Last updated: 06 March 2026

This Privacy Policy explains how Fossette Aesthetics (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit or shop on [your website domain], contact us via WhatsApp, or use our services.

We comply with the Protection of Personal Information Act 4 of 2013 (POPIA), which sets minimum requirements for lawful processing and protection of personal information.

1) Responsible Party (Who we are)

Business name: Fossette Aesthetics
Email: info@fossette.co.za
WhatsApp: 082 744 4631

Information Officer (POPIA): Marcell Van Antwerpen

2) What personal information we collect

Depending on how you interact with us, we may collect:

Identity & contact details: name, email address, phone/WhatsApp number, delivery/billing address.
Order & account details: products purchased, order history, cart contents, wishlists, customer notes.
Payment-related information: payment status, transaction reference, limited payment metadata. We do not store full card details on our servers. (Payments are processed by our payment providers.)
Customer support messages: emails, WhatsApp messages, and any information you share when requesting advice.
Technical data: IP address, device/browser type, cookie identifiers, pages viewed, referral source.
Marketing preferences: opt-in/opt-out status, communication history.

Special personal information (health-related): We don’t ask for medical records. If you voluntarily share sensitive details (e.g., about hair loss/skin concerns) in WhatsApp/email, we treat it as confidential and only use it to assist you.

3) Why we collect it (Purposes)

We use your information to:

• Process and deliver orders (payments, delivery, order updates)

• Create and manage customer accounts

• Provide product guidance via WhatsApp/email (routine recommendations)

• Prevent fraud and secure our website and services

• Communicate about orders, delivery, returns, and service messages

• Improve the website experience and performance (analytics, troubleshooting)

• Send marketing communications only if you opt in (or where otherwise permitted by law)

4) Lawful grounds for processing (POPIA)

We process personal information where it is necessary to:

• Perform a contract with you (e.g., to fulfil your order)

• Comply with legal obligations (tax, accounting, consumer protection)

• Pursue our legitimate interests (e.g., security, fraud prevention, service improvement)

• With your consent (e.g., marketing communications)

5) Sharing your information (Operators & third parties)

We only share information with parties who need it to provide services to you, such as:

• Payment processors: Yoco and/or PayFast (to process payments)

• Courier/shipping providers: to deliver orders and provide tracking updates

• Website/hosting & IT providers: hosting, backups, site maintenance, security

• Analytics & marketing tools: e.g., Google Analytics, Meta Pixel (if enabled)

• Professional advisers: auditors, accountants, lawyers (where necessary)

We require service providers (operators) to handle personal information securely and only for the agreed purpose.

6) Cookies and tracking

We use cookies and similar technologies to:

• Make the site work (cart, login, preferences)

• Improve performance and user experience

• Measure traffic and behaviour (analytics)

• Support marketing (if enabled)

You can control cookies in your browser settings. Disabling cookies may affect checkout or site features.

7) Marketing and communications

• You can opt in to receive marketing (email/SMS/WhatsApp where applicable).

• You can opt out at any time by using the unsubscribe link or contacting us at [email].

• We do not sell your personal information to third parties.

8) Data retention

We keep personal information only as long as needed for the purposes above, including:

• Order and tax records (as required by law)

• Account data (until you delete your account or request deletion, subject to legal retention)

• Support conversations (for service quality and recordkeeping)

When no longer required, information is securely deleted or anonymised.

9) Security safeguards

We take reasonable technical and organisational measures to protect your personal information, including access controls, secure hosting, encryption where appropriate, and limiting access to those who need it.

No system is 100% secure, but we continuously work to protect your information.

10) Your rights under POPIA

You have the right to:

• Request access to your personal information

• Request correction or deletion (where lawful)

• Object to processing in certain circumstances

• Withdraw consent (where processing is based on consent)

• Complain to the Information Regulator

To exercise your rights, contact: [privacy@domain]

11) Cross-border transfers

Some service providers (e.g., hosting, email, analytics) may store or process information outside South Africa. Where cross-border transfers occur, we take steps to ensure appropriate safeguards are in place.

12) Children’s privacy

Our website is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us.

13) Changes to this policy

We may update this policy from time to time. The “Last updated” date will reflect the latest version. Material changes will be posted on this page.

14) Complaints

If you are unhappy with how we handle your personal information, please contact us first at info@fossette.co.za

You may also lodge a complaint with South Africa’s Information Regulator.
Support email: info@fossette.co.za
Telephone: 082 744 4631