Privacy Policy
How we collect, use, protect, and share your personal information at Lebzology.
1. Introduction
Lebzology (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our products, or use our services.
By using our website and services, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our website or services.
2. Information We Collect
We collect personal information that you provide directly to us, as well as information collected automatically when you use our website and services.
2.1 Information You Provide
- Account Information: Name, email address, phone number, physical address, and password when you create an account.
- Order Information: Billing and shipping addresses, payment details, and purchase history.
- Communication: Messages, emails, WhatsApp chats, and support tickets you send us.
- Preferences: Product preferences, marketing preferences, and account settings.
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device type, and screen resolution.
- Usage Data: Pages visited, time spent on pages, links clicked, and features used.
- Location Data: Approximate geographic location derived from your IP address.
- Cookies: Information stored in cookies and similar tracking technologies (see Section 8).
2.3 Information from Third Parties
- Payment processors (PayFast) for transaction verification.
- Delivery partners for shipping and logistics.
- Credit bureaus and fraud prevention services where applicable.
3. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling orders | Contractual necessity |
| Account management and authentication | Contractual necessity |
| Customer support and communication | Legitimate interest |
| Marketing and promotional communications | Consent |
| Fraud prevention and security | Legitimate interest / Legal obligation |
| Website analytics and improvement | Legitimate interest |
| Legal compliance and dispute resolution | Legal obligation |
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- Payment Processors: PayFast processes all online payments. We do not store your full credit card details.
- Delivery Partners: Courier companies require your name, phone number, and address to deliver orders.
- IT and Hosting: Website hosting, cloud storage, and security service providers.
- Marketing Platforms: Email service providers and analytics tools (with your consent).
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our customers or others.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change in ownership.
5. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Account Information: Retained while your account is active. Deleted upon account closure (subject to legal retention requirements).
- Order Records: Retained for 5 years for tax and accounting purposes.
- Communication Records: Retained for 3 years for customer service and dispute resolution.
- Marketing Data: Retained until you withdraw consent or opt out.
6. Your Rights
Under the Protection of Personal Information Act (POPIA) and applicable data protection laws, you have the following rights:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Right to Object: Object to processing for direct marketing purposes at any time.
- Right to Restrict Processing: Request limitation of processing under certain circumstances.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days of receiving your request.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- PCI-DSS compliant payment processing through PayFast — we never store full credit card numbers.
- Regular security audits and vulnerability assessments.
- Access controls and staff training on data protection.
- Secure data storage with encrypted backups.
While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyse website traffic, and personalise content.
8.1 Types of Cookies We Use
- Essential Cookies: Required for the website to function (e.g., shopping cart, login sessions).
- Functional Cookies: Remember your preferences and settings.
- Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics).
- Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.
8.2 Managing Cookies
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
9. Third-Party Links
Our website may contain links to third-party websites (e.g., social media, partner sites). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Contact Us
Questions About Your Privacy?
Our team is ready to assist with any privacy-related concerns.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Your continued use of our website and services after any changes constitutes acceptance of the revised policy.
12. Complaints
If you believe we have not handled your personal information in accordance with this policy or applicable law, you have the right to lodge a complaint with the Information Regulator of South Africa:
- Website: inforegulator.org.za
- Email: inforeg@justice.gov.za
We encourage you to contact us first so we can attempt to resolve your concern directly.