01
Introduction
At Anantara, operated by Aureum Skincare (Pty) Ltd, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.
This policy applies to all personal information collected through anantara.africa, our email communications, and any other interactions you have with us.
We comply fully with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. Our Information Officer is responsible for ensuring our compliance with applicable data protection legislation.
02
Information We Collect
We collect the following categories of personal information:
| Category | Examples | Purpose |
|---|---|---|
| Identity data | First name, last name | Account creation, order processing |
| Contact data | Email address, phone number, delivery address | Order fulfilment, customer support |
| Transaction data | Purchase history, order details, payment method type | Processing orders, refunds, records |
| Technical data | IP address, browser type, device type, pages visited | Site functionality, security, analytics |
| Marketing data | Email preferences, communication opt-ins | Sending relevant communications |
| Profile data | Account details, skin type preferences, wishlist | Personalised experience |
We do not collect sensitive personal information such as race, religion, health data, or biometric data. We do not knowingly collect data from individuals under the age of 18.
03
How We Collect Your Information
We collect personal information through various means, including:
- Directly from you — when you create an account, place an order, sign up for our newsletter, contact customer service, or complete a skin type quiz
- Automatically — when you browse anantara.africa, we collect technical and usage data via cookies and similar tracking technologies
- From third parties — such as payment processors, delivery partners, and analytics providers, where permitted by law
- From social media — if you interact with us via Instagram, Facebook, LinkedIn, or Pinterest, we may receive information in accordance with those platforms' privacy settings
04
How We Use Your Information
We use your personal information for the following purposes:
- To process and fulfil your orders, including payment processing and delivery
- To manage your account and provide customer support
- To send you order confirmations, shipping updates, and service-related communications
- To send you marketing communications, where you have opted in to receive them
- To personalise your experience on anantara.africa based on your preferences and browsing history
- To improve our website, products, and services through analytics and feedback
- To comply with legal obligations, including tax and consumer protection laws
- To detect and prevent fraud, unauthorised access, and other illegal activities
We will not use your personal information for any purpose that is incompatible with the purposes for which it was originally collected, without your prior consent.
05
Legal Basis for Processing
Under POPIA, we are required to have a lawful basis for processing your personal information. We rely on the following grounds:
- Contractual necessity — processing required to fulfil your order or provide services you have requested
- Consent — for marketing communications and non-essential cookies, where you have given us your explicit consent
- Legitimate interests — for analytics, fraud prevention, and improving our products and services, where our interests are not overridden by your rights
- Legal obligation — where processing is required to comply with applicable law, such as tax and consumer protection regulations
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.
06
Sharing Your Information
We do not sell your personal information to third parties. We may share your data with the following categories of recipients, only where necessary and under appropriate data protection agreements:
- Delivery and logistics partners — to fulfil and track your orders
- Payment processors — to securely process your transactions (we do not store full card details)
- Email and marketing platforms — to send you communications you have opted into
- Analytics providers — to help us understand website usage and improve our services
- Legal and regulatory authorities — where required by law, court order, or to protect the rights and safety of our business or others
- Professional advisors — such as lawyers, auditors, and accountants, under confidentiality obligations
All third parties with whom we share your data are required to handle it in accordance with applicable data protection laws and our instructions. They may not use your data for their own marketing purposes.
07
Cookies & Tracking Technologies
anantara.africa uses cookies and similar technologies to enhance your browsing experience, analyse site performance, and deliver relevant content. A cookie is a small text file stored on your device when you visit a website.
We use the following types of cookies:
- Strictly necessary cookies — essential for the website to function, including maintaining your shopping cart and session. These cannot be disabled.
- Analytical / performance cookies — help us understand how visitors interact with our site, which pages are most visited, and how we can improve performance.
- Functional cookies — remember your preferences such as language, currency, and location to personalise your experience.
- Marketing cookies — used to track your browsing across sites and deliver targeted advertising relevant to your interests. These are only set with your consent.
You can manage your cookie preferences through our cookie settings banner, which appears on your first visit to the site. You may also adjust your browser settings to block or delete cookies, though this may affect the functionality of the website.
08
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:
- Order and transaction records — retained for 5 years for tax and accounting purposes
- Account information — retained for the duration of your account, plus 2 years after closure
- Marketing preferences and opt-in records — retained for the duration of your consent, or until you withdraw it
- Customer service communications — retained for 3 years after the matter is resolved
- Technical and analytics data — typically retained for up to 26 months in anonymised form
When your personal information is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
09
Your Rights
Under POPIA, you have the following rights in relation to your personal information:
- Right of access — you may request a copy of the personal information we hold about you
- Right to correction — you may request that we correct inaccurate or incomplete information
- Right to deletion — you may request that we delete your personal information, subject to our legal obligations to retain certain records
- Right to object — you may object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
- Right to data portability — you may request that we provide your data in a structured, commonly used format
- Right to lodge a complaint — you have the right to complain to the Information Regulator of South Africa if you believe your rights have been violated
To exercise any of these rights, please contact us at hello@anantara.africa. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.
10
Security
We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These include:
- SSL/TLS encryption for all data transmitted through our website
- Secure, access-controlled servers and systems
- Regular security reviews and vulnerability assessments
- Staff training on data protection and privacy obligations
- Strict access controls limiting who within our organisation can access personal data
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is entirely secure. In the event of a data breach that is likely to result in harm to you, we will notify you and the Information Regulator in accordance with our obligations under POPIA.
We do not store full payment card numbers. All card transactions are processed by our certified payment processor, which complies with PCI DSS security standards.
11
Contact & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:
- Company: Aureum Skincare (Pty) Ltd
- Trading as: Anantara
- Email: hello@anantara.africa
- Website: anantara.africa
- Hours: Monday – Friday, 9:00 – 17:00 SAST
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:
- Website: www.justice.gov.za/inforeg
- Email: inforeg@justice.gov.za