Privacy Policy

Introduction

EMANIA is committed to protecting your privacy in compliance with the Protection of Personal Information Act (POPIA) of South Africa. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, mobile application, or services.

1. Information We Collect

Personal Information:

• Full name and surname
• Email address and phone number
• Delivery and billing addresses
• Payment information (processed securely via PayFast)
• Order history and purchase preferences

Technical Information:

• IP address, browser type, and device information
• Cookies and browsing activity on our website
• Product searches and viewing history

2. How We Use Your Information

• Process and fulfill your orders
• Communicate order confirmations, shipping updates, and delivery notifications
• Provide customer support and respond to inquiries
• Improve our website, products, and services
• Send promotional offers and newsletters (only with your consent)
• Detect and prevent fraud or unauthorized transactions
• Comply with legal obligations under South African law

3. Legal Basis for Processing (POPIA Compliance)

We process your personal information based on the following lawful grounds:

• Consent: You have given explicit consent for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: We must comply with South African laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business operations

4. Cookies and Tracking Technologies

• We use cookies to enhance your shopping experience and analyze website traffic
• You can manage or disable cookies through your browser settings
• Third-party services (PayFast, Supabase, analytics tools) may also use cookies
• Some website features may not function properly without cookies

5. Sharing of Information

We do not sell or rent your personal information to third parties. We may share your information only with:

• Payment Processors: PayFast for secure payment processing
• Delivery Partners: Courier services to deliver your orders
• Service Providers: Cloud hosting (Supabase, Vercel) and email services
• Legal Authorities: When required by South African law or court orders

6. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Objection: Object to processing of your information for marketing purposes
• Data Portability: Receive your data in a structured, commonly used format
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at emaniastores@gmail.com

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL encryption for data transmission
• Secure payment processing via PayFast (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication measures
• Secure database storage with Supabase

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order history and transaction records may be retained for up to 7 years as required by South African tax laws.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from minors without parental consent. If we discover we have collected information from a child, we will delete it immediately.

10. International Data Transfers

Your personal information may be transferred to and stored on servers located outside South Africa (e.g., Vercel, Supabase). We ensure that such transfers comply with POPIA requirements and that adequate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice on our website.