services on our Platforms. 

 

Under age of 18  

If you are below 18 years old, it is essential that you obtain permission from your parent or guardian before using our Platforms or sharing your Personal Information with us. We may verify that you have received such permission by requesting your parent's or guardian's contact information in order to contact them. Additionally, we may verify the accuracy of the contact details you have provided to ensure that they belong to your actual parent or guardian. If we are unable to confirm such permission or if your parent or guardian states that you do not have their consent, you are prohibited from using our Platforms. 

Information Collection 

Be Beautiful handles Personal Information in a manner that is reasonable, appropriate, relevant, and purpose-specific, ensuring that it is not excessive. In order for users to utilize our Platforms, we collect and handle certain Personal Information. When you become a registered user, it is necessary for us to collect and handle your Personal Information to provide our services to you. 

 

Upon registering to use our site, we may collect the following Personal Information that you voluntarily provide to us, including, but not limited to: 

  • Full name 
  • Gender 
  • Email address 
  • Date of birth 
  • Physical address 
  • Mobile phone number 
  • Online identifiers 
  • Identification number 

If there are any changes to your Personal Information or if you wish to modify or correct it, you can update your registered user information within your account profile. 

By providing information, you confirm that the details you have supplied are accurate, up-to-date, genuine, and truthful. You also affirm that you are not impersonating or misrepresenting any individual or entity, and that you are not falsely stating or misrepresenting your affiliation with any person or organization. 

 Information Obtained from Your Use of Our Platforms 

When you visit and utilize our Platforms, whether as a registered user or not, Be Beautiful  processes certain Personal Information. Depending on the manner in which you access and interact with our Platforms, we may receive: 

  • Log information: This includes data related to your online identifiers, such as details on the frequency, duration, and timing of your platform usage, the content you view, and the search queries you make. 
  • Information about your device: We may collect information about the device you use to access our Platforms, including the device type, how you connect to our Platforms, your browser or operating system, and your Internet Protocol (IP) address. 
  • Geographical location: If you utilize location-enabled services, we may receive information about your geographic location, which includes signals from your device's global positioning system (GPS) and data about nearby wifi networks and cellular towers. 
  • Additional information from third parties: We may obtain supplementary information about you from third-party sources, such as social media platforms. 

Use of information  

We process the Personal Information we collect and receive for the following purposes: 

  • Identification: We process your Personal Information to accurately identify you. 
  • User account creation: We process your Personal Information to create a user account for you. 
  • Contractual obligations: As a registered user, we process your Personal Information to fulfil our contractual obligations when you place orders for goods, enabling us to deliver those goods and handle returns. 
  • Requested information, products, or services: We use your Personal Information to provide you with the information, products, or services you request from us. 
  • Communication and support: We process your Personal Information to communicate with you about our Platforms, provide customer support, address complaints, and ensure quality control. 
  • Notifications: We may notify you about changes to our Platforms, services, products, terms and conditions, privacy policy, or other updates that affect our Platforms, services, and products. 
  • Relevant information and offers: We may send you information about competitions, products, or services that may be of interest to you (unless you have opted out of receiving such information). Additionally, newsletters based on your interests, recent orders, and browsing behavior may be sent to you. You can unsubscribe from these newsletters by visiting the Newsletter Subscriptions page under "My Account" or using the unsubscribe option provided in the newsletter. 
  • Feedback and improvement: We may seek feedback from you to enhance our products, services, and business growth. 
  • Legal and regulatory compliance: We process your Personal Information to comply with legal or regulatory obligations, such as tax or financial laws. 
  • Statistical research: We may conduct research for statistical purposes. The data used in this research does not include your Personal Information and cannot be linked to you, ensuring your anonymity. 

Information Disclosure  

Your personal information may be shared with our business partners, advertising/marketing agencies, and other third – party service providers as necessary for business operations. We may also disclose your information during business transfers, to comply with laws, to protect our and others’ rights, and for other legitimate business purposes.   

