Privacy policy

Privacy policy

This Privacy Policy describes how www.curashop.co.za (the "Site" or "we") collects, uses, and discloses your Personal Information when you visit, sign up for marketing, or make a purchase from the Site.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases or provide marketing updates. We may also collect additional information if you contact us for customer support.

In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as "Personal Information."

Device Information

  • Examples collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: automatically collected using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: shared with Shopify and other vendors to help operate the Site.

Order Information

  • Examples collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
  • Purpose of collection: to provide products or services to you, process payments, arrange shipping, provide invoices and confirmations, communicate with you, screen for potential fraud, and, in line with your preferences, send you marketing information.
  • Source of collection: collected directly from you.
  • Disclosure for a business purpose: shared with Shopify and service providers. Payment card details are processed directly by our payment gateways, PayFast, Yoco and Stitch Express, and are not stored on our own systems.

Customer Support Information

  • Examples collected: name, surname, telephone number, address, and email address.
  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: used by Cura Shop (Skin Candy) to process orders and provide communication.

SMS Marketing & Newsletter Information

  • Examples collected: mobile phone number and email address.
  • Purpose of collection: to send promotional SMS messages, WhatsApp notifications and offers, and/or emails about new products, offers, and customer updates.
  • Consent: By entering your phone number or email and opting in, you consent to receive recurring automated marketing messages. Consent is not required as a condition of purchase.
  • Opt-out: You can unsubscribe at any time by replying STOP to SMS, using the unsubscribe link in emails, or contacting us at info@curashop.co.za.
  • Source of collection: collected directly from you at checkout, newsletter signup, or SMS opt-in forms.
  • Disclosure for a business purpose: shared with our SMS/email service providers for the sole purpose of delivering communications.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill contracts with you. For example:

  • Shopify powers our online store (see Shopify's privacy policy: https://www.shopify.com/legal/privacy).
  • Courier partners receive your name, surname, phone number, email, and delivery address to deliver your products.
  • Marketing service providers may receive your phone number or email to send newsletters, SMS, or WhatsApp marketing messages in line with your consent.
  • We may disclose information to comply with laws, respond to lawful requests, or protect our rights.

We are not responsible for the privacy practices of third-party sites we link to or that link to us (including Shopify, our couriers, or WhatsApp). We encourage you to review the privacy policy of any third-party site you visit.

Keeping Your Information Secure

We take reasonable technical and organisational measures to protect your Personal Information against loss, misuse, unauthorised access, or disclosure. This includes encrypting data in transit (HTTPS/SSL), restricting access to personal information to staff and service providers who need it to do their jobs, and relying on PCI-compliant payment processing so that full card details are never stored on our own systems.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in a risk to your rights, we will notify affected customers and South Africa's Information Regulator without undue delay, as required under POPIA.

Behavioural Advertising

We use advertising and analytics tools to understand how customers use the Site and to show you ads we believe may be relevant to you. These tools may collect information about your device, browsing behaviour, and — where you've provided it (e.g. at checkout or signup) — your email address or phone number in hashed (encrypted, non-readable) form.

Currently we use:

  • Meta Pixel and Meta Conversions API (Facebook/Instagram) — collects browsing and purchase activity on this Site and may match it, including via hashed contact details, to your Facebook/Instagram profile for ad targeting and measurement. Meta's privacy policy: https://www.facebook.com/privacy/policy/
  • Google Ads tag and Google Analytics — collects browsing and conversion activity for ad performance measurement and remarketing (showing you Cura Shop ads on other sites after you've visited ours). Google's privacy policy: https://policies.google.com/privacy

We may add other advertising or analytics partners (for example TikTok, Pinterest, or Snapchat pixels) as our marketing channels change. When we do, we will update this section to name the new partner and describe what it collects.

Opting out of ad tracking (different from opting out of our emails/SMS):

Unsubscribing from our marketing emails, SMS, or WhatsApp messages stops us contacting you directly — it does not stop pixel-based tracking or ad retargeting on Facebook/Instagram or Google.

  • To limit Meta's ad personalization: https://www.facebook.com/adpreferences/ad_settings/
  • To limit Google's ad personalization: https://myadcenter.google.com
  • To opt out of Google Analytics specifically: https://tools.google.com/dlpage/gaoptout
  • You can also object to this processing at any time by emailing info@curashop.co.za, and we will disable ad-tool tracking on your data going forward where technically possible.

Using Personal Information

We use your Personal Information to:

  • Provide products for sale.
  • Process payments and fulfill orders.
  • Arrange shipping and customer support.
  • Keep you updated on products, services, and offers through SMS, email, and WhatsApp (if opted in).
  • Provide and improve advertising, as described above under Behavioural Advertising.

Retention

We will retain your Personal Information unless and until you request deletion. To exercise this right, please see the Your Rights Under POPIA section below.

Cookies

A cookie is a small amount of information that's downloaded to your computer or device when you visit our Site. We use functional cookies (required for the store to work), analytics cookies (to understand Site usage), and advertising cookies set by Meta and Google (described above under Behavioural Advertising) to measure and personalize ads.

Where a cookie is not strictly necessary for the Site to function, we ask for your consent before it's set, and you can withdraw that consent at any time via your browser settings or the cookie banner on the Site.

Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don't have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it's their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

  • _ab – Used in connection with access to admin.
  • _secure_session_id – Used in connection with navigation through a storefront.
  • cart, cart_sig, cart_ts – Used in connection with checkout.
  • checkout_token – Used in connection with checkout.
  • secret – Used in connection with checkout.
  • secure_customer_sig – Used in connection with customer login.
  • storefront_digest – Used in connection with customer login.
  • _shopify_u – Used to facilitate updating customer account information.

Reporting and Analytics

  • _tracking_consent – Tracking preferences.
  • _landing_page, _orig_referrer – Track landing pages.
  • _s, _shopify_fs, _shopify_s, _shopify_y, _y – Shopify analytics.
  • _shopify_sa_p, _shopify_sa_t – Shopify analytics relating to marketing & referrals.

Cookie duration: Session cookies last until you stop browsing. Persistent cookies last until they expire or are deleted (30 minutes to 2 years).

Managing cookies: You can block or manage cookies through your browser settings. Note: blocking cookies may impact functionality.

Do Not Track

We do not alter our data practices when a "Do Not Track" signal is detected by your browser.

Children's Privacy

The Site is not directed at children under the age of 18, and we do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us at info@curashop.co.za and we will take steps to delete it.

Your Rights Under POPIA

If you are located in South Africa, the Protection of Personal Information Act (POPIA) gives you the right to:

  • Be notified that your personal information is being collected;
  • Access the personal information we hold about you;
  • Request correction or deletion of your personal information;
  • Object to the processing of your personal information, including for direct marketing and advertising purposes;
  • Complain to the Information Regulator if you believe we have not handled your information lawfully.

To exercise any of these rights, contact us at info@curashop.co.za. We will respond to your request within 30 days. If you're not satisfied with our response, you can lodge a complaint with South Africa's Information Regulator: https://inforegulator.org.za, complaints.IR@justice.gov.za.

Cross-border transfers: Some of our service providers (Shopify, Meta, Google) process data on servers outside South Africa. Where this happens, we rely on those providers' contractual and technical safeguards (such as standard contractual clauses) to protect your information.

Changes

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for legal, operational, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at:

📧 info@curashop.co.za

Last updated: 02 August 2026