Privacy policy

We are the responsible party. Our Information Officer is Nkosinathi Khumalo, reachable at x.neuxjewels@gmail.com.

We collect only what we need to run the shop:

• Account details — your name, email and password (stored encrypted by our auth provider).
• Order details — delivery address, phone number and what you bought.
• Optional profile details — a profile photo and gender, if you choose to add them.
• Communication preferences — whether you’ve opted in to marketing email.
• Technical basics — the essential cookies that keep your cart and session working.

We do not collect or store your full card number — payments are handled by our payment provider.

We use your information to process and deliver orders, manage your account, provide support, meet our legal obligations, and — only if you’ve opted in — to send you marketing. Our lawful bases are performing our contract with you, your consent, and our legitimate business interests.

We only send marketing email if you’ve opted in, or where the law allows us to market our own similar products to an existing customer. Every marketing email has an unsubscribe link, and you can turn marketing off anytime under Account → Settings. Once you opt out we add you to a suppression list and won’t email you again.

We share personal information only with the operators who help us run the store:

• Our database and hosting providers (which store your data securely).
• Our payment provider (to take payment).
• Our courier (to deliver your order).
• Our email provider (to send order and, if opted in, marketing email).

We never sell your personal information.

Your information is stored on reputable cloud infrastructure and may be processed outside South Africa. Where that happens, we rely on providers that offer protection comparable to POPIA.

We keep order records for as long as the law requires (tax and accounting rules), and account information until you ask us to delete it. Marketing consent is kept until you opt out.

Under POPIA you may:

• ask what information we hold about you and request a copy;
• ask us to correct or delete it;
• object to processing or withdraw consent;
• complain to the Information Regulator (inforeg.org.za).

To exercise any of these, email x.neuxjewels@gmail.com.

We protect your information with encrypted connections, access controls and reputable infrastructure. No system is perfect, but we take reasonable steps to keep your data safe and will notify you and the Regulator of a breach as POPIA requires.

We may update this policy. We’ll post the new version here with a fresh date, and for significant changes we’ll let you know.