top of page
TZ-Beauty-Suites-logo

TZ Beauty Hub Data Privacy Policy

On This Page

  • 1. Introduction
  • 2. Responsible Party
  • 3. What Is Personal Information?
  • 4. How We Collect Personal Information
  • 5. Why We Process Personal Information
  • 6. Lawful Grounds for Processing
  • 7. Marketing Communication
  • 8. Cookies and Website Technologies
  • 9. When We Share Personal Information
  • 10. International Transfers
  • 11. Protecting Personal Information
  • 12. Data Retention
  • 13. Your Privacy Rights
  • 14. Automated Decisions
  • 15. Children’s Personal Information
  • 16. Special Personal Information
  • 17. Security Incidents
  • 18. Third-Party Websites
  • 19. Sales Agents and Customer Information
  • 20. Changes to This Policy
  • 21. Contact Us
  • 22. Complaints to the Information Regulator

1. Introduction

TZ Beauty Hub, operating through the TZ Beauty Suites website, respects your privacy and is committed to protecting your personal information. This policy governs how we collect, use, and process your data when you visit our website, create an account, browse or purchase products, subscribe to marketing communication, or apply to become a Sales Agent.

Back to Top

2. Responsible Party

For the purposes of POPIA, the responsible party is:

Business name: TZ Beauty Hub
Parent or associated brand: TZ Beauty Suites
Legal entity or proprietor name: TZ Beauty Hub
Registration number:
Physical address: 13 Payne Witpoortjie
Operating location: Witpoortjie, Roodepoort, Gauteng, South Africa
Website: www.tzbeautysuites.com
Email: info@tzbeautysuites.com
WhatsApp: 063 054 0899

Information Officer

Information Officer: Thandiwe Zondi
Information Officer email: thandiwe@tzbeautysuites.com
Information Officer contact number: 063 054 0899

Private and public bodies are required to register their Information Officers with the South African Information Regulator. The Information Officer is responsible for encouraging POPIA compliance, dealing with requests, maintaining an internal compliance framework and cooperating with the Regulator. [inforegulator.org.za], [eservices....tor.org.za]

Back to Top

3. What Is Personal Information?

Personal information is information that identifies you directly or can reasonably be linked to you.

Depending on how you interact with us, we may collect:

3.1 Identity information

  • Full name

  • Preferred name

  • Date of birth, where lawfully required

  • Identity or passport information, where verification is necessary

  • Signature

  • Sales Agent ID or referral code

  • Business or company registration information

3.2 Contact information

  • Mobile number

  • WhatsApp number

  • Email address

  • Residential address

  • Delivery address

  • City, town and province

  • Postal code

3.3 Order and transaction information

  • Products viewed or purchased

  • Order number

  • Order date

  • Product selection

  • Cart value

  • Discounts and promotional codes

  • Delivery method

  • Collection location

  • Order status

  • Return, refund or complaint information

  • Sales Agent referral code

3.4 Payment information

Payments may be processed by third-party payment service providers, including iKhokha and other payment options made available at checkout.

Depending on the payment method, payment providers may process:

  • Cardholder name

  • Card details

  • Payment amount

  • Transaction reference

  • Bank or payment authentication information

  • Fraud-prevention information

  • Payment status

  • Device or network information associated with the transaction

TZ Beauty Hub does not intend to store complete payment-card numbers or card security codes on its own systems. Payment information is processed through the relevant payment provider’s secure systems.

iKhokha states that its payment gateway accepts card payments using 3D Secure and PCI-compliant payment processing. [knowledgeb...khokha.com]

3.5 Website and device information

When you visit our website, we may automatically receive:

  • Internet Protocol address

  • Browser type

  • Device type

  • Operating system

  • Website pages visited

  • Date and time of visits

  • Referring website or campaign

  • Session activity

  • Cookie identifiers

  • Approximate geographic location

  • Checkout and cart activity

  • Website interactions and analytics information

3.6 Communication information

We may retain information you provide through:

  • Contact forms

  • Email communication

  • WhatsApp messages

  • Website chat

  • Telephone enquiries

  • Social-media messages

  • Reviews

  • Complaints

  • Customer-service requests

3.7 Sales Agent and partner application information

If you apply to become a Sales Agent or register for a partnership opportunity, we may collect:

  • Employment or occupation information

  • Previous sales experience

  • Weekly availability

  • Preferred sales channels

  • Social-media profile links

  • Province and operating area

  • Beauty-product interests

  • Application answers

  • Customer-acquisition plan

  • Customer-service responses

  • Onboarding status

  • Agreement and signature records

  • Referral-code information

  • Commission and payout records

  • Banking information through an approved secure process

We will not ask applicants to submit sensitive banking information or identity documents through unsecured channels unless there is a lawful and necessary reason to do so.

3.8 Marketing preferences

We may record:

  • Whether you agreed to receive marketing

  • Your preferred contact channel

  • The date and source of your consent

  • Your areas of product interest

  • Previous campaign interaction

  • Whether you unsubscribed or opted out

The date of an opt-out request

Back to Top

4. How We Collect Personal Information

We may collect personal information:

4.1 Directly from you

This includes information you provide when you:

  • Place an order

  • Create an account

  • Submit a form

  • Contact us

  • Apply to become a Sales Agent

  • Register your partnership interest

  • Subscribe to marketing

  • Submit a review

  • Enter a promotion

  • Request a return or refund

4.2 Automatically through the website

We may collect website, analytics and technical information using cookies, pixels, tags and similar technologies.

4.3 From service providers

We may receive information from:

  • Payment providers

  • Website-hosting platforms

  • Delivery and courier providers

  • PUDO locker services

  • Email and SMS platforms

  • Social-media platforms

  • Advertising platforms

  • Fraud-prevention providers

  • Customer relationship management systems

4.4 From an authorised Sales Agent

A customer may provide information to an authorised TZ Beauty Hub Sales Agent for the purpose of receiving product assistance or completing an enquiry.

Sales Agents may only collect the minimum information required for an enquiry or sale. Sales Agents may not use customer information for unrelated purposes or share customer information with unauthorised parties.

Back to Top

5. Why We Process Personal Information

We may process personal information for the following purposes:

5.1 To provide products and services

  • Creating and managing customer accounts

  • Processing orders

  • Confirming payments

  • Packing and dispatching products

  • Managing delivery or collection

  • Sending order updates

  • Providing customer support

  • Managing returns, refunds and complaints

5.2 To process payments

We may send the information required to the selected payment service provider to:

  • Initiate and authorise payment

  • Process refunds

  • Prevent fraud

  • Verify transactions

  • Resolve payment disputes

  • Manage chargebacks

  • Meet financial and regulatory obligations

5.3 To manage deliveries

We may provide delivery partners with the information required to deliver or make an order available for collection, including:

  • Customer name

  • Mobile number

  • Email address

  • Delivery address

  • Selected PUDO locker