Privacy Policy

Last updated: 25 September 2026

This Privacy Policy explains how Harley Wax SA (Pty) Ltd, trading as Harley Waxing (“Harley Waxing”, “we”, “us” or “our”) collects, uses, shares and protects your personal information when you use harleywaxing.co.za, buy from us or contact us. We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Who Is Responsible for Your Information

Harley Wax SA (Pty) Ltd is the responsible party for your personal information under POPIA.

• Registered name: Harley Wax SA (Pty) Ltd
• Registration number: 2023/518641/07
• Office: Vermont, Western Cape, South Africa
• Telephone: +27 (0)28 316 1304
• Information Officer: contact our Information Officer through the contact form on our Contact Us page

What Personal Information We Collect

• Identity and contact details: name, company name, email address, phone number and Instagram handle if you give it to us.
• Order details: billing and delivery addresses, VAT number (optional), products bought, order history and order notes.
• Payment details: payments are processed by our payment provider. We receive confirmation of payment but never see or store your full card details.
• Account details: your login name and password (stored in encrypted form) if you create an account.
• Training and exam details: information you submit through our wax training or student exam forms.
• Reviews and messages: product reviews, ratings, photos and anything you send us through our contact forms.
• Technical information: IP address, browser and device type, pages visited and how you use the website, collected through cookies and server logs.

We do not intentionally collect special personal information, such as health information, and we ask that you do not send it to us.

How We Collect It

We collect personal information directly from you when you place an order, create an account, fill in a form, leave a review or contact us. We also collect technical information automatically when you use the website, and we may receive order or payment confirmations from our payment provider and delivery updates from couriers.

Why We Use It and Our Lawful Basis

POPIA allows us to process personal information only for a lawful reason. We use your information to:

• process, deliver and support your orders (to perform our contract with you);
• manage your account, answer your questions and handle returns and complaints (contract and legitimate interest);
• send order confirmations, delivery updates and, if you agreed at checkout, a request to review your purchase (contract and consent);
• send marketing emails, only if you opted in or are an existing customer who has not opted out (consent or section 69 of POPIA);
• keep accounting and tax records (legal obligation);
• keep the website secure, prevent fraud and improve the website and our products (legitimate interest);
• measure the performance of our website and advertising (legitimate interest or consent).

We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

Who We Share It With

We do not sell or rent your personal information. We only share it with service providers (called “operators” under POPIA) who help us run our business, and only as much as they need. These include:

• our payment gateway, to process payments;
• courier and delivery companies, to deliver your order;
• our website hosting, security and email delivery providers;
• Google, for website analytics, advertising measurement, Google Shopping and showing product ratings;
• our professional advisers, such as accountants and auditors.

Our operators must keep your information confidential and secure, and may only use it for the purpose we give them. We may also disclose information when the law requires it, to protect our rights, or if our business is sold or restructured.

Transfers Outside South Africa

Some of our service providers, such as Google and some email and security services, store or process information outside South Africa. When this happens, we only transfer information as allowed by section 72 of POPIA, for example where the recipient is bound by laws or agreements that give a similar level of protection to POPIA, or where the transfer is needed to perform our contract with you.

Product Reviews

If you leave a product review, your first name or display name, star rating, review text, any photos you add and the review date are shown publicly on our website, and ratings may be shared with Google to appear in Google Search and Google Shopping. Your email address is never shown publicly. Reviews may be held for moderation before they are published. You can ask us to remove your review at any time.

Cookies and Tracking

Cookies are small files placed on your device. We use:

• Essential cookies: to run the website, keep your cart and account working, and protect against fraud.
• Preference cookies: to remember your choices.
• Analytics and advertising cookies: to understand how the website is used and measure our advertising, including Google services.

You can block or delete cookies in your browser settings. If you block essential cookies, parts of the website, such as the cart and checkout, may not work.

How Long We Keep It

We keep personal information only for as long as we need it for the purposes above, or for as long as the law requires. For example, order and invoice records are kept for at least 5 years to meet tax requirements. When we no longer need information, we delete, destroy or de-identify it.

How We Protect It

We take reasonable technical and organisational measures to protect your information, as required by section 19 of POPIA. These include encrypted (HTTPS) connections, secure payment processing, firewall and security monitoring, restricted access to staff who need it, and regular software updates. If we believe your personal information has been accessed without authorisation, we will notify you and the Information Regulator as POPIA requires.

Your Rights

Under POPIA, you have the right to:

• ask whether we hold personal information about you and request a copy of it;
• ask us to correct or update information that is inaccurate, incomplete or out of date;
• ask us to delete information we no longer have a lawful reason to keep;
• object to the processing of your information, including for direct marketing;
• withdraw your consent at any time, where we rely on consent;
• unsubscribe from marketing emails and review requests using the link in each email;
• lodge a complaint with the Information Regulator.

To use any of these rights, contact our Information Officer through our contact form. We may need to confirm your identity before we act on your request. Requests for records may also be made under the Promotion of Access to Information Act 2 of 2000 (PAIA).

Children

Our products are for professional use and our website is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

Links to Other Websites

Our website may link to other websites, such as social media pages. We are not responsible for their privacy practices, so please read their privacy policies.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve it. You may also lodge a complaint with the Information Regulator (South Africa):

• Website: inforegulator.org.za

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the “Last updated” date at the top. If we make important changes, we will let you know on the website or by email.

Contact Us

If you have any questions about this Privacy Policy, please use the contact form on our Contact Us page or call +27 (0)28 316 1304 during office hours (Monday to Friday, 09:00 to 17:00).