Privacy Policy
Last updated: 4 September 2026
This policy explains what personal information Nura Beauty collects, why we collect it, who we share it with, and what you can do about it. It is written to meet our obligations under the Protection of Personal Information Act, 2013 (POPIA).
It describes what this website actually does. If we add anything that collects more information than is described here, we will update this page before we turn it on.
Who is responsible for your information
This website is operated by Nura Beauty (Pty) Ltd, trading as Nura Beauty. We are the responsible party for the personal information described in this policy.
You can reach us at Sales@nurabeauty.co.za.
What we collect, and why
When you place an order: your name, email address, phone number, billing address and the delivery address for your parcel. We need these to take the order, take payment, deliver it, and contact you if there is a problem. Without them we cannot complete a sale.
When you create an account: your name, email address and a password. Your password is stored scrambled, so nobody at Nura Beauty can read it. An account is created for you when you place your first order.
When you sign up to our newsletter: your email address, the date you signed up, and which part of the site you signed up from. We record that last part so we can show, if asked, that you chose to subscribe. We deliberately do not record your IP address.
When you leave a review: the name you give, your rating, what you write, and any photograph you upload. Reviews are published on this website, so please treat anything you write or photograph as public.
When you use the contact form: your name, email address and your message. These are emailed to us and are not stored on the website.
When you browse: cookies that keep your basket working and keep you signed in. See the cookies section below.
Automatically, on every visit: like every website, our server keeps a log of requests made to it. That log records your IP address, which browser and device you used, which pages you asked for, and the date and time. We do not use these logs to build a profile of you or to advertise to you. They exist so the site can be kept running and secure, for example to spot someone trying to break into the admin area, and they are kept only as long as the hosting account retains them.
We never see your card details
Card payments are handled entirely by Yoco, a South African payment provider. Your card number is entered on Yoco’s systems, not ours. Nura Beauty never receives, sees or stores your card number, expiry date or security code. We are told only whether a payment succeeded or failed, and enough information to match it to your order.
Yoco’s own privacy policy is at yoco.com/za/terms/privacy-and-app.
Cookies, analytics and advertising
Necessary cookies. This website uses cookies to keep your basket working, to keep you signed in, and to remember whether you have dismissed a notice. The shop cannot function without them, and blocking them will stop the basket and checkout working.
We also use the services below, which set their own cookies and collect information about your visit.
Google Analytics tells us how the site is used, for example which pages people visit and how they found us. It records your IP address, device, browser and the pages you view. We use it to improve the shop, not to identify you personally. Google’s privacy policy is at policies.google.com/privacy.
Meta (Facebook and Instagram) receives information about your visit in two ways. The Meta pixel records which pages you view and what you add to your basket. Separately, when you complete an order, our server sends Meta details of that purchase, including your email address and phone number in scrambled (hashed) form, so that Meta can match the sale to an advert you may have seen. We use this to measure our advertising and to show our products to people who have visited the shop. Meta’s privacy policy is at facebook.com/privacy/policy.
The TikTok pixel records which pages you view and what you buy, so that we can measure our advertising on TikTok and show our products to people who have visited the shop. TikTok’s privacy policy is at tiktok.com/legal/privacy-policy.
None of these are used to make automated decisions about you, and we never sell the information they collect.
How to switch them off
- All cookies: block or delete them in your browser settings. Blocking the necessary ones will stop the basket and checkout working
- Google Analytics: Google’s own browser add-on at tools.google.com/dlpage/gaoptout stops it on this site and every other one
- Meta: your ad preferences in Facebook or Instagram control what Meta shows you and how your activity is used
- TikTok: the personalised ads setting in the TikTok app does the same
- The order information we send to Meta: email us and we will exclude you from it
Who else receives your information
We share only what each of these needs in order to do its job, and we never sell your personal information to anyone.
- Yoco, to process card payments. South Africa
- Bob Go, and the courier company that carries your parcel, to deliver your order. They receive your name, delivery address and phone number. South Africa
- Afrihost, who host this website and therefore store its database. South Africa
- Zoho Mail, which sends our order confirmations and carries email between you and us. Processed outside South Africa
- Google, for website analytics. Processed outside South Africa
- Meta, for advertising measurement. Receives your email address and phone number in hashed form when you place an order. Processed outside South Africa
- TikTok, for advertising measurement. Processed outside South Africa
We may also disclose your personal information where we are required to by law, in response to a valid request by a court, the police or a public authority, or where it is necessary to establish or defend a legal claim, or to protect the safety of our customers or the public.
If the business is sold
If Nura Beauty is ever merged with, acquired by or sold to another business, customer information may transfer as part of that sale. We will say so on this page, and tell you by email if you have an account or a newsletter subscription, before your information becomes subject to a different privacy policy.
Information sent outside South Africa
Several of the services above process information outside South Africa.
Zoho Mail carries our email. POPIA allows this where the receiving country has comparable protection, or where the transfer is necessary to perform a contract with you, which is the case when we email you about your own order.
Google, Meta and TikTok process the information described in the cookies section on their own servers, outside South Africa. Each of them publishes the safeguards it applies to those transfers in the privacy policy linked above. You can stop all three using the controls listed under “How to switch them off”.
How long we keep it
- Orders and invoices: five years, because tax law requires us to keep records of our sales
- Your account: until you ask us to close it
- Newsletter subscriptions: until you unsubscribe
- Reviews: until you or we remove them
- Contact form messages: as long as we need them to deal with your query, and up to two years afterwards
How we protect it
This website is served entirely over an encrypted connection, so information you type into it cannot be read in transit. Access to the admin area is limited to people who need it, protected by passwords and by limits on repeated login attempts. Card details never reach our systems at all.
No website can promise perfect security. If a breach ever affects your personal information, POPIA requires us to notify you and the Information Regulator, and we will.
Your rights
Under POPIA you have the right to:
- Ask what personal information we hold about you
- Ask us to correct anything that is wrong or incomplete
- Ask us to delete information we no longer have a reason to keep
- Object to us using your information for direct marketing
- Withdraw consent you have given, at any time
- Complain to the Information Regulator
To exercise any of these, email Sales@nurabeauty.co.za. We will respond within a reasonable time and may ask you to confirm who you are first, so that we do not hand your information to someone else.
Some information we cannot delete on request, because the law requires us to keep it. Order and invoice records are the main example.
Email marketing
If you sign up to our newsletter we will use your email address to send you news about new products, restocks and offers. We only ever send this to people who have asked for it. We do not buy email lists and we do not add customers to the newsletter automatically because they bought something.
Every marketing email has an unsubscribe link, and unsubscribing takes effect immediately. You can also just email us and ask to be taken off the list.
Emails about an order you have placed, such as a confirmation or a delivery update, are not marketing. They are part of fulfilling your order and are sent whether or not you subscribe to anything.
At present your subscription is stored in this website’s own database and any newsletter is sent through Zoho, the same service that carries our order emails. If we later use a dedicated email marketing service to manage and send our newsletter, we will name it in this policy and link to its privacy policy before we start using it.
Children
This shop is not intended for children. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, email us and we will delete it.
The Information Regulator
If you are unhappy with how we have handled your information, you can complain to the Information Regulator of South Africa.
Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za
Changes to this policy
If we change this policy we will update the date at the top. If the change is significant, such as adding analytics or advertising tracking, we will say so on the site rather than change it quietly.