Storage and limitation of records 

 We retain your Personal Information for the following durations: 

We will preserve your Personal Information for as long as necessary to fulfill the purpose for which it was initially collected or subsequently processed. If your Personal Information serves multiple purposes, we will retain it until the purpose with the longest duration expires. However, once the duration of a purpose with a shorter period concludes, we will cease using your Personal Information for that particular purpose. 

 

By accessing and utilizing our Platform, you give your consent for us to retain records of your Personal Information for no longer than necessary to accomplish the purpose for which the information was originally collected or subsequently processed. 

Transfer of your personal information outside south africa 

For the purposes stated above (Why do we process your Personal Information?), we may transfer specific Personal Information to service providers located outside the geographical boundaries of South Africa. This includes data storage and backup processes aimed at maintaining the integrity of our systems. 

 

When transferring your Personal Information beyond South Africa's borders, we will ensure compliance with the lawful transfer requirements outlined in POPI (Protection of Personal Information Act). 

 

By accessing and utilizing our Platforms, you provide your consent for us to transfer your Personal Information outside South Africa as described in POPI. 

Safeguarding your personal information 

 We prioritize the integrity and confidentiality of the Personal Information we possess or control by implementing appropriate and reasonable technical and organizational measures. These measures are designed to prevent the loss, damage, or unauthorized destruction of Personal Information, as well as unlawful access or processing of such data. Nevertheless, no system can be immune from risks and we cannot completely guarantee the security of your personal information against unauthorised access, hacking, data loss, or other breaches. 

 

To effectively implement and maintain these measures, we have established policies, controls, and related processes that undergo regular review and updates. Our policies, controls, and procedures encompass various aspects, including: 

 

  • Physical, technical, and network security measures. 
  • Access controls and monitoring to ensure authorized access. 
  • Secure storage, destruction, and encryption methods for Personal Information records. 
  • Reporting and remediation processes for Personal Information breaches. 
  • Imposition of security and confidentiality obligations on third parties (whether located within or outside South Africa) who process Personal Information while providing services to us, through written agreements.  

Third Parties 

If you choose to disclose your Personal Information to any third party besides Be Beautiful , please note that we will not be held responsible for any loss or damage you may experience as a result of such disclosure. This is because we have no control or authority over how that third party handles your Personal Information. It is important for you to carefully read and understand the privacy policy of any third party before disclosing your Personal Information to them. 

What are your rights 

 Once you have provided sufficient proof of your identity, you have the following rights: 

  • Access, Correction, and Amendment: You have the right to view, correct, and/or amend the Personal Information that we process. As a registered user, you can accomplish this by accessing your user account and updating the relevant Personal Information. 

 

  • Request for Personal Information Record: You can request a record or description of your Personal Information. Be Beautiful  may charge a fee to provide you with this record, and in certain cases, an additional administrative fee may apply for unfounded, excessive, or repetitive requests. 

 

  • Correction, Destruction, or Deletion: You can request the correction, destruction, or deletion of your Personal Information. If you choose to no longer be a registered user, you can cancel your account. However, Be Beautiful  Shopify will retain your Personal Information in compliance with legislative requirements and our internal retention policy. 

 

  • Compliance with Requests: We will comply with your requests upon receipt, unless there is a valid reason for us to be unable to do so. If we are unable to agree on whether to correct or delete your Personal Information, we will indicate that a request for correction or deletion was made but not executed. 

 

  • Notification of Changes: We will inform you, whenever reasonably practicable, if there are any changes made to your Personal Information that could affect decisions concerning you. 

 

  • Notification of Action Taken: We will notify you of the action taken by us as a result of your request. 

 

  • Unauthorized Access Notification: We will inform you of any unauthorized access to your Personal Information. 

 

  • Evidence of Compliance: Upon reasonable notice and request, we will provide you with reasonable evidence of our compliance with the obligations stated in this Privacy Policy. 

 

  • Complaint Submission: You have the right to submit a complaint to the Information Regulator. 

As a registered user, you can exercise all the rights mentioned above as stipulated in POPIA (Protection of Personal Information Act). 

Policy Modification

This Privacy Policy supersedes any previous provisions of the privacy policy found on our website. We may periodically update this Privacy Policy. The version of the Privacy Policy displayed on this page at the time of your use of our Platforms is applicable to you.