Privacy Policy (POPIA)

Privacy Policy

Last updated: 21 August 2026

This policy explains what personal information Skindae collects, why we collect it, and what you can do about it. It is written to comply with the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible

The responsible party is Skindae Luxury Skincare, Johannesburg, Gauteng, South Africa.

Our Information Officer can be reached at hello@skindae.co.za. Write to that address for anything in this policy — access requests, corrections, deletions or complaints.

2. What we collect

Identity and contact — name, email address, phone number, delivery and billing address.
Order information — what you bought, when, order value, delivery status, returns and refunds.
Payment information — we never see or store your full card number. Payment is processed by Shopify Payments, and by UCIN where you choose express checkout. We receive only a confirmation and the last four digits.
Account information — if you create an account, your login details and saved addresses.
Marketing preferences — whether you have opted in to email, and what you have opened or clicked.
Technical information — IP address, browser and device type, pages visited, referring site. Collected through cookies and analytics.
Anything you volunteer — skin quiz answers, review text, photographs you send or tag us in, and the content of emails you write to us.

We do not knowingly collect special personal information as POPIA defines it. If you tell us about a skin condition when asking for advice, we use it only to answer you and we do not add it to any marketing profile.

3. Why we collect it, and on what basis

POPIA requires a lawful justification for every purpose. Ours are:

To fulfil your order — necessary to perform the contract between us.
To deliver to you — necessary to perform the contract; your name, address and phone number go to the courier.
To handle returns, refunds and support — necessary to perform the contract and to comply with the Consumer Protection Act.
To keep tax and accounting records — a legal obligation.
To send you marketing — your consent, given when you subscribe. Withdraw it at any time.
To prevent fraud and secure the site — our legitimate interest.
To improve the store — our legitimate interest, using aggregated analytics.

4. Direct marketing

We only send marketing email to people who asked for it. Every email carries an unsubscribe link that works immediately, and you can also email hello@skindae.co.za to be removed. We will not sell or rent your details to anyone.

5. Who we share it with

These are our operators under POPIA. Each is bound to process your information only on our instructions and to keep it secure.

Shopify — the platform this store runs on, including payment processing and order records.
UCIN — where you choose express checkout. See our UCIN Express Checkout Policy.
Courier partners — name, delivery address and phone number, so they can deliver and you can track.
Email marketing provider — your email address and engagement history, if you subscribed.
Analytics and advertising providers — technical and behavioural data, in line with your cookie choices.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

6. Information sent outside South Africa

Some of our operators host data outside South Africa. Section 72 of POPIA permits this where the recipient is subject to laws or binding agreements that provide a comparable level of protection. We rely on our contracts with these providers, which include that protection. Email the Information Officer if you would like detail on a specific provider.

7. How long we keep it

Order and tax records — 5 years from the end of the tax year, as South African tax law requires.
Account information — until you close your account, then 12 months.
Marketing lists — until you unsubscribe, then removed within 30 days.
Support emails — 24 months.

After that we delete it or de-identify it so it can no longer be linked to you.

8. How we protect it

The site runs over HTTPS. Access to customer data is limited to people who need it and is protected by individual logins. Payment data never touches our systems. If a breach ever affects your personal information, POPIA requires us to notify you and the Information Regulator as soon as reasonably possible, and we will.

9. Your rights under POPIA

You have the right to:

Ask whether we hold information about you, and get a copy of it.
Ask us to correct anything inaccurate, or complete anything missing.
Ask us to delete information we no longer have a lawful reason to keep.
Object to processing based on legitimate interest.
Withdraw consent to marketing at any time.
Not be subject to a decision made purely by automated means that significantly affects you.
Complain to the Information Regulator.

Email hello@skindae.co.za. We respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your information to someone else.

10. Complaining to the Regulator

If you are not satisfied with how we have handled your information, you may complain to:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
inforegulator.org.za

We would rather you told us first, but that is entirely your choice.

11. Cookies

We use cookies to keep your cart working, remember your preferences, and understand how the store is used. Essential cookies are required for the site to function. You can block or delete cookies in your browser settings, but parts of the store may stop working properly if you block the essential ones.

12. Children

This store is not directed at children under 18. We do not knowingly collect information from a child. If you believe we have, email the Information Officer and we will delete it.

13. Changes

If we change this policy we update the date at the top. Material changes affecting how we use your information will be announced by email to subscribers.

14. Contact

Information Officer — hello@skindae.co.za
Help and returns — support@skindae.co.za
Orders and delivery — orders@skindae.co.za

Skindae Luxury Skincare, Johannesburg, South Africa