Last updated: 18 June 2026
At Cosmo Beauty, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use www.cosmobeauty.co.za, place an order, contact us, subscribe to our newsletter, or interact with our website.
This policy is intended to align with South Africa’s Protection of Personal Information Act, commonly known as POPIA. POPIA promotes the protection of personal information and sets minimum requirements for lawful processing by public and private bodies.
1. Personal Information We Collect
We may collect the following personal information:
- Name and surname
- Email address
- Contact number
- Billing address
- Delivery address
- Order details
- Payment confirmation details
- Account login details
- Communication history
- Website usage information
- Device, browser and cookie data
- Marketing preferences
We only collect information that is reasonably necessary for the purpose for which it is collected.
2. How We Collect Information
We collect personal information when you:
- Place an order
- Create an account
- Contact us
- Subscribe to our newsletter
- Complete a form on the website
- Use our website
- Interact with our marketing or advertising
- Communicate with us by email, WhatsApp, phone or social media
3. How We Use Your Information
We may use your personal information to:
- Process and fulfil your orders
- Confirm payments
- Deliver products to you
- Communicate about your order
- Provide customer support
- Handle returns, refunds and exchanges
- Create and manage your customer account
- Send marketing messages, where permitted
- Improve our website and customer experience
- Prevent fraud and unauthorised activity
- Comply with legal and regulatory obligations
4. Payment Information
Online payments are processed through secure third-party payment providers.
Cosmo Beauty does not store your full card details on the website.
Your payment information is handled by the payment provider according to its own security and privacy standards.
5. Sharing of Personal Information
We may share your personal information with trusted third parties where necessary to operate our business and provide services to you.
These may include:
- Courier and delivery companies
- Payment service providers
- Website hosting providers
- Email and newsletter platforms
- IT and website support providers
- Marketing and analytics platforms
- Legal, accounting or compliance service providers
- Authorities where required by law
We do not sell your personal information.
6. Marketing Communication
We may send you marketing communication if you have subscribed, consented, or where the law allows us to do so.
You may unsubscribe from marketing communication at any time by using the unsubscribe link or by contacting us directly.
Once you opt out, we will stop sending marketing messages to you, except for important order-related or service-related communication.
7. Cookies and Website Tracking
Our website may use cookies and similar technologies to improve website functionality, remember preferences, analyse traffic, improve marketing, and understand how customers use the website.
Cookies may be used for:
- Shopping cart functionality
- Login sessions
- Website analytics
- Advertising and retargeting
- Performance improvements
You can adjust your browser settings to refuse or delete cookies. However, some parts of the website may not work properly if cookies are disabled.
8. Data Security
We take reasonable technical and organisational steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.
These steps may include secure hosting, access controls, password protection, SSL encryption, limited staff access and secure payment processing.
No online system is completely secure, but we make reasonable efforts to protect your information.
9. Retention of Information
We will keep your personal information only for as long as necessary for the purpose it was collected, unless a longer retention period is required or allowed by law.
This may include keeping order records for tax, accounting, legal, customer service and fraud-prevention purposes.
10. Your Rights
You have the right to:
- Ask what personal information we hold about you
- Request access to your personal information
- Ask us to correct or update your information
- Ask us to delete your information where legally possible
- Object to certain processing
- Withdraw consent where processing is based on consent
- Opt out of direct marketing
POPIA gives data subjects the right to request confirmation of whether a responsible party holds their personal information and to request correction of personal information in certain circumstances.
11. Children’s Privacy
This website is not intended for use by children without the consent or supervision of a parent or legal guardian.
If we become aware that personal information has been collected from a child without the required consent, we may delete that information where appropriate.
12. Cross-Border Processing
Some of our service providers may store or process information outside South Africa.
Where this happens, we will take reasonable steps to ensure that your personal information is protected according to appropriate privacy and security standards.
13. Links to Other Websites
Our website may contain links to third-party websites.
Cosmo Beauty is not responsible for the privacy practices, content or security of third-party websites. Please review their privacy policies before using those websites.
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website and will apply from the date of publication.
15. Contact Us
For privacy-related questions, access requests, corrections or complaints, please contact us:
Cosmo Beauty
Email: [Insert email address]
Contact number / WhatsApp: [Insert contact number]
Address: [Insert business address]
You may also contact the Information Regulator of South Africa if you believe your personal information has not been handled lawfully.