top of page

Privacy Policy

NKOSI'S NATURAL BEAUTY

PRIVACY POLICY

Effective Date: 26 August 2026
Last Updated: 26 August 2026

Nkosi's Natural Beauty ("Nkosi's Natural Beauty", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit or use www.nkosinaturals.com, purchase our products, contact us, subscribe to communications, submit a reseller/wholesaler application, or otherwise interact with us.

This Policy is intended to comply with applicable South African law, including the Protection of Personal Information Act 4 of 2013 ("POPIA"), the Electronic Communications and Transactions Act 25 of 2002 ("ECTA"), the Consumer Protection Act 68 of 2008 ("CPA"), and other applicable legislation.

1. WHO WE ARE

Nkosi's Natural Beauty is a South African beauty and skincare business.

Website: www.nkosinaturals.com
Email: nkosisnkosisnaturalbeautyprodu@gmail.com
Telephone: +27 69 910 5020 / +27 63 228 0487

Where the brand is operated through a registered legal entity, references to "Nkosi's Natural Beauty" include that legal entity.

2. INFORMATION WE COLLECT

Depending on how you interact with us, we may collect:

2.1 Identity information

  • Name and surname

  • Username or account details

  • Business name

  • Reseller or wholesaler information

  • Information reasonably required to verify an application

2.2 Contact information

  • Email address

  • Telephone number

  • Mobile number

  • Delivery address

  • Billing address

  • Postal address

2.3 Transaction information

We may collect information relating to:

  • Products purchased

  • Order numbers

  • Transaction dates

  • Amounts paid

  • Delivery information

  • Returns and refunds

  • Customer service enquiries

2.4 Payment information

Payments may be processed through third-party payment providers.

Where a third-party payment provider processes your payment, your payment information may be subject to that provider's privacy policy and security systems.

We do not intend to collect or retain your complete banking password, PIN or online banking credentials.

2.5 Technical information

When you use our website, certain technical information may automatically be collected, including:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Website activity

  • Pages visited

  • Date and time of visits

  • Referring websites

  • Cookies and similar technologies

3. HOW WE COLLECT INFORMATION

We may collect personal information:

  • Directly from you;

  • When you create an account;

  • When you place an order;

  • During checkout;

  • When you contact us;

  • When you submit a reseller application;

  • When you subscribe to marketing;

  • Through cookies and website technologies;

  • Through payment providers;

  • Through delivery/courier providers;

  • Through service providers assisting us with our business operations; or

  • Where permitted by law, from third parties.

4. WHY WE COLLECT PERSONAL INFORMATION

We may process your personal information for legitimate and lawful purposes, including:

  1. Processing and fulfilling orders;

  2. Processing payments;

  3. Delivering products;

  4. Processing returns and refunds;

  5. Providing customer support;

  6. Communicating with customers;

  7. Managing accounts;

  8. Processing reseller/wholesaler applications;

  9. Preventing fraud and unlawful activity;

  10. Improving our products and services;

  11. Maintaining website security;

  12. Sending marketing communications where legally permitted;

  13. Complying with legal and regulatory obligations;

  14. Resolving disputes;

  15. Protecting our legal rights; and

  16. Any other purpose disclosed to you or permitted by applicable law.

POPIA requires responsible parties to process personal information in accordance with conditions for lawful processing. The Information Regulator specifically emphasises collecting only information necessary for a defined purpose, maintaining accuracy and implementing appropriate security measures.

5. LEGAL BASIS FOR PROCESSING

Depending on the circumstances, we may process personal information where:

  • You have consented;

  • Processing is necessary to perform a contract with you;

  • Processing is necessary to comply with a legal obligation;

  • Processing protects a legitimate interest;

  • Processing is necessary to protect your legitimate interests; or

  • Processing is otherwise permitted by POPIA or another applicable law.

Where consent is relied upon, you may withdraw your consent subject to legal and contractual limitations.

6. MARKETING

We may send promotional communications where permitted by law.

