Privacy policy

Here is a professional, POPIA-compliant Privacy Policy tailored for a South African e-commerce store operating on Shopify.

In South Africa, this policy is essential to satisfy the requirements of the Protection of Personal Information Act (POPIA) No. 4 of 2013 and will meet PayFast's compliance checklist for account verification.

PRIVACY POLICY

OVERVIEW

Azuri Labs respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and disclose your personal data when you visit, interact with, or make a purchase from our website (the "Services").

By using our platform, you acknowledge that your personal information will be processed in accordance with the Protection of Personal Information Act (POPIA) No. 4 of 2013 and this policy.

1. THE INFORMATION WE COLLECT

When you interact with our website, we collect personal information necessary to provide you with our products and a seamless checkout experience. This includes:

  • Contact & Identity Data: Your name, email address, physical delivery address, billing address, and telephone number.

  • Transaction & Payment Data: Details about payments made by you and products you have purchased. (Note: Payment card details are securely encrypted and processed directly by our payment gateway, PayFast/Yoco Azuri Labs does not store your raw credit card numbers).

  • Technical Data: Your IP address, device type, browser information, and details about how you navigate and interact with our Shopify store layout via cookies.

2. HOW WE COLLECT YOUR DATA

We collect personal information directly from you when you:

  • Create an account or place an order on our store.

  • Subscribe to our newsletters or direct marketing communications.

  • Contact our customer service channels via email.

  • Browse our website (collected automatically via tracking technologies and functional cookies).

3. PURPOSE OF PROCESSING (WHY WE USE YOUR DATA)

In line with POPIA requirements, we only process your personal data for clear, legitimate business purposes, including:

  • Order Fulfillment: Processing your transactions, managing shipping and courier deliveries, and sending order tracking updates.

  • Customer Support: Responding to queries, resolving delivery issues, or handling product feedback.

  • Security & Fraud Prevention: Verifying transactional data and protecting our store against fraudulent activities.

  • Direct Marketing: Sending you promotional offers, skincare tips, or product launches—strictly on an opt-in basis. You can opt out of marketing communications at any time by clicking the "unsubscribe" link.

4. THIRD-PARTY DATA SHARING

We do not sell your personal data to third parties. However, to operate effectively, we share necessary details with trusted operators who assist us in providing our services:

  • Shopify: Our e-commerce platform host, which processes data securely on our behalf.

  • PayFast/Yoco: Our secure South African payment gateway, ensuring transaction safety.

  • Courier Services: Reputable local logistics companies (e.g., The Courier Guy) who require your name, telephone number, and physical address to complete deliveries.

  • Legal Authorities: Only when mandated by South African law or to protect our legal rights.

5. CROSS-BORDER DATA TRANSFERS

Because Azuri Labs is powered by Shopify, the data you submit may be transmitted, processed, and stored on servers located outside the borders of South Africa. By using our services, you consent to these secure operational transfers, which are managed under strict data privacy agreements that mirror local security standards.

6. SECURITY SAFEGUARDS

We implement reasonable technical and organizational measures to safeguard your personal data against loss, unauthorized access, destruction, or disclosure. Our website utilizes Secure Socket Layer (SSL) encryption for data transmission, and our platform architecture complies with global security standards.

7. YOUR LEGAL RIGHTS UNDER POPIA

As a South African data subject, you possess the following statutory rights regarding your information:

  • Right of Access: You may request confirmation of whether we hold your personal data and ask for a copy of that record.

  • Right to Correction: You have the right to request that we update, correct, or delete inaccurate or incomplete data.

  • Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact our designated information team at azurilabsza@gmail.com.

8. CONTACT AND COMPLAINTS

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

  • Email: azurilabsza@gmail.com

If you feel that your data has been handled unlawfully, you have the right to lodge a formal complaint with the South African Information Regulator: