Privacy policy

At Create Beauty, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, place an order, or contact us. Create Beauty is operated by CREATE BEAUTY STUDIO (PTY) LTD (registration number 2025/184931/07), Co.Space Pretoria, Unit D5, 11 Havelock Road, Willow Manor Park, Pretoria, 0184, South Africa.

  1. What Information We Collect

    When you browse our site or place an order, we may collect the following information:

    • Full name
    • Contact number
    • Email address
    • Delivery address
    • Billing address
    • Payment details (processed securely by third-party payment gateways)
    • Purchase history and communication records
    • Skin type, skin concerns and age range, where you voluntarily complete our skin quiz
    • Technical information such as IP address, browser type, device type and pages viewed

    We do not collect or store your credit card information on our servers.

  2. How We Use Your Information

    We use your information to:

    • Process and fulfil orders
    • Send order confirmations and delivery updates
    • Provide personalised product recommendations where you have requested them
    • Improve your experience on our website
    • Respond to customer service queries
    • Measure the performance of our website and advertising
    • Comply with legal obligations
  3. Sharing Your Information

    We only share your personal information with trusted third parties where necessary to deliver our services, such as:

    • Our courier partner, for order delivery
    • Payment gateways, for secure transaction processing
    • Shopify, which hosts our online store and processes orders on our behalf
    • Analytics and advertising providers, for measurement and reporting
    • IT service providers, for website maintenance

    We do not sell or rent your personal information to any third parties.

  4. Cross-Border Transfers

    Some of our service providers, including our store platform and analytics providers, store and process data on servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it is protected by laws or contractual terms that provide an adequate level of protection, as required by section 72 of POPIA.

  5. Data Storage and Protection

    We store your personal information securely using encryption and access controls. We take appropriate, reasonable technical and organisational measures to protect your data against loss, damage, misuse and unauthorised access, as required by section 19 of POPIA.

    If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.

  6. How Long We Keep Your Information

    We keep your personal information only for as long as it is needed for the purpose it was collected, or for as long as the law requires.

    • Order, invoice and transaction records: 5 years, in line with South African tax and company record-keeping requirements
    • Customer account and contact details: for as long as your account remains active, and up to 3 years after your last interaction with us
    • Marketing subscriber details: until you unsubscribe, and up to 12 months thereafter to honour your opt-out
    • Website analytics data: up to 26 months

    Once these periods lapse, we delete or de-identify the information.

  7. Your Rights

    Under South Africa's Protection of Personal Information Act (POPIA), you have the right to:

    • Access or request a copy of the personal information we hold about you
    • Update or correct your information
    • Request the deletion or destruction of your data, subject to certain legal obligations
    • Object to the processing of your personal information
    • Withdraw consent you have previously given, at any time
    • Lodge a complaint with the Information Regulator of South Africa

    To exercise any of these rights, contact us at info@createbeauty.co.za. We will respond within a reasonable period, and ordinarily within 30 days.

    You may also contact the Information Regulator directly at enquiries@inforegulator.org.za or inforegulator.org.za.

  8. Cookies and Tracking Technologies

    Our website uses cookies and similar technologies (pixels, tags and local storage) to operate the store, remember your preferences, understand how the site is used, and measure our advertising.

    A cookie is a small text file placed on your device when you visit our website. Some cookies are strictly necessary for the site to function. Others help us understand how the site performs or measure our advertising, and are used on the basis of our legitimate interest in operating and improving our business, as permitted under section 11 of POPIA.

    Category Purpose Typical lifespan
    Strictly necessary Cart contents, checkout, secure login, fraud prevention Session to 12 months
    Preferences Remembering your region, language and recently viewed items Up to 12 months
    Analytics and performance Understanding which pages are visited and where the experience breaks Up to 24 months
    Marketing and advertising Measuring our advertising, showing relevant ads elsewhere, limiting repeat ads Up to 13 months

    Third parties that may set cookies on our site: Shopify (store platform, cart and checkout), Google Analytics and Google Ads (traffic measurement and advertising), and Meta, for Facebook and Instagram advertising measurement. Each provider processes data under its own privacy policy.

    Your choices. You can block or delete cookies at any time through your browser settings, and most browsers allow you to refuse third-party cookies by default. You can opt out of Google Analytics measurement using Google's browser add-on, and you can adjust advertising preferences in your Google and Meta account settings. Blocking strictly necessary cookies may prevent parts of the site, including the cart and checkout, from working.

    You may also object to the processing of your personal information for analytics or advertising purposes at any time by contacting us at info@createbeauty.co.za.

    Our website does not currently respond to Do Not Track browser signals.

  9. Marketing Communication

    We may occasionally send promotional emails or updates where you have opted in to receive them. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting us directly. Opting out of marketing does not stop transactional messages such as order confirmations and delivery updates.

  10. Children

    Our website and products are intended for customers aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

  11. Changes to This Policy

    We may update or modify this Privacy Policy from time to time. Any changes will be published on this page with a revised "Last updated" date.

  12. Information Officer

    Our Information Officer, appointed in terms of POPIA, is:

    Dr Anesu Madikane
    CREATE BEAUTY STUDIO (PTY) LTD
    Co.Space Pretoria, Unit D5, 11 Havelock Road, Willow Manor Park, Pretoria, 0184
    info@createbeauty.co.za
    +27 12 880 3356

  13. Contact Us

    For any questions regarding your privacy or how your data is handled, contact us at info@createbeauty.co.za or +27 12 880 3356.