Privacy Policy

1. Data We Collect

We collect the following categories of data:

• Account data: name and email address when you register or sign in, and a securely hashed password (we never store plain-text passwords).
• Order data: shipping and billing addresses, phone number, order contents, order totals and order notes submitted at checkout.
• Communication data: messages sent through our contact form or via WhatsApp, including your name, email and message content.
• Technical data: browser type, device type, pages visited and language preference, collected through cookies and server logs to operate and improve the site.

2. How We Use Your Data

• To create and manage your account and shopping cart.
• To process and deliver your orders and communicate order updates.
• To respond to support requests sent via the contact form or WhatsApp.
• To improve our website, products and services.
• To comply with legal, tax and accounting obligations.

3. Cookies

We use strictly necessary cookies to provide core functionality, including an encrypted session cookie for authentication and a language-preference cookie to remember your chosen language. We do not sell your data and we do not serve third-party advertising trackers. For details, see our Cookie Policy.

4. Data Sharing

We share your data only with service providers who help us operate the platform — for example, our hosting provider, database provider and, when you place an order, the delivery partners who ship your products. All providers are contractually required to process data only on our instructions. We never sell personal data.

5. Data Retention

• Account data is kept while your account is active.
• Order records are kept for 7 years to satisfy tax and accounting law.
• Contact messages are kept for 12 months after resolution.

6. Your Rights

Depending on your location (including under the EU GDPR), you may have the right to access, correct, delete, restrict or export your personal data, and to object to processing. To exercise any right, email us at info@azarialuxuryspa.co.za and we will respond within 30 days.

7. Security

All traffic is encrypted with TLS, passwords are stored as salted bcrypt hashes, and session tokens are signed JWTs stored in httpOnly cookies. We apply least-privilege access controls across our infrastructure.

8. Contact

Azaria Luxury Spa (Pty) Ltd, 14 Kudu Street, Dawn Park, Boksburg, 1459, South Africa — info@azarialuxuryspa.co.za.