
Privacy Policy (ZA)
Effective Date: 11 September 2025
Last Updated: 11 September 2025
Company: Lethal Lashes™ (Pty) Ltd
Reg. No. K2025576827
Contact (Privacy): laeeqa@lethallashes.org
We respect your privacy. This Policy explains how Lethal Lashes™ ("we", "us") collects, uses, discloses and protects your personal information when you visit our website, purchase our products, apply to our affiliate programme, or interact with us online and offline. It applies to our processing activities in South Africa under the Protection of Personal Information Act, 2013 ("POPIA").
1) What We Collect
We may collect the following categories of personal information:
Identity & contact: name, email, phone, delivery/billing address, social handles (if you apply to be an affiliate or contact us).
Order & payment: items purchased, order numbers, payment method and reference (processed via secure payment providers; we do not store full card details).
Delivery: preferred courier option, tracking numbers, delivery instructions, proof of delivery.
Technical: device type, IP address, browser, pages viewed, cookies/analytics data.
Marketing & preferences: opt‑in status, campaign interactions, content preferences.
Affiliate data (if applicable): application responses, performance metrics, payout details, tax/banking information you provide for EFT.
Support content: messages, photos, or videos you send us for order issues, returns, or product advice.
We do not intentionally collect special personal information (e.g., health, biometric, religion) and we do not knowingly collect information from children under 18 without consent from a competent person.
2) How We Collect It
Directly from you when you place an order, create an account, sign up for marketing, apply to the affiliate programme, contact support, or complete forms.
Automatically via cookies, pixels and similar technologies when you browse our site (see §7).
From service providers (e.g., payment gateways, couriers) to complete your transactions or resolve delivery issues.
3) Why We Use Your Information (Lawful Grounds)
We process personal information only when lawful under POPIA s11(1), including:
To perform a contract: process orders, take payment, deliver parcels, provide customer service, manage returns/warranties.
With your consent: send marketing via email/SMS/DM; place non‑essential cookies; feature your content (UGC) where you grant permission.
To comply with law: accounting, tax, anti‑fraud, consumer protection, and record‑keeping.
Legitimate interests: secure our website, prevent abuse, improve products, measure campaigns, and run the affiliate programme—balanced against your rights.
You may withdraw consent at any time (see §9) and you may object to certain processing based on legitimate interests.
4) Direct Marketing (CPA & ECTA)
We send marketing only where permitted and always with an easy opt‑out.
Emails and SMS include an unsubscribe link or instructions.
You may opt out of direct marketing at any time; we will then stop using your details for that purpose.
Operational messages (e.g., order confirmations, shipping updates) are not marketing and will still be sent where relevant.
5) Sharing Your Information
We do not sell your personal information. We share it only with:
Payment gateways (e.g., PayFast/PayFlex/Yoco) to process payments securely.
Courier & logistics partners (e.g., PUDO, The Courier Guy) to deliver orders and provide tracking.
IT and analytics providers (hosting, email/SMS platforms, analytics, security).
Affiliate operations partners (tracking, payout processors) if you’re an affiliate.
Professional advisers (legal, accounting) and authorities where legally required.
All operators must protect your information and process it only on our instructions.
6) Cross‑Border Transfers
Some providers may process data in other countries. Where this happens, we ensure suitable protection under POPIA s72 (e.g., by using contractual safeguards and reputable providers with appropriate security). You can contact us for more details of specific transfers.
7) Cookies & Similar Technologies
We use cookies and similar tech to run our site and understand usage:
Essential cookies – required for core functions (cart, checkout, security).
Analytics cookies – to measure traffic and improve performance.
Marketing cookies/pixels – to personalise offers and measure campaigns.
Managing cookies: You can control cookies in your browser settings. If we implement a preferences banner, you’ll be able to adjust non‑essential cookies there as well. Blocking some cookies may impact site functionality.
8) Retention
We keep personal information only as long as necessary for the purposes in this Policy, including to meet legal, accounting, or reporting requirements. For example, core order records are typically retained for 5 years for tax and accounting compliance.
9) Your Rights (POPIA)
You have the right to:
Access the personal information we hold about you.
Correct or delete personal information where legally permissible.
Object to or restrict certain processing, including direct marketing.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Information Regulator.
How to exercise your rights: Email laeeqa@lethallashes.org with your request and proof of identity. We’ll respond within a reasonable time as required by POPIA and other applicable laws.
10) Security & Data Breaches
We use administrative, technical and physical safeguards to protect your information. If a security compromise occurs that may materially impact you, we will notify you and, where required, the Information Regulator as soon as reasonably possible, with guidance on protective steps.
11) Links & Third‑Party Sites
Our site may link to third‑party websites or services with their own privacy notices. We are not responsible for their practices; please review their policies.
12) Children
Our products and site are intended for adults. If you are under 18, please use our site only with the consent of a competent person. If we learn we collected information from a minor without proper consent, we will delete it.
13) Changes to This Policy
We may update this Policy from time to time. The Effective Date above shows when it last changed. Material changes will be posted on our website and, where appropriate, notified to you.
14) Contact Us
If you have questions or wish to exercise your rights:
Email: laeeqa@lethallashes.org
Subject line: “Privacy – Query”
15) Related Documents
Returns & Refunds Policy
Shipping Policy
Affiliate Programme Policy
PAIA Manual (available on request)
By using our website or sharing information with us, you acknowledge that you have read and understood this Privacy Policy.
