Privacy policy

Last updated: 18 December 2025

Introduction

Scentemy (Pty) Ltd operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the “Services”). Scentemy is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. Where there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply in relation to personal information.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Applicable Law

This Privacy Policy is governed by the Protection of Personal Information Act, 4 of 2013 (“POPIA”), together with any other applicable South African laws. Where applicable, international data protection principles may also apply.

Personal Information We Collect

Personal information refers to information that identifies or can reasonably be linked to you as an individual. We may collect and process the following categories of personal information:

• Contact information including your name, email address, phone number, billing address, and shipping address
• Payment and transaction information including payment method, transaction details, and order history (note: payment card details are processed securely by third-party payment providers and are not stored by us)
• Account information including login credentials, preferences, and settings
• Purchase behaviour including products viewed, added to cart or wishlist, purchased, returned, or exchanged
• Communications with us including customer support enquiries and feedback
• Technical and usage data including IP address, browser type, device information, and interaction with the Services

Sources of Personal Information

We collect personal information:

• Directly from you when you place an order, create an account, or contact us
• Automatically through cookies and similar technologies when you use the Services
• From service providers who process information on our behalf
• From third parties where permitted by law

How We Use Your Personal Information

We process personal information for the following lawful purposes:

• To fulfil orders, process payments, arrange delivery, and manage returns or exchanges
• To create and manage your customer account
• To provide customer support and communicate with you regarding orders or enquiries
• To personalise your shopping experience and improve our Services
• To send marketing communications where you have consented or where permitted by law
• To prevent fraud, ensure security, and comply with legal obligations

Marketing Communications

You may receive marketing communications from us if you have opted in or where permitted by law. You may opt out at any time by using the unsubscribe link in our communications. Transactional or service-related messages will still be sent where necessary.

Disclosure of Personal Information

We may disclose your personal information to:

• Shopify and trusted service providers who assist with payment processing, hosting, analytics, fulfilment, and delivery
• Marketing and advertising partners where permitted and in accordance with their privacy policies
• Regulatory or law enforcement authorities where required by law
• Third parties in connection with a business transaction such as a merger or sale of assets

Relationship with Shopify

Our store is hosted on Shopify, which processes personal information to provide and improve the Services. Shopify may process your personal information in jurisdictions outside South Africa. Shopify’s use of personal information is governed by the Shopify Privacy Policy, available at https://privacy.shopify.com.

International Transfers

Where personal information is transferred outside South Africa, we take reasonable steps to ensure that the recipient is subject to appropriate data protection safeguards as required under POPIA.

Children’s Information

The Services are not intended for use by children under the age of 18. We do not knowingly collect personal information relating to children. If such information is identified, it will be deleted.

Security and Retention

We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access. However, no system is completely secure.

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Your Rights Under POPIA

You have the right to:

• Request access to your personal information
• Request correction or deletion of personal information
• Object to the processing of your personal information
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator of South Africa

Requests may be submitted using the contact details below. We may require proof of identity before processing requests.

Complaints

If you believe we have not complied with this Privacy Policy or POPIA, you may contact us directly. You also have the right to lodge a complaint with the Information Regulator at https://www.justice.gov.za/inforeg/.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact us:

Scentemy (Pty) Ltd
Email: hello@scentemy.co.za
Address: 27 Melina Street, Cape Town, Western Cape, 7550, South Africa