Nathè Beauty Privacy Policy

Effective date: 18 October 2026

Nathè Beauty respects your privacy. This policy explains how we collect, use, share and protect personal information when you visit nathebeauty.co.za, contact us, purchase a wig or book a service.

1. Who is responsible for your information?

The business responsible for your personal information is: Nathe Beauty

Business address: 87 Austell Road, Heathfield, Cape Town, 7945
Email: hello@nathebeauty.co.za
WhatsApp: +27 61 523 1652

2. Information we collect

Depending on your interaction with us, we collect information such as:

• Your name, telephone number, email address and delivery address.
• Order details, wig preferences, measurements and appointment information.
• Payment confirmations and transaction references.
• Messages, enquiries, feedback and information relating to returns or complaints.
• Photographs or inspiration images you choose to send us.

Our hosting and technology providers may also process technical information, such as your IP address, browser details and website access logs.

Please avoid sending identity documents, full payment-card details or sensitive medical information unless specifically necessary and requested through an appropriate secure process.

3. Why we use your information

We use relevant personal information to:

• Answer enquiries and provide quotes.
• Process and fulfil orders, arrange deliveries and manage appointments.
• Communicate about payments, order progress and service arrangements.
• Handle returns, refunds and complaints.
• Maintain business records, meet legal obligations and protect against fraud.

We rely on the appropriate lawful basis for each activity, including taking steps to enter into or fulfil an agreement, complying with legal duties, pursuing legitimate interests where permitted, or obtaining consent where required.

Providing information is generally voluntary. However, without necessary contact, order or delivery details, we may be unable to fulfil your request.

4. Who receives your information?

Where necessary, information may be shared with:

• Couriers handling your delivery.
• Payment providers handling your transaction.
• Website hosting, email and communication providers.
• Professional advisers or authorities where legally required.

Our website is hosted through HostAfrica. When you contact us through WhatsApp or Instagram, those platforms also process information under their own privacy policies.

We limit disclosures to what is necessary for the relevant purpose and require appropriate confidentiality and security protections where applicable.

5. Customer photographs and marketing

Sending us a photograph for a consultation, order or complaint does not give us permission to publish it. We will request separate permission before using identifiable customer photographs or testimonials in our marketing.

We will send promotional electronic messages only where permitted by law. You can opt out using the instructions in the message or by contacting us. Opting out of marketing does not stop essential communications about an existing order.

6. Storage, security and retention

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse or disclosure.

We retain information only for as long as reasonably necessary for the purpose collected, applicable recordkeeping duties or legitimate dispute-resolution needs. Information is then securely deleted, destroyed or de-identified as appropriate.

Where a security compromise requires notification, we will notify the Information Regulator and affected individuals as required by law.

7. Information processed outside South Africa

Some technology providers may process information outside South Africa. Any such transfer must meet POPIA’s applicable requirements.

8. Your privacy rights

Subject to applicable legal requirements, you may request access to your personal information, correction of inaccurate information, or deletion of information we are no longer entitled to retain.

You may also object to certain processing, withdraw consent where processing relies on consent, and opt out of direct marketing. Withdrawing consent does not invalidate earlier lawful processing.

Contact us using the details above. We may request reasonable identity verification before responding.

You may lodge a complaint with the Information Regulator of South Africa at POPIAComplaints@inforegulator.org.za.

9. Changes to this policy

We may update this policy when our practices or legal obligations change. The updated version and effective date will appear on our website. Where required, we will provide additional notice or obtain fresh consent.