Marketing may include:

  • Email;

  • SMS;

  • WhatsApp;

  • Telephone;

  • Social media;

  • Website notifications; or

  • Other electronic communication channels.

Where applicable, you may unsubscribe from marketing communications.

Unsubscribing from marketing does not prevent us from sending essential communications relating to your orders, payments, deliveries, security, refunds or other transactional matters.

ECTA contains specific requirements concerning unsolicited commercial communications, including the ability for consumers to cancel subscriptions to mailing lists.

7. COOKIES

Our website may use cookies and similar technologies.

Cookies may be used to:

  • Operate the website;

  • Remember preferences;

  • Improve website functionality;

  • Understand website usage;

  • Improve customer experience;

  • Support analytics; and

  • Support marketing where applicable.

You may configure your browser to reject or restrict cookies. Some website functionality may be affected if cookies are disabled.

8. WHO WE MAY SHARE INFORMATION WITH

We may share relevant personal information with trusted third parties where reasonably necessary to operate our business.

These may include:

  • Payment processors;

  • Banks and financial institutions;

  • Courier and delivery providers;

  • Website hosting providers;

  • Wix or other technology providers;

  • Email and communication providers;

  • Marketing service providers;

  • Analytics providers;

  • IT and cybersecurity providers;

  • Professional advisers;

  • Legal advisers;

  • Auditors;

  • Regulators;

  • Law-enforcement authorities; and

  • Other parties where disclosure is required or permitted by law.

We will not sell your personal information merely as a commercial product unless this is permitted by law and appropriately disclosed.

9. INTERNATIONAL DATA TRANSFERS

Some technology, hosting, payment, analytics or other service providers may process information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with POPIA and other applicable legal requirements.

POPIA contains specific requirements concerning cross-border transfers of personal information.

10. SECURITY

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access;

  • Loss;

  • Theft;

  • Destruction;

  • Disclosure;

  • Alteration; and

  • Unauthorised processing.

However, no internet-based system can be guaranteed to be completely secure.

If we become aware of a security compromise affecting personal information, we will take appropriate steps required by applicable law.

11. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or where retention is required by law.

Retention periods may depend on:

  • The nature of the information;

  • The purpose for which it was collected;

  • Legal requirements;

  • Accounting requirements;

  • Tax requirements;

  • Dispute-resolution requirements;

  • Fraud-prevention requirements; and

  • Legitimate business requirements.

12. YOUR RIGHTS

Subject to applicable law, you may have rights to:

  • Request access to your personal information;

  • Request correction of inaccurate information;

  • Request deletion where legally permissible;

  • Object to certain processing;

  • Withdraw consent where processing is based on consent;

  • Request information about how your information is processed;

  • Complain to the Information Regulator; and

  • Exercise other rights provided by POPIA.

The Information Regulator is the independent regulator responsible for monitoring and enforcing POPIA and PAIA.

13. CHILDREN'S INFORMATION

Our website is not intended to knowingly collect personal information from children without appropriate consent or another lawful basis.

Where we become aware that personal information relating to a child has been collected unlawfully, we will take reasonable steps to address the situation in accordance with POPIA.

14. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or security of third-party websites.

Customers should review the privacy policies of third-party websites before providing personal information.

15. INFORMATION OFFICER

Nkosi's Natural Beauty will designate an Information Officer as required by applicable law.

Requests concerning personal information may be submitted using:

Email: nkosisnkosisnaturalbeautyprodu@gmail.com

We may require reasonable verification of identity before processing certain requests.

16. COMPLAINTS

If you believe that your personal information has been handled unlawfully, please contact us first so that we can investigate and attempt to resolve the matter.

You may also lodge a complaint with the South African Information Regulator where applicable.

Information Regulator

Website: inforegulator.org.za
Telephone: 010 023 5200
Email: enquiries@inforegulator.org.za

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

The latest version will be published on our website.

18. GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of South Africa.

Last Updated: 26 August 2026

bottom of page