Privacy Policy

About this policy

Beatific Haven (“we”, “us” or “our”) is responsible for personal information processed for the operation of this website and our customer services.

This policy applies to www.beatifichaven.co.za and related communications with our team. It is intended to explain our handling of personal information under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”).

For privacy enquiries, please email info@beatifichaven.co.za and mark your message “Privacy enquiry”.

Information we collect

Depending on how you interact with us, we may collect:

• Contact details: your name, email address and telephone number.
• Order details: billing and delivery addresses, products ordered, transaction references and order history.
• Account information: information you provide when creating or managing an account, where this feature is used.
• Correspondence: messages, enquiries and information supplied for customer support, returns or refunds.
• Technical information: IP address, browser and device information, website activity and security logs, depending on the services enabled on the website.

We generally collect information directly from you. We may also receive payment confirmations, delivery updates and related transaction information from service providers involved in your order.

Providing information is generally voluntary. However, we may be unable to process an order, arrange delivery or respond to a request without the information necessary for that purpose.

Please do not send medical records, identity documents or other sensitive information unless specifically requested for a lawful and necessary purpose.

How we use your information

We use relevant personal information to:

• Process orders, payments, deliveries and refunds.
• Manage customer accounts and provide support.
• Communicate about orders and service enquiries.
• Maintain website functionality and security.
• Investigate suspected fraud or misuse.
• Meet accounting, tax and other legal obligations.
• Send permitted marketing communications, where applicable and subject to your choices.

Depending on the circumstances, processing may be necessary to conclude or perform a contract with you, comply with a legal obligation, protect a legitimate interest recognised by POPIA, or take place with your consent.

Where we rely on consent, you may withdraw it. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Sharing information & international transfers

Personal information may be shared where necessary with providers supporting our business, including:

• Payment providers and financial institutions.
• Couriers and delivery providers.
• Website hosting, maintenance, security and communication providers.
• Professional advisers or authorities where disclosure is legally required or justified.

We limit disclosures to information relevant to the purpose. Where a provider processes information on our behalf as an operator, appropriate contractual confidentiality and security requirements must apply.

Payment providers may collect payment information directly and process it under their own privacy notices. The information involved depends on the payment method you select.

If a service involves transferring personal information outside South Africa, the transfer must meet the requirements of section 72 of POPIA, including an applicable lawful basis and appropriate protection.

Links to external services, including WhatsApp, take you to services governed by their own privacy policies.

Cookies & similar technologies

This website may use cookies and similar technologies to support shopping-cart sessions, account login, security and website preferences.

If optional analytics or advertising tools are enabled, their purposes and any required choices should be explained when those tools are introduced. Where consent is required, the relevant processing must depend on that consent.

You can manage or delete cookies through your browser settings. Blocking cookies needed for the store may affect functions such as your basket or account login.

This policy does not itself enable analytics, advertising tools or a cookie-consent mechanism.

Marketing communications

If we send electronic direct marketing, we will do so only where permitted by POPIA, including with consent or under the applicable existing-customer provisions.

You may object to direct marketing or unsubscribe at any time using the method provided in the message, or by contacting info@beatifichaven.co.za.

Opting out of marketing does not stop necessary communications about an order, a refund or a customer-service request.

Security & retention

We are required to use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure or other unlawful processing.

No online system can guarantee absolute security. Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will follow POPIA’s notification requirements, including notification to the Information Regulator and affected individuals where required.

Information is retained for as long as necessary for its purpose, or as otherwise permitted or required by law. Relevant factors include order fulfilment, tax and accounting requirements, dispute resolution and the need to establish or defend legal rights.

When information is no longer lawfully required, it should be securely deleted, destroyed or de-identified.

Your privacy rights

Subject to applicable legal conditions and exceptions, you may:

• Ask whether we hold personal information about you and request access to it.
• Request correction of inaccurate, incomplete or misleading information.
• Request deletion or destruction of information where the applicable legal requirements are met.
• Object to processing on grounds recognised by POPIA.
• Withdraw consent where processing relies on your consent.
• Object to direct marketing.
• Lodge a complaint with the Information Regulator.

Send requests to info@beatifichaven.co.za. We may need reasonable proof of identity before releasing or changing personal information.

Some records must be retained despite a deletion request, for example where retention is required by law. We will explain applicable limitations when responding.

Children’s personal information

Processing children’s personal information is subject to additional protections under POPIA. Where such processing is necessary, it must have a permitted legal basis, including consent from a competent person where required.

If you believe a child has supplied personal information inappropriately, please contact us so we can investigate.

Changes to this policy

We may update this policy to reflect changes in our services, processing activities or legal obligations. The revised policy will be published on this page.

Where a change requires a separate notice or fresh consent, we will take the steps required by applicable law.