Privacy policy


Last updated: 12 November 2026

1. Introduction


At Perfume Box SA, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Innovative Cosmetic Solutions (Pty) Ltd, operating as Perfume Box SA, collects, uses, stores, protects and shares your personal information when you visit our website, create an account, place an order, contact us or otherwise interact with our services.

We process personal information in accordance with applicable South African data protection laws, including the Protection of Personal Information Act 4 of 2013 (POPIA).

Our online store is powered by Shopify, which provides the e-commerce platform that allows us to sell our products and manage customer orders.

By using our website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.


2. Who We Are


For the purposes of POPIA, Innovative Cosmetic Solutions (Pty) Ltd is the responsible party in relation to the personal information collected and processed through the Perfume Box SA website, subject to the separate responsibilities of our service providers.

Our company details are:

Company Name: Innovative Cosmetic Solutions (Pty) Ltd
Trading As: Perfume Box SA
Registration Number: 2019/356349/07
VAT Number: 4240290298
Physical Address: 23, Longmeadow Business Estate, Nguni Drive, Modderfontein, 1601, South Africa
Telephone: 011 608 3633
Email: hello@perfumebox.co.za
Website: www.perfumebox.co.za

For privacy-related questions or requests concerning your personal information, please contact us using the details above.


3. Personal Information We Collect


The personal information we collect depends on how you interact with our website and services.

This may include the following categories:


3.1 Personal and Contact Information

When you place an order, create an account or contact us, we may collect:

  • Your full name.
  • Email address.
  • Contact telephone number.
  • Billing address.
  • Delivery address.
  • Account details and preferences.


3.2 Payment and Transaction Information

When you make a purchase, we may collect information relating to your transaction, including:

  • Products purchased.
  • Order numbers and transaction details.
  • Payment method selected.
  • Payment confirmation and transaction status.
  • Billing information required to process your order.

Payments are processed through the relevant third-party payment provider. Depending on the payment method used, your full payment card or banking details may be collected and processed directly by that provider. We do not intend to store full payment card details on our own systems.


3.3 Website and Device Information

When you visit our website, certain information may be collected automatically, including:

  • IP address.
  • Browser type and version.
  • Device type and operating system.
  • General location information derived from your IP address.
  • Pages visited and products viewed.
  • Website activity, browsing behaviour and interaction with our store.
  • Referral sources and website usage information.


3.4 Communication Information

If you contact us through email, telephone, website forms or other communication channels, we may collect the information you provide, including your enquiry, feedback, order-related questions and any supporting information you choose to share.


4. How We Collect Personal Information


We may collect personal information through the following methods:

  • Directly from you: When you create an account, place an order, complete a form, subscribe to marketing communications or contact us.
  • Automatically through our website: Through cookies, analytics tools and similar technologies when you browse or interact with our website.
  • Through Shopify: Our e-commerce platform may collect and process information relating to your website activity, account, orders and transactions.
  • Through service providers: We may receive relevant information from payment providers, courier companies, website service providers and other third parties involved in providing our services.
  • Through business partners: Where applicable and permitted by law, we may receive information from partners who assist us with our business operations.


5. Why We Collect and Use Your Personal Information


We collect and process personal information only where we have a lawful reason to do so under POPIA.

Depending on how you interact with us, we may use your information for the following purposes:

 

5.1 Processing and Fulfilling Orders

To:

  • Process and confirm your purchases.
  • Verify payments and prevent fraudulent transactions.
  • Prepare, pack and dispatch your orders.
  • Arrange delivery through our courier partners.
  • Provide order confirmations and delivery updates.
  • Handle returns, refunds and exchanges.

 

5.2 Customer Support and Communication

To:

  • Respond to enquiries and requests.
  • Assist with orders and delivery-related questions.
  • Resolve complaints and customer service issues.
  • Communicate important information about your purchases or account.

 

5.3 Website Operations and Improvements

To:

  • Operate and maintain our website.
  • Improve website functionality and performance.
  • Understand how customers interact with our website.
  • Improve product information and the overall shopping experience.
  • Identify technical issues and maintain website security.

