Privacy policy
How Velvet Curl Beauty ZA collects, uses and protects personal information.
Last updated: 4 August 2026
We use order and contact details to provide the store, fulfil purchases and offer support.
Information is shared where needed with Shopify, payment, fulfilment, courier and support providers.
You may exercise applicable rights under South African privacy law.
We will never ask you to email your password, full payment-card number, PIN, CVV or online-banking credentials.
1. Who is responsible for your information
Kevin King trading as Velvet Curl Beauty (“Velvet Curl”, “we”, “us” or “our”) operates this online store and is the responsible party for personal information we process for our own business purposes. Shopify provides the ecommerce platform and also processes information as described in its own privacy notices.
For privacy questions or requests, email velvetcurlbeauty.support@gmail.com or use our contact page.
2. Information we collect
Depending on how you use the store, we may collect:
- Identity and contact details: name, email address, telephone number, delivery and billing address.
- Order and transaction details: products viewed or ordered, order value, discounts, delivery status, returns, exchanges and support history.
- Payment-related details: payment method, payment status and transaction references. Payment providers process card and banking details; we do not ordinarily receive or store your complete payment-card number.
- Account information: login details, saved preferences and account activity where customer accounts are used.
- Communications: messages, reviews, photographs, video or other information you voluntarily send to customer care.
- Device and usage data: IP address, browser, device identifiers, pages visited, referring links, cookie identifiers and store interaction data.
- Fraud and security signals: information used by us, Shopify or payment providers to protect transactions and accounts.
Please do not provide special personal information or information about another person unless it is necessary, lawful and you are authorised to do so.
3. Where information comes from
- directly from you when you browse, create an account, place an order, join a mailing list or contact us;
- automatically from your device through the store, cookies and similar technologies;
- from Shopify, payment processors, fraud-prevention providers, couriers, fulfilment providers and other service providers involved in your transaction; and
- from advertising, analytics or social-media partners where permitted and subject to your settings or consent.
4. Why we use information
| Purpose | Typical information | Reason for processing |
|---|---|---|
| Process and deliver orders | Contact, address, order and payment-status data | Perform our agreement with you and meet legal obligations. |
| Customer care and returns | Order history, messages and claim evidence | Perform our agreement, respond to requests and protect legitimate business interests. |
| Security and fraud prevention | Device, transaction and account signals | Protect customers, the store and payment systems; comply with law. |
| Store operation and improvement | Usage, device and aggregated analytics | Operate and improve the service, subject to applicable consent requirements. |
| Marketing | Email, mobile number and interaction data | Your consent or another lawful basis permitted by POPIA, with an opt-out. |
| Records and disputes | Orders, payments, communications and returns | Tax, accounting, consumer-protection and other legal duties; establish or defend claims. |
If information is required to process an order and you do not provide it, we may be unable to accept, fulfil or support that order.
5. When we share information
We do not sell personal information for money. We may disclose information to:
- Shopify, which hosts and supports the store and checkout;
- payment and fraud-prevention providers to authorise and protect transactions;
- product, fulfilment, warehousing and courier providers to prepare, ship, track and return orders;
- technology, email, customer-support, analytics and marketing providers that help operate the business under appropriate instructions or terms;
- professional advisers, insurers, auditors and authorities where reasonably necessary or required by law; and
- a successor or buyer in a legitimate business reorganisation, subject to applicable privacy requirements.
Providers receive only the information reasonably needed for their role. They may have their own legal duties and privacy notices.
6. Cross-border processing
Shopify and some payment, technology, fulfilment or support providers may process information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use recipients, contracts or other safeguards that meet the requirements of POPIA, including section 72 where applicable.
You can read more about Shopify’s processing in the Shopify Consumer Privacy Policy.
7. Cookies and similar technologies
The store uses cookies and similar technologies to keep the website secure, remember cart and account choices, measure performance and, where enabled, support advertising. Some cookies are necessary for the store to work; others may depend on your consent or browser settings.
You can adjust available cookie choices through the store’s privacy controls, if displayed, and through your browser. Blocking necessary cookies may prevent checkout or account features from working correctly.
8. Direct marketing
We send electronic marketing only where permitted by POPIA and other applicable law. You may unsubscribe using the link in an email or contact us to object. Opting out of marketing does not stop service messages needed for orders, security, returns or account administration.
We will not require consent to unrelated marketing as a condition of completing an ordinary purchase.
9. Retention and security
We retain personal information only for as long as reasonably needed for the purposes described above, including fulfilment, customer support, legal and tax records, fraud prevention and dispute resolution. Retention periods vary by record and legal requirement. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it.
We and our providers use reasonable technical and organisational safeguards appropriate to the information and risk. No online system is completely secure. You are responsible for keeping account credentials confidential and should contact us if you suspect unauthorised use.
10. Your rights
Subject to POPIA and other applicable law, you may ask us to:
- confirm whether we hold your personal information and provide access to it;
- correct or update inaccurate or incomplete information;
- delete or destroy information we are no longer authorised or required to keep;
- object to certain processing, including direct marketing;
- restrict certain processing or withdraw consent where processing relies on consent; and
- explain a decision on a request where applicable.
We may need to verify your identity and authority before acting. Some rights are limited where we must retain information by law, need it to complete a transaction, or require it to establish or defend a legal claim.
11. Children
The store is intended for adults able to enter a binding purchase agreement. We do not knowingly request personal information directly from a child without appropriate authorisation. A parent or guardian who believes a child provided information unlawfully should contact us.
12. Complaints and policy changes
Please contact us first so we can try to resolve a privacy concern. You may also lodge a complaint with the Information Regulator South Africa.
We may update this notice when our services, providers or legal obligations change. The current version and effective date will remain published here. Material changes will be communicated where required.
Privacy request or question?
Tell us the right you want to exercise and provide enough information for us to locate the relevant records. Do not send passwords or full payment details.
Contact Velvet Curl