1. Who We Are

AURÉA Luxury Hair is the responsible party (as defined under POPIA) for the personal information we process through this website.

• Business name: AURÉA Luxury Hair
• Information Officer: AURÉA Luxury Hair
• Email: info@aureahair.co.za
• WhatsApp: +27 72 632 1471

2. Information We Collect

We collect personal information only where necessary to provide our services. This includes:

• Identity information: first name, surname
• Contact information: email address, phone number, WhatsApp number
• Delivery information: shipping address, billing address
• Payment information: processed securely through our payment providers — we do not store card numbers on our servers
• Account information: login credentials (password stored as an encrypted hash), account preferences
• Order history: items purchased, order values, delivery status
• Technical data: IP address, browser type, device type, pages visited, time spent on site (collected via cookies and analytics tools)

3. How We Use Your Information

We process your personal information for the following purposes:

• To process, confirm, and fulfil your orders
• To send transactional communications (order confirmations, shipping updates, receipts)
• To manage your account and provide customer support
• To send promotional emails and special offers — only where you have opted in
• To improve our website, product range, and user experience
• To detect and prevent fraudulent activity
• To comply with legal and regulatory obligations

4. Sharing of Information

We do not sell, rent, or trade your personal information. We share your data only with trusted third parties who assist us in operating our business:

• Payment processors: to securely handle transactions (e.g., card payments, EFT)
• Courier and logistics partners: to deliver your orders (name, address, and contact number are shared)
• Analytics providers: aggregated, anonymised data to understand website usage
• Email service providers: to send order and marketing communications

All third-party service providers are contractually obligated to keep your information confidential and to use it only for the purposes for which it was shared.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or alteration. These include:

• SSL/TLS encryption for all data transmitted through our website
• Encrypted storage of passwords (bcrypt hashing)
• Restricted access to personal data — only authorised staff and systems can access your information
• Regular security reviews of our systems and processes

While we take reasonable steps to protect your information, no method of transmission over the internet is 100% secure. If you suspect your account has been compromised, please contact us immediately.

6. Cookies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience. We use cookies to:

• Keep you logged in to your account
• Remember your cart contents between sessions
• Understand how visitors use our site (analytics)
• Personalise content and offers

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of our website (e.g., your cart may not be saved).

7. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

To exercise any of these rights, please contact us at info@aureahair.co.za. We will respond within 30 days.

8. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically:

• Account and order data is retained for the duration of your account and for 5 years thereafter
• Financial records are retained as required by South African tax law
• Marketing preferences are retained until you unsubscribe

When we no longer need your information, we will securely delete or anonymise it.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact & Complaints

For any privacy-related queries, requests, or concerns, please contact our Information Officer:

• Email: info@aureahair.co.za
• WhatsApp: +27 72 632 1471

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.