 

5.4 Marketing and Promotions

Where permitted by law, we may use your contact information to send you marketing communications, product updates, promotions and special offers.

We will obtain your consent where required by POPIA. Where the law permits marketing to existing customers in relation to our own similar products or services, we will provide a reasonable opportunity to opt out when collecting your details and in each marketing communication.

You can unsubscribe from promotional emails at any time using the unsubscribe link included in the email or by contacting us at hello@perfumebox.co.za.

Opting out of marketing communications will not prevent us from sending essential transactional messages, such as order confirmations, payment notifications or delivery updates.

 

5.5 Security and Fraud Prevention

To:

  • Protect our website and customers.
  • Verify transactions and identify suspicious activity.
  • Prevent fraud, unauthorised access and misuse of our services.
  • Maintain the security and integrity of our systems.

 

5.6 Legal and Regulatory Requirements

We may process personal information where necessary to:

  • Comply with applicable South African laws and regulations.
  • Maintain financial, tax and transaction records.
  • Respond to lawful requests from regulatory authorities or law enforcement.
  • Establish, exercise or defend legal claims.
  • Enforce our website terms, policies and agreements.

 

6. Cookies and Similar Technologies

 

Our website uses cookies and similar technologies to support its functionality and improve your browsing experience.

Cookies are small text files stored on your device when you visit a website. They help websites remember certain information about your visit.

We may use the following types of cookies:

  • Essential Cookies: Required for basic website functionality, including shopping cart features, checkout processes and website security.
  • Functional Cookies: Help remember preferences and settings to improve your browsing experience.
  • Analytics Cookies: Help us understand how visitors use our website, including which pages are visited and how customers interact with our store.
  • Marketing Cookies: May be used to support advertising, promotional activities and the delivery of relevant marketing content.

Some cookies may be placed by Shopify or third-party services that support our website.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website, including shopping cart and checkout features.

Where required by applicable law, we will seek the necessary consent before using non-essential cookies or similar tracking technologies.

 

7. Sharing Your Personal Information

 

We do not make your personal information available to third parties without a legitimate reason.

However, we may share relevant information with trusted third parties where necessary to operate our business, provide our services or comply with legal obligations.

These parties may include:

 

7.1 Shopify

Our website is hosted and powered by Shopify. Shopify processes personal information to provide the e-commerce platform, support transactions, maintain website functionality and provide related services.

You can read more about Shopify's privacy practices here:

Shopify Privacy Policy

 

7.2 Payment Providers

We share relevant information with payment service providers to process transactions, verify payments and prevent fraudulent activity.

These providers process payment information in accordance with their own privacy and security policies.

 

7.3 Courier and Delivery Companies

We share the information required to fulfil your order with our courier and delivery partners. This may include your name, contact number, delivery address and relevant order details.

 

7.4 Website and Technology Service Providers

We may share information with service providers who assist us with website hosting, maintenance, analytics, customer support, data storage, security and other business operations.

 

7.5 Marketing and Advertising Providers

Where applicable and permitted by law, we may share limited information with marketing, advertising and analytics providers to support our promotional activities and understand the effectiveness of our marketing.


7.6 Legal and Regulatory Authorities

We may disclose personal information where required or authorised by law, including in response to lawful requests from courts, regulatory authorities or law enforcement agencies.

We require service providers who process personal information on our behalf to handle it appropriately and protect it in accordance with applicable data protection requirements.

 

8. International Transfers of Personal Information

 

Our website is powered by Shopify, and some of the service providers we use may operate or store information in countries outside South Africa.

As a result, your personal information may be transferred to, stored or processed in other countries where these service providers operate.

Where personal information is transferred outside South Africa, we take reasonable steps to ensure that the transfer complies with Section 72 of POPIA.

This may include ensuring that the receiving country provides an adequate level of protection, that appropriate agreements or safeguards are in place, or that another lawful basis for the transfer applies.

For more information about how Shopify processes information internationally, please refer to its Privacy Policy.

 

9. How We Protect Your Personal Information

 

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, disclosure or destruction.

These measures may include:

  • Secure website and platform infrastructure.
  • Access restrictions for personal information.
  • Appropriate security measures and monitoring.
  • The use of trusted service providers.
  • Reasonable procedures for handling and protecting customer information.
  • Although we take reasonable steps to safeguard your information, no electronic transmission or storage system can be guaranteed to be completely secure.

If a security compromise occurs that requires notification under POPIA, we will take the appropriate steps to notify affected individuals and the Information Regulator as required by law.


10. How Long We Keep Your Personal Information

 

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The length of time we retain information depends on factors such as:

  • The nature of the information collected.
  • The purpose for which it was collected.
  • Whether you have an active customer account.
  • Our ongoing business and customer service requirements.
  • Applicable financial, tax and record-keeping obligations.
  • The need to resolve disputes or enforce agreements.

When personal information is no longer required, we will take reasonable steps to delete, destroy or de-identify it in accordance with applicable law.

 

11. Your Rights Under POPIA

 

Under POPIA, you have certain rights regarding the personal information we hold about you.

Subject to applicable legal requirements and exceptions, these include the right to:

  • Request Access: Ask whether we hold personal information about you and request access to that information.
  • Request Correction: Ask us to correct or update information that is inaccurate, incomplete, outdated or misleading.
  • Request Deletion: Request the deletion or destruction of personal information that we are no longer authorised to retain.
  • Object to Processing: Object to certain types of processing where the requirements of POPIA are met.
  • Object to Direct Marketing: Object to the use of your personal information for direct marketing purposes.
  • Withdraw Consent: Withdraw consent where we rely on your consent as the lawful basis for processing your information. This will not affect processing that took place lawfully before the withdrawal.
  • Lodge a Complaint: Submit a complaint to the Information Regulator if you believe your personal information has been processed unlawfully.

To exercise any of these rights, please contact us at hello@perfumebox.co.za.

We may need to verify your identity before responding to a request to ensure that your personal information is protected.

Certain information may need to be retained where required by law or where another lawful reason for retaining it applies.


12. Direct Marketing and Communication Preferences

 

We may send you promotional emails or other marketing communications where permitted by applicable law.

You may opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in a promotional email.
  • Contacting us at hello@perfumebox.co.za.
  • Once you unsubscribe, we will stop sending you promotional communications, subject to any reasonable processing time required to update our records.

Please note that you may still receive essential service-related communications concerning purchases, payments, deliveries, returns or customer support.

 

13. Children's Personal Information

 

Our website and online store are intended for use by individuals who are legally able to enter into transactions under applicable law.

We do not knowingly collect personal information from children under the age of 18 without the required consent from a competent person, as defined under POPIA.

If you believe that a child has provided us with personal information without the necessary consent, please contact us at hello@perfumebox.co.za so that we can investigate and take appropriate action.

 

14. Third-Party Websites

 

Our website may contain links to third-party websites, social media platforms or external services.

These websites operate independently of Perfume Box SA and may have their own privacy policies and data protection practices.

We are not responsible for the privacy practices, content or security of external websites. We encourage you to review their privacy policies before providing personal information or using their services.

 

15. Complaints and the Information Regulator

 

If you have concerns about how we collect, use or process your personal information, we encourage you to contact us first so that we can investigate and address your concerns.

You also have the right to lodge a complaint with the South African Information Regulator if you believe your personal information has been processed unlawfully or your rights under POPIA have been infringed.

Information Regulator (South Africa)

Website: https://inforegulator.org.za/
Email: POPIAComplaints@inforegulator.org.za
General Enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa.

You can also access the Information Regulator's online services and complaint procedures through its official website.

 

16. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes to our business operations, website functionality, service providers or applicable legal requirements.

Any updates will be published on this page, together with the revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

 

17. Contact Us

 

If you have any questions about this Privacy Policy, how we handle your personal information or would like to exercise your rights under POPIA, please contact us:

Innovative Cosmetic Solutions (Pty) Ltd
Trading As: Perfume Box SA
Email: hello@perfumebox.co.za
Telephone: 011 608 3633
Address: 23, Longmeadow Business Estate, Nguni Drive, Modderfontein, 1601, South Africa

We are committed to handling your personal information responsibly and addressing any privacy-related concerns you may have.