Privacy Policy

Privacy Policy

This Privacy Policy explains how Ashe Hair Design (Pty) Ltd (“we”, “us”, “our”) collects, uses,
stores, shares, and protects your Personal Information when you visit or make a purchase from our website
(the “Site”) and related services (the “Service”).

We process Personal Information in accordance with the Protection of Personal Information Act 4 of 2013
(“POPIA”) and other applicable South African laws.

1. Acceptance

By visiting our Site and/or purchasing from us, you agree to this Privacy Policy and the processing of your
Personal Information as described here. If you do not agree, please do not use the Site.

2. Personal Information we collect

We may collect the following categories of Personal Information (depending on how you interact with us):

• Identity & contact details: name, email address, phone number.
• Delivery details: physical address, city, province, postal code.
• Order & account details: products purchased, order history, returns and support interactions.
• Technical & usage data: IP address, browser type/version, device identifiers, pages visited, time spent, referring URLs.

3. Payment information

We do not store your credit/debit card details on our servers. Payment processing is handled by our payment
gateway providers.

4. How we use your Personal Information

We use your Personal Information to:

• process orders, payments (via payment providers), deliveries, returns, and customer support;
• create and manage your account (if you register one);
• communicate with you about your orders, service messages, and support queries;
• prevent fraud, misuse, and security incidents;
• improve our Site, user experience, products, and marketing effectiveness; and
• comply with legal obligations and enforce our terms.

5. Lawful basis and minimality

We process Personal Information only where there is a lawful basis to do so (for example: performance of a
contract when fulfilling an order, compliance with law, legitimate interests such as fraud prevention, or
consent where required). We aim to collect only the Personal Information that is reasonably necessary for the
purposes above.

6. Sharing your Personal Information

We may share your Personal Information with:

• employees and authorised operators who need it to perform their duties (e.g., customer service);
• service providers (operators) who help run our business (e.g., website hosting, analytics,
  marketing tools, payment gateways, IT support, couriers and delivery partners);
• suppliers where required to fulfil your order (only to the extent necessary); and
• law enforcement / regulators / courts where disclosure is required by law or reasonably necessary
  to protect rights, investigate fraud, or address unlawful activity.

Where third parties process Personal Information on our behalf, we require appropriate confidentiality and
security obligations consistent with POPIA.

7. Cookies and tracking technologies

We use cookies and similar technologies (such as tags and scripts) to operate the Site, remember preferences,
understand usage, and improve performance. Your browser settings may allow you to refuse or delete cookies.
If you disable cookies, parts of the Site may not function correctly.

8. Analytics

We may use analytics tools (such as Google Analytics) to understand how visitors use the Site. These tools may
collect usage and technical data. You can manage your cookie preferences in your browser settings.

9. Security

We take reasonable technical and organisational measures to protect Personal Information against loss,
unauthorised access, or unlawful processing. However, no method of transmission over the internet or electronic
storage is completely secure, and we cannot guarantee absolute security.

We cannot be held responsible for security breaches occurring on your own device (computer, phone, or other
device used to access the Site).

10. Data retention

We retain Personal Information only for as long as necessary to fulfil the purposes described in this Privacy
Policy, unless a longer retention period is required or permitted by law (for example, for tax, accounting,
and audit requirements).

11. Your rights

Subject to applicable law, you may request to access, correct, update, or delete your Personal Information,
object to processing in certain circumstances, or withdraw consent where processing is based on consent.

12. Cross-border transfers

Some of our service providers may store or process data outside South Africa (for example, hosting and
analytics providers). Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place
consistent with POPIA.

13. Country of domicile

This Site is hosted, controlled, and operated from South Africa and is governed by South African law.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page, and the
updated policy will apply from the date of publication.

15. Contact us

If you have any queries about this Privacy Policy, need further information about our privacy practices, wish
to withdraw consent, exercise preferences, or access/correct your Personal Information, please contact us:

Email: jacky@ashehairdesign.co.za