Privacy policy

Privacy Policy

Last Updated: July 2026

At ZALU Cosmetics ("ZALU", "we", "our" or "us"), we are committed to protecting your privacy and handling your personal information responsibly.

Just as we carefully formulate every skincare product, we are equally intentional about protecting your personal information. Your trust is one of our most valued assets.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, create an account, make a purchase, or otherwise interact with us.

This Privacy Policy forms part of our Terms & Conditions and should be read together with those terms.

Responsible Party

For purposes of the Protection of Personal Information Act, 4 of 2013 ("POPIA"), ZALU Cosmetics is the Responsible Party for the personal information collected through this website.

If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact us using the details provided at the end of this policy.

Personal Information We Collect

Depending on how you interact with us, we may collect the following personal information:

Full name
Email address
Mobile or telephone number
Shipping and billing addresses
Order history
Payment information necessary to complete your purchase
Product preferences and skincare interests
Communications you send to us through customer support, surveys or reviews
Technical information such as your IP address, browser type, device information and website usage data collected through cookies and similar technologies.

We collect only the personal information that is reasonably necessary to provide our products and services.

How We Collect Your Information

We may collect your information when you:

place an order;
create an account;
subscribe to our newsletter;
contact our Customer Care team;
participate in promotions or surveys;
leave a review;
browse our website; or
interact with our advertisements or marketing communications.

How We Use Your Information

Your personal information helps us provide a better experience and allows us to:

process and deliver your orders;
communicate order confirmations, shipping updates and customer support responses;
manage your account;
personalise your shopping experience;
recommend products that may be relevant to your skincare needs;
improve our products, services and website performance;
detect and prevent fraud or unauthorised transactions;
comply with legal and regulatory obligations; and
send marketing communications where you have chosen to receive them.

We approach your information with care and use it only for legitimate business purposes.

Lawful Basis for Processing

We process your personal information only where we have a lawful basis to do so in accordance with POPIA.

Depending on the circumstances, this may include:

your consent;
fulfilling our contract with you when processing your order;
complying with legal or regulatory obligations;
protecting legitimate interests; or
pursuing our legitimate business interests where permitted by law.

Where your consent is required, you may withdraw it at any time, subject to applicable legal requirements.

Marketing Communications

If you choose to subscribe to our marketing communications, we may send you information about new product launches, promotions, skincare education and exclusive offers.

You may unsubscribe at any time by clicking the unsubscribe link included in our emails or by contacting us at info@zalucosmetics.co.za.

Opting out of marketing communications will not affect transactional emails relating to your orders.

Payment Information

To protect your financial information, all online payments are processed securely through trusted third-party payment service providers.

ZALU Cosmetics does not store your complete debit or credit card details on our systems.

Sharing Your Information

We respect your privacy and will never sell, rent or trade your personal information.

We may share your information only where necessary with trusted third parties, including:

payment service providers;
courier and delivery partners;
website hosting providers;
customer service providers;
marketing and analytics service providers; and
professional advisers or regulatory authorities where required by law.

All third parties who process personal information on our behalf are required to maintain appropriate security measures and comply with applicable data protection laws.

Cookies and Website Technologies

Our website uses cookies and similar technologies to improve your browsing experience.

These technologies help us:

remember your preferences;
understand how visitors use our website;
improve website functionality and performance;
measure the effectiveness of marketing campaigns; and
personalise your online experience.

We may also use trusted analytics and advertising technologies to better understand website traffic and improve our products and services.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Data Security

We implement appropriate technical, physical and organisational safeguards to protect your personal information against unauthorised access, loss, misuse, disclosure or alteration.

Although no method of transmitting or storing information is completely secure, we continuously review and improve our security measures to help safeguard your information.

Data Storage and Retention

Your personal information is stored securely and retained only for as long as reasonably necessary to:

fulfil the purposes outlined in this Privacy Policy;
provide our products and services;
comply with applicable legal, tax or accounting requirements; or
resolve disputes and enforce our agreements.

Once your information is no longer required, it will be securely deleted, anonymised or destroyed in accordance with applicable laws.

International Transfers

Where your personal information is transferred or stored outside South Africa, we will ensure that appropriate contractual, organisational or legal safeguards are in place to protect your information in accordance with POPIA.

Children's Privacy

Our website is intended for individuals who are 18 years of age or older, or who are using the website with the involvement and consent of a parent or legal guardian.

We do not knowingly collect personal information directly from children without appropriate consent.

Your Rights

Subject to applicable law, you have the right to:

request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information where appropriate;
object to certain types of processing;
withdraw your consent where processing is based on consent;
request information about how your personal information is processed; and
lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details below.

Data Breaches

If we become aware of a security compromise involving your personal information that requires notification under applicable law, we will notify affected individuals and the Information Regulator, where required, and take reasonable steps to minimise any potential harm.

Third-Party Websites

Our website may contain links to third-party websites, payment gateways or social media platforms.

These websites operate independently from ZALU Cosmetics and have their own privacy policies. We encourage you to review their policies before providing any personal information.

ZALU Cosmetics is not responsible for the privacy practices or content of third-party websites.