Privacy policy

Privacy Policy

Effective date: 14 August 2026

At swiitchbeauty, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights under the Protection of Personal Information Act, 4 of 2013 (POPIA). By using our website and purchasing from us, you agree to the practices described below.

1. WHO WE ARE

swiitchbeauty is the responsible party for your personal information as defined under POPIA. You can reach us at info@swiitchbeauty.com

2. WHAT INFORMATION WE COLLECT

We collect the following categories of personal information:

  1.  Information you provide directly

  • Full name

  • Email address and phone number

  • Delivery address and billing address

  • Date of birth (only if you choose to provide it for birthday rewards)

  • Order history and purchase records

  1.  Information collected automatically

  • Browsing behaviour on our website (pages visited, products viewed)

  • Device and browser information

  • Cookie data (see Section 6 below)

3. WHY WE COLLECT YOUR INFORMATION

We only collect personal information for specific, lawful purposes:

  • Processing and fulfilling your orders, including sending order confirmations and delivery updates

  • Managing your customer account

  • Sending you marketing emails about products, promotions, and news, only with your consent, or as permitted for existing customers under POPIA Section 69

  • Sending you a birthday discount or reward, if you have provided your date of birth and consented to this

  • Analysing store performance and improving your shopping experience

  • Complying with legal obligations

We will not use your information for any purpose that is incompatible with the purposes listed above without notifying you first.

4. WHO WE SHARE YOUR INFORMATION WITH

We share your personal information only where necessary, and only with the following categories of third parties:

  1. Shipping and courier partners

We share your name, contact details, and delivery address with our courier and logistics providers to fulfil your order.

  1.   Payment processors

Payment transactions on our store are processed by third-party payment providers. We do not store your full card or banking details. Payment providers process your data under their own privacy policies and security standards.

  1.   Marketing platforms

We use third-party marketing tools (such as email and SMS platforms) to send you communications you have opted into. These platforms may process your name, email address, and phone number on our behalf.

We do not sell your personal information to any third party.

5. How Long We Keep Your Information

  • Order records are retained for a minimum of 5 years to comply with South African tax and accounting requirements

  • Marketing consent records are kept for as long as you remain an active subscriber, and are retained for as long as required to demonstrate compliance with POPIA and other applicable legal obligations 

  • Birthday data is retained for as long as your account is active, or until you withdraw consent

  • You may request deletion of your personal information at any time (see Section 7)

6. Cookies

Our website uses cookies, small text files stored in your browser, to remember your preferences, keep your shopping cart active, and gather analytics about how our store is used.

By continuing to use our website, you consent to our use of cookies. You may manage or disable cookies through your browser settings, though this may affect the functionality of our store.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

  • The right to know what personal information we hold about you

  • The right to access your personal information

  • The right to request correction of inaccurate information

  • The right to request deletion of your personal information, subject to legal retention requirements

  • The right to object to the processing of your personal information for direct marketing purposes

  • The right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

  • The right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please follow the steps below:

Step 1 

Contact us at info@swiitchbeauty.com with the subject line including POPIA

Step 2

State the right you want to exercise

8. Direct Marketing & Opting Out

We will only send you marketing emails or SMS messages if you have given us consent, or if you are an existing customer and we are marketing similar products to those you have purchased, as permitted under POPIA Section 69.

You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any marketing email

  • Emailing us at info@swiitchbeauty.com

Opting out of marketing will not affect transactional communications related to your orders.

9. Birthday Data

If you choose to share your date of birth with us, we use this solely to send you a birthday discount or reward. Providing your birthday is entirely optional and is not required to make a purchase.

You may withdraw consent for birthday communications or request deletion of your birthday data at any time by contacting us.

10. Data Security

We take reasonable technical and organisational steps to protect your personal information against unauthorised access, loss, or misuse. Our online store is built and hosted on Shopify Inc., a leading ecommerce platform. Shopify is certified PCI DSS Level 1 compliant (the highest standard for payment card security), uses SSL/TLS encryption across all store pages, and undergoes regular independent security audits. Shopify acts as a data processor on our behalf, meaning they process your personal information only as directed by us and in accordance with their Data Processing Agreement. You can review Shopify’s privacy practices at https://www.shopify.com/za/legal/privacy

In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

11. Cross-Border Transfers

Some of our third-party service providers may process or store your data outside of South Africa. In particular, Shopify Inc. is headquartered in Canada and stores data on servers located in the United States and other jurisdictions. Canada has been recognised as providing an adequate level of data protection. For transfers to the United States and other countries, Shopify relies on appropriate safeguards including standard contractual clauses. Our marketing platforms and other tools may similarly operate outside South Africa. Where cross-border transfers occur, we take steps to ensure your information receives a level of protection consistent with POPIA requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

13. Contact & Complaints

For any privacy-related queries, requests, or complaints, please contact us:

Email: info@swiitchbeauty.com

Website: www.swiitchbeauty.com


If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

Website: www.inforegulator.org.za

Email: inforeg@justice.gov.za