Privacy policy

Last updated: 22 October 2026

This policy explains what personal information we collect, why, and the choices you have. We follow the EU General Data Protection Regulation (GDPR) and South Africa's Protection of Personal Information Act (POPIA).

Who we are

Shozi Luxe Beauty is a trading name of Sunrise Emandleni Enterprises (Pty) Ltd, a company registered in South Africa (registration number 2016/377103/07). We are responsible for your personal information. Our address for correspondence is 67 Marklandsgatan, 414 77 Gothenburg, Sweden, and you can reach us at hello@shoziluxe.com.

What we collect, and why

• To deliver your order: your name, email address, phone number, delivery address, the items you order and any note you add. We need these to make, ship and support your order, and to meet our legal and accounting duties.
• Payment: you pay on Payfast's secure page. Your card details go directly to Payfast and never reach our website or our team. Payfast tells us whether the payment succeeded and gives us a payment reference.
• Newsletter: your email address, only if you choose to sign up. You can unsubscribe at any time.
• Messages: your name, email address and message when you contact us, so we can reply.
• Bot protection: our forms use Cloudflare Turnstile to check that a real person is using them.
• Visitor statistics: we use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across websites.

We collect only what we need. We do not sell your personal information, and we do not use it for advertising profiles.

Cookies and your browser

We don't use advertising or tracking cookies. Your bag, chosen currency and checkout details are kept in your own browser's storage on your device, so they're there when you come back. They are cleared from your device when you complete an order, and you can clear them at any time in your browser settings.

Who we share it with

Only with the services we need to run the shop:

• Payfast, to process your payment;
• our hair suppliers and couriers, who receive your name, delivery address and phone number to make and deliver your order;
• Cloudflare, which hosts our website and database;
• Zoho, which hosts our email.

Some of these services are based outside your country, including outside the EU and South Africa. Where that happens, we rely on the safeguards the law requires.

How long we keep it

We keep order records for as long as the law requires for tax and accounting (usually five to seven years). Newsletter subscriptions are kept until you unsubscribe. Messages are kept as long as needed to help you.

Your rights

You can ask us to see, correct or delete your personal information, to stop using it, or to give you a copy. You can withdraw your newsletter consent at any time. Email hello@shoziluxe.com and we'll respond within one month.

If you're unhappy with how we handle your information, you can complain to your data protection authority: in Sweden, the Swedish Authority for Privacy Protection (IMY); in South Africa, the Information Regulator.

Changes

If we change this policy, we'll update it on this page with a new date.