Privacy Policy
Privacy Policy
Effective Date: [Insert Date]
1. Introduction
Welcome to the website https://overflow-wk-skincare.co.za (the “Website”) operated by Overflow WK Skincare (“we”, “us”, “our”, the “Company”). We are committed to protecting your privacy and handling your personal information in a transparent, lawful and secure manner. By using the Website, creating an account, placing an order or otherwise interacting with us, you agree to the collection and processing of your personal information in accordance with this Privacy Policy.
2. Scope and Applicability
This Privacy Policy applies to personal information collected through the Website and other interactions with the Company (for example by email, telephone or offline) where such information is processed by us as the “responsible party” under POPIA. POPIA applies to private organisations that process personal information of South African residents. Amazon Web Services, Inc.+3InCountry+3DLA Piper Data Protection+3
If you do not agree with this Privacy Policy, please do not use or access the Website or provide your personal information.
3. Definitions
“Personal Information” means information relating to an identifiable, living natural person or existing juristic person, including any of the items listed in POPIA (such as name, email address, physical address, telephone number, online identifier, etc.). DLA Piper Data Protection+1
“Processing” means any operation or activity concerning personal information, such as collection, receipt, storage, use, disclosure, deletion or destruction.
4. What Personal Information We Collect
We may collect the following types of Personal Information from you:
Contact information: name, email address, postal address, telephone number
Order / Transaction information: billing / shipping address, payment details (processed by payment providers), purchase history
Website usage information: IP address, device information, browser type, pages visited, referral source, cookies and analytics data
Communication / interaction data: emails, chat logs, reviews or feedback you submit to us
Marketing / communications preferences: whether you’ve opted-in to marketing messages
5. How We Collect Personal Information
We collect your Personal Information in the following ways:
When you create an account or register on the Website
When you place an order or request a service through the Website
When you subscribe to newsletters, promotions or marketing communications
When you contact us via email, telephone or other communication channel
Automatically via cookies, analytics tools, and other tracking technologies when you visit our Website
6. Purpose of Processing & Legal Basis
We process your Personal Information for legitimate business purposes, including:
To fulfil and manage your orders, deliveries and customer service
To communicate with you regarding your account, orders, services, promotions and updates
To conduct marketing, send newsletters, offers and personalised communications (subject to your consent / preference)
To manage and improve our Website, services, products, and for analytics and insights
To comply with legal, regulatory and tax obligations
Under POPIA, processing of Personal Information must satisfy one or more lawful grounds (eg. consent, contract performance, legal obligation, legitimate interest) and must adhere to the conditions for lawful processing. InfoTrust+1
7. Sharing and Disclosure of Personal Information
We may share your Personal Information with the following categories of third parties:
Service providers and suppliers who help us operate the Website, process payments, deliver products, host our IT infrastructure, execute marketing campaigns
Analytics and advertising partners (for example to track performance, user behaviour, campaign effectiveness)
Legal/regulatory authorities if required by law or to protect our rights
Affiliates, successors or purchasers of our business (in the case of a merger or sale)
We require that any third-party service provider comply with applicable data protection laws and only act on our instructions.
8. International / Cross-Border Transfers
If we transfer your Personal Information outside South Africa, we will ensure that appropriate safeguards are in place in line with POPIA’s requirements for cross-border data flows. InCountry+1
9. Security, Retention & Deletion
We take reasonable technical, organisational and administrative measures to safeguard your Personal Information against loss, unauthorized access, destruction, or disclosure.
We retain your Personal Information only for as long as necessary for the purposes it was collected or as required by law. When your information is no longer needed, we will delete or anonymise it unless there is a legitimate reason to retain it.
10. Cookies and Tracking Technologies
We use cookies, web beacons and similar tracking technologies to collect website usage information, improve the user experience, perform analytics and deliver relevant marketing. You can configure your browser to block or disable cookies, but this may affect how the Website performs or your ability to use certain features.
11. Your Rights
Under POPIA you have certain rights in relation to your Personal Information — including the rights to:
Be informed that we are processing your Personal Information and why
Access the Personal Information we hold about you
Request correction or deletion of your Personal Information
Object to or restrict the processing of your Personal Information
Withdraw consent where consent is the basis of processing
Request portability of your Personal Information where applicable
Please contact us (see Section 14) if you wish to exercise any of these rights.
12. Marketing / Unsolicited Communications
If you have opted in to receive marketing communications you may unsubscribe at any time by following the “unsubscribe” link or contacting us directly. We will no longer send you marketing messages once you have unsubscribed, except for essential service-related communications (e.g., order confirmations, account notifications).
13. Children
Our Website and services are not directed at children under the age of 18. We do not knowingly collect or solicit Personal Information from children. If you believe a child under 18 has provided Personal Information to us, please contact us and we will take steps to delete the information.
14. Contact and Complaints
If you have any questions about this Privacy Policy, or wish to exercise your rights under POPIA, you may contact us at:
Overflow WK Skincare
[Insert physical/registered address]
Email: [insert email address]
Telephone: [insert phone number]
If you remain dissatisfied after contacting us, you may lodge a complaint with the Information Regulator of South Africa.
15. Changes to this Privacy Policy
We may update or revise this Privacy Policy from time to time. When we do, we will post the new version on the Website and update the “Effective Date”. Your continued use of the Website after material changes indicates your acceptance of the updated policy.
16. Acknowledgment
By using our Website, creating an account, placing an order or otherwise submitting your Personal Information, you acknowledge that you have read, understood and consent to the processing of your Personal Information in accordance with this Privacy Policy.
End of Privacy Policy