Privacy Policy

When you place an order, we collect the details you give us at checkout:

• Full name, email address and phone number
• Delivery address, suburb, city, province, postal code and any delivery notes
• Order contents, order value and order history

If you enquire about wholesale or bulk orders via WhatsApp, phone, email or the contact form, we receive whatever details you choose to share in that conversation (typically your name, contact details and the nature of your enquiry).

We also automatically receive limited technical information when you visit the Site, such as your device/browser type and general usage of the Site, through standard web server logs. We do not currently use this information to identify you personally or to build a profile of you.

We do not collect or store your card, EFT or banking details. Payment is handled entirely by Payfast on their own secure, PCI-DSS compliant page, and your payment details never reach our servers.

We collect and process your personal information for the following purposes:

• To process, confirm, pack and deliver your order (necessary to perform our contract with you)
• To send you order confirmation and status emails (necessary to perform our contract with you)
• To send you marketing emails (news, offers, reminders about items you left in your cart or wishlist) only if you have agreed to receive them. You can withdraw that agreement at any time using the unsubscribe link in every marketing email. Unsubscribing does not stop your order emails
• To email you once when a sold-out product you asked about is back in stock, if you ask us to. This is separate from marketing
• To respond to enquiries, including wholesale/bulk requests (our legitimate business interest, or your consent by contacting us)
• To keep records required for accounting, tax and consumer-protection purposes (a legal obligation we’re subject to)
• To detect and prevent fraud or misuse of the Site (our legitimate interest and yours)

We do not sell, rent or trade your personal information to anyone, for any purpose, ever.

We only share what’s necessary to fulfil your order, with the following service providers, each of whom is contractually or by design limited in how they may use your information:

• Payfast (payment processing): receives your name, email and order total to process payment. Your card/banking details are captured and held by Payfast directly and are never shared with us.
• Brevo (email): receives your name and email address to send your order confirmation and, only if you have agreed to marketing, our marketing emails, together with the preferences you chose to share with us (for example the kind of fragrance you like).
• The Courier Guy (delivery): receives your name, phone number and delivery address to get your order to you.
• Supabase (database hosting): securely stores your order information on our behalf.

These providers may store or process information on servers located outside South Africa. Where this happens, we only use providers who maintain security and privacy standards consistent with, or stricter than, what POPIA requires.

We may also disclose your information where required by law, court order, or to protect our legal rights, safety, or the safety of others.

Our site uses your browser’s local storage to remember what’s in your cart between visits. This is essential for the Site to function and does not track you across other websites. At the time of writing, we do not use analytics or advertising cookies. Should that change in future, the cookie banner on our site will let you accept or decline before any non-essential cookie is set, and this policy will be updated to reflect it.

If you give us your email address in a form on the Site (for example to join our email list or to be told when a product is back in stock, or when you enter it at checkout), we remember it on your device. While it is remembered, we also keep a small record of what is in your cart on our server for a limited time (the product, size and quantity only: no prices, no address and no payment details) so that we can restore your cart for you. Having a cart record does not give us permission to email you: we only send marketing, including a reminder about your cart or wishlist, if you have agreed to it.

If you have agreed to marketing, we also note which products you look at, add to or remove from your cart, and which items you save, and we use that together with your orders to make our emails more relevant to you. Anyone who has not given us an email address is not identified and none of this is stored about them: what they look at stays in their own browser tab and is forgotten when it is closed.

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration or disclosure, including restricted access to our systems and secure, reputable third-party service providers. No method of transmission or storage over the internet is 100% secure, and while we work hard to protect your information, we cannot guarantee its absolute security.

We retain order and transaction records for as long as required by South African tax, accounting and consumer-protection law (generally several years after the transaction). If you contact us with a general enquiry that doesn’t result in an order, we keep that message only as long as reasonably needed to respond to you and for our records.

Subject to applicable law, you have the right to:

• Ask what personal information we hold about you and how we use it
• Ask us to correct inaccurate or outdated information
• Ask us to delete your information, subject to our legal obligation to keep order/tax records for the required retention period
• Object to how we process your information, or ask us to restrict certain processing
• Withdraw any consent you’ve given us, at any time, without affecting processing already carried out
• Lodge a complaint with South Africa’s Information Regulator if you believe we’ve mishandled your information

To exercise any of these rights, contact us using the details below. We’ll respond within a reasonable time and in line with POPIA’s requirements. If you’re not satisfied with our response, you may contact the Information Regulator of South Africa (inforegulator.org.za).

The Site is not directed at, and we do not knowingly collect personal information from, children under the age of 18. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We do not currently send marketing or promotional emails. If we introduce this in future, we’ll only do so with your consent (or another valid legal basis), and every marketing communication will include a clear way to opt out at any time.

The Site may contain links to third-party websites (for example, WhatsApp or our social media pages). We’re not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing them with any information.

We may update this policy from time to time as our business, the services we use, or the law changes. The “last updated” date at the top of this page will always reflect the most recent version. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, contact us at oandeptyltd@gmail.com or +27 21 839 4314.

191 Voortrekker Road, Parow, Cape Town, 7500, Western Cape