Privacy policy

Kavrah Scents ("we", "us", "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and the rights you have over your personal data.

This policy is provided in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 (ECT Act).

By using our website, placing an order, or providing us with your personal information, you consent to the practices described in this policy.

1. Who We Are

Kavrah Group (Pty) Ltd t/a Kavrah Scents is the responsible party (data controller) for the personal information collected through this website.

Reg No: 2026/382654/07 Address: 3 Crystal Cove, Zimbali Estate, Ballito, 4439 Email: info@kavrah.co.za WhatsApp: 060 418 4780 Website: kavrah.co.za

For all privacy-related enquiries, please contact us at info@kavrah.co.za.

2. What Information We Collect

We collect personal information that is necessary to operate our business, fulfil your orders, and improve your experience. The information we collect falls into the following categories.

2.1 Information You Provide

When you interact with our website — by placing an order, creating an account, signing up for our newsletter, or contacting us — you may provide:

Full name
Email address
Delivery and billing addresses
Phone number
Order history and product preferences
Payment information (processed securely by our payment provider — see Section 4)
Communications you send to us (emails, WhatsApp messages, contact form submissions)
Account login credentials (if you create an account)

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

IP address and approximate location
Browser type, language, and operating system
Device type (desktop, mobile, tablet)
Pages viewed, time spent on pages, and click patterns
Referring website (the site you came from)
Date and time of your visit

2.3 Information from Third Parties

We may receive information about you from third-party services we use, including:

Our payment processor (PayFast)
Our courier and delivery partners
Analytics providers (such as Google Analytics)
Marketing platforms (such as Meta and Google Ads, if you've engaged with our advertisements)

3. Why We Collect Your Information

We only collect personal information for specific, lawful purposes. These include:

3.1 To Fulfil Your Orders

Processing payments
Confirming and dispatching orders
Coordinating delivery with our courier partners
Sending order confirmation, dispatch, and tracking notifications
Managing returns, refunds, and customer queries

3.2 To Operate and Improve Our Service

Maintaining and securing our website
Analysing how customers use our website to improve user experience
Detecting, preventing, and investigating fraud or unauthorised activity
Maintaining business records and complying with legal obligations

3.3 To Communicate With You

Responding to your enquiries
Sending transactional emails (order updates, shipping notifications)
Sending marketing communications, where you have opted in
Notifying you of important changes to our policies, products, or services

3.4 With Your Consent

Sending newsletters, promotional offers, and marketing communications
Personalising your experience based on browsing or purchase history
Conducting surveys or requesting product reviews

You may withdraw your consent for marketing communications at any time (see Section 9).

4. How We Process Payments

We do not store your full payment details on our servers. All payment transactions on Kavrah Scents are processed securely through PayFast, South Africa's leading payment gateway.

PayFast is PCI-DSS compliant and adheres to the security standards set by Visa, Mastercard, and the broader payment industry. Your card information is encrypted and handled directly by PayFast — Kavrah Scents only receives confirmation of a successful or failed payment, along with the order details necessary for fulfilment.

For more information on how PayFast handles your data, please see the PayFast Privacy Policy at payfast.io.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide essential functionality, analyse site usage, and personalise your experience.

5.1 What Cookies Are

Cookies are small text files stored on your device when you visit a website. They allow the site to remember your actions and preferences over time.

5.2 Types of Cookies We Use

Essential cookies — Required for the website to function (e.g. keeping items in your cart, processing logins). These cannot be disabled without breaking core functionality.

Performance and analytics cookies — Help us understand how visitors use our site, which pages are most popular, and where issues occur. We use Google Analytics for this purpose.

Functional cookies — Remember your preferences, such as language settings or recently viewed products.

Marketing cookies — Allow us to deliver relevant advertising to you on other websites and platforms (such as Meta and Google). These are only set if you have given consent.

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or accept cookies, and to delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website.

6. Who We Share Your Information With

We do not sell your personal information. We only share it with trusted third parties who help us operate our business, and only to the extent necessary for them to provide their service.

6.1 Service Providers

PayFast — for payment processing
Our courier partners — to deliver your orders
Shopify — our ecommerce platform provider
Email service providers — for transactional and marketing emails
Google Analytics — for website analytics
Meta and Google — for advertising, where applicable

Each of these providers is contractually bound to protect your information and use it only for the purposes for which it was shared.

6.2 Legal and Regulatory Disclosures

We may disclose your personal information if required to do so by law, regulation, court order, or government request — for example, in response to a subpoena, audit, or law enforcement investigation.

6.3 Business Transfers

If Kavrah Scents is involved in a merger, acquisition, sale of assets, or restructuring, your personal information may be transferred as part of that transaction. We will notify you of any such change and outline your rights at that time.

7. International Transfers

Some of our service providers (such as Shopify, Google, and Meta) operate internationally and may store or process data outside of South Africa. Where this occurs, we ensure that appropriate safeguards are in place — including contractual commitments — to protect your data in line with POPIA standards.

By using our website, you consent to the transfer of your information to jurisdictions outside South Africa where our service providers operate.

8. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Order and transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with the Tax Administration Act and other applicable financial regulations.

Account information: Retained while your account is active. If you close your account or request deletion, we will remove or anonymise your data within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

Marketing data: Retained until you unsubscribe or withdraw consent, after which we will remove it from our marketing systems within 30 days.

Customer service correspondence: Retained for 2 years to support service quality and dispute resolution.

After the applicable retention period, your data is securely deleted or anonymised.

9. Your Rights

Under POPIA, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal information we hold about you, free of charge once a year.

9.2 Right to Correction

You have the right to request that we correct any information that is inaccurate, outdated, or incomplete.

9.3 Right to Deletion

You have the right to request that we delete your personal information, subject to any legal obligations that require us to retain it.

9.4 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes at any time. You can do this by:

Clicking the "unsubscribe" link in any marketing email we send
Replying "STOP" to any marketing SMS or WhatsApp message
Emailing us at info@kavrah.co.za

9.5 Right to Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing that occurred before the withdrawal.

9.6 Right to Lodge a Complaint

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:

The Information Regulator (South Africa) Email: complaints.IR@justice.gov.za Website: inforegulator.org.za

We encourage you to contact us first at info@kavrah.co.za so we can address your concern directly.

9.7 Exercising Your Rights

To exercise any of these rights, please email us at info@kavrah.co.za with your request. We may need to verify your identity before processing the request, and we will respond within 30 days.

10. How We Protect Your Information

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to safeguard it. These include:

SSL encryption on all data transmitted to and from our website
Secure payment processing through PCI-DSS compliant providers
Restricted access to personal information — only authorised team members with a legitimate business need can access customer data
Regular monitoring of our systems for vulnerabilities and threats
Secure storage of data with reputable cloud infrastructure providers
Staff training on data protection and confidentiality

While we take every reasonable precaution to protect your information, no method of transmission or storage is 100% secure. In the unlikely event of a data breach that affects your personal information, we will notify you and the Information Regulator as required by law.

11. Children's Privacy

Our website and products are intended for adults aged 18 years or older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at info@kavrah.co.za and we will delete the information promptly.

12. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third party before sharing your information with them.

13. Marketing Communications

If you have opted in to receive marketing communications from Kavrah Scents, we may send you:

Newsletters featuring new products, fragrance launches, and brand stories
Promotional offers, discounts, and early access to sales
Personalised recommendations based on your purchase history
Surveys and feedback requests

You can unsubscribe at any time by clicking the "unsubscribe" link in any email or by emailing us at info@kavrah.co.za. Please allow up to 7 business days for your unsubscribe request to take full effect.

We will continue to send you transactional communications (such as order confirmations and shipping updates) regardless of your marketing preferences, as these are necessary for fulfilling your orders.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The "Last updated" date at the top of this policy will indicate when it was most recently revised.

For significant changes, we will notify you via email or a prominent notice on our website before the changes take effect. We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Kavrah Group (Pty) Ltd t/a Kavrah Scents Reg No: 2026/382654/07 Email: info@kavrah.co.za WhatsApp: 060 418 4780 Address: 3 Crystal Cove, Zimbali Estate, Ballito, 4439

Operating hours: Monday to Friday, 8:30 AM – 5:00 PM (SAST)

We aim to respond to all privacy-related enquiries within 30 days, in line with POPIA requirements.