Legal

Privacy Policy

Effective: 1 January 2025 Last updated: April 2026 POPIA Compliant

01

Introduction

At Anantara, operated by Aureum Skincare (Pty) Ltd, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all personal information collected through anantara.africa, our email communications, and any other interactions you have with us.

By using anantara.africa, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the website.

We comply fully with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. Our Information Officer is responsible for ensuring our compliance with applicable data protection legislation.

02

Information We Collect

We collect the following categories of personal information:

Category Examples Purpose
Identity data First name, last name Account creation, order processing
Contact data Email address, phone number, delivery address Order fulfilment, customer support
Transaction data Purchase history, order details, payment method type Processing orders, refunds, records
Technical data IP address, browser type, device type, pages visited Site functionality, security, analytics
Marketing data Email preferences, communication opt-ins Sending relevant communications
Profile data Account details, skin type preferences, wishlist Personalised experience

We do not collect sensitive personal information such as race, religion, health data, or biometric data. We do not knowingly collect data from individuals under the age of 18.

03

How We Collect Your Information

We collect personal information through various means, including:

  • Directly from you — when you create an account, place an order, sign up for our newsletter, contact customer service, or complete a skin type quiz
  • Automatically — when you browse anantara.africa, we collect technical and usage data via cookies and similar tracking technologies
  • From third parties — such as payment processors, delivery partners, and analytics providers, where permitted by law
  • From social media — if you interact with us via Instagram, Facebook, LinkedIn, or Pinterest, we may receive information in accordance with those platforms' privacy settings

04

How We Use Your Information

We use your personal information for the following purposes:

  • To process and fulfil your orders, including payment processing and delivery
  • To manage your account and provide customer support
  • To send you order confirmations, shipping updates, and service-related communications
  • To send you marketing communications, where you have opted in to receive them
  • To personalise your experience on anantara.africa based on your preferences and browsing history
  • To improve our website, products, and services through analytics and feedback
  • To comply with legal obligations, including tax and consumer protection laws
  • To detect and prevent fraud, unauthorised access, and other illegal activities

We will not use your personal information for any purpose that is incompatible with the purposes for which it was originally collected, without your prior consent.

06

Sharing Your Information

We do not sell your personal information to third parties. We may share your data with the following categories of recipients, only where necessary and under appropriate data protection agreements:

  • Delivery and logistics partners — to fulfil and track your orders
  • Payment processors — to securely process your transactions (we do not store full card details)
  • Email and marketing platforms — to send you communications you have opted into
  • Analytics providers — to help us understand website usage and improve our services
  • Legal and regulatory authorities — where required by law, court order, or to protect the rights and safety of our business or others
  • Professional advisors — such as lawyers, auditors, and accountants, under confidentiality obligations

All third parties with whom we share your data are required to handle it in accordance with applicable data protection laws and our instructions. They may not use your data for their own marketing purposes.

07

Cookies & Tracking Technologies

anantara.africa uses cookies and similar technologies to enhance your browsing experience, analyse site performance, and deliver relevant content. A cookie is a small text file stored on your device when you visit a website.

We use the following types of cookies:

  • Strictly necessary cookies — essential for the website to function, including maintaining your shopping cart and session. These cannot be disabled.
  • Analytical / performance cookies — help us understand how visitors interact with our site, which pages are most visited, and how we can improve performance.
  • Functional cookies — remember your preferences such as language, currency, and location to personalise your experience.
  • Marketing cookies — used to track your browsing across sites and deliver targeted advertising relevant to your interests. These are only set with your consent.

You can manage your cookie preferences through our cookie settings banner, which appears on your first visit to the site. You may also adjust your browser settings to block or delete cookies, though this may affect the functionality of the website.

For more control over how cookies are managed on your device, visit your browser's settings or a tool such as aboutcookies.org.

08

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

  • Order and transaction records — retained for 5 years for tax and accounting purposes
  • Account information — retained for the duration of your account, plus 2 years after closure
  • Marketing preferences and opt-in records — retained for the duration of your consent, or until you withdraw it
  • Customer service communications — retained for 3 years after the matter is resolved
  • Technical and analytics data — typically retained for up to 26 months in anonymised form

When your personal information is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.

09

Your Rights

Under POPIA, you have the following rights in relation to your personal information:

  • Right of access — you may request a copy of the personal information we hold about you
  • Right to correction — you may request that we correct inaccurate or incomplete information
  • Right to deletion — you may request that we delete your personal information, subject to our legal obligations to retain certain records
  • Right to object — you may object to processing based on legitimate interests, including direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
  • Right to data portability — you may request that we provide your data in a structured, commonly used format
  • Right to lodge a complaint — you have the right to complain to the Information Regulator of South Africa if you believe your rights have been violated

To exercise any of these rights, please contact us at hello@anantara.africa. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.

To unsubscribe from marketing emails, simply click the "unsubscribe" link at the bottom of any email from us, or contact us directly at hello@anantara.africa.

10

Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These include:

  • SSL/TLS encryption for all data transmitted through our website
  • Secure, access-controlled servers and systems
  • Regular security reviews and vulnerability assessments
  • Staff training on data protection and privacy obligations
  • Strict access controls limiting who within our organisation can access personal data

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is entirely secure. In the event of a data breach that is likely to result in harm to you, we will notify you and the Information Regulator in accordance with our obligations under POPIA.

We do not store full payment card numbers. All card transactions are processed by our certified payment processor, which complies with PCI DSS security standards.

11

Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

This Privacy Policy was last reviewed and updated in April 2026. We reserve the right to update this policy at any time. The most current version will always be available at anantara.africa/privacy-policy.html.