SKINJOY

Privacy Policy

Last updated: 22 September 2026

1. Who we are

This Privacy Policy explains how Joubelation (Pty) Ltd, trading as SKINJOY, collects, uses, stores, and protects personal information when you use our online shop, website, checkout, and related services (the "Services").

We are registered in South Africa and our address is 70 Main Road, Paarl, Western Cape, 7646, South Africa. For privacy questions, contact us at info@skinjoy.shop.

2. South African privacy law

We aim to process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African law. This policy describes our current practices and does not replace any rights you may have under applicable law.

3. Information we collect

Depending on how you use the Services, we may collect:

  • Identity and contact details, such as your name, email address, and telephone number.
  • Delivery and billing details, such as your street address, city, postal code, and delivery instructions.
  • Order information, including products, quantities, prices, promotions, order references, and order status.
  • Payment and transaction information. Payments are processed by external payment providers; we do not intend to store your full card number or card security code.
  • Technical information, such as IP address, browser, device, operating system, pages visited, and error information.
  • Information you send to us, including support requests, feedback, and other communications.

4. How we use information

We use personal information to:

  • Process and deliver orders, payments, returns, refunds, and customer support requests.
  • Send order confirmations, delivery updates, service messages, and other transaction-related communications.
  • Prevent fraud, abuse, unauthorised transactions, and security incidents.
  • Operate, maintain, troubleshoot, and improve the Services.
  • Meet legal, accounting, tax, regulatory, and record-keeping obligations.
  • Send marketing communications where permitted by law and where you have consented, or where another lawful basis applies.

5. Lawful basis and consent

We process information where it is necessary to perform a contract with you, to take steps at your request before a contract, to comply with a legal obligation, to protect legitimate business or security interests, or where you have given consent. Where we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out lawfully.

6. Service providers and sharing

We may share relevant information with trusted service providers who help us run the shop, including hosting and infrastructure providers, payment providers, delivery partners, email providers, analytics or security providers, professional advisers, and government or law-enforcement authorities where required.

These providers may process information on our behalf and must use appropriate safeguards. Payment providers may process payment information under their own privacy policies and terms.

7. Hosting and international transfers

Our custom application is hosted using Amazon Web Services (AWS) in the Cape Town region, South Africa, where configured. Some service providers, payment processors, email providers, or support tools may process information in other countries. Where information leaves South Africa, we will take steps required by POPIA and applicable law to ensure appropriate protection.

8. Cookies and similar technologies

We may use essential cookies or browser storage to operate the site, maintain checkout and cart functionality, remember preferences, and help protect the Services. We may use optional analytics or marketing technologies only where permitted and, where required, after obtaining consent. You can control cookies through your browser settings, but disabling essential technologies may affect checkout functionality.

9. Security

We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, resolving disputes, preventing fraud, and meeting tax, accounting, legal, and regulatory requirements. When information is no longer required, we will delete it or anonymise it where reasonably practicable.

11. Your rights

Subject to applicable law, you may have the right to:

  • Ask what personal information we hold about you and request access to it.
  • Request correction, updating, or deletion of inaccurate or unlawfully processed information.
  • Object to certain processing or withdraw consent where processing is based on consent.
  • Opt out of marketing communications by using the unsubscribe option or contacting us.
  • Lodge a complaint with us or with the Information Regulator of South Africa.

To make a request, email info@skinjoy.shop. We may need to verify your identity before responding and may retain information where the law permits or requires us to do so.

12. Children

The Services are not directed at children under 13. We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided us with personal information, please contact us so that we can investigate and take appropriate action.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our Services, technology, providers, or legal obligations. We will publish the updated version on this page and update the date above.

14. Contact us

Joubelation (Pty) Ltd trading as SKINJOY
70 Main Road, Paarl, Western Cape, 7646, South Africa
info@skinjoy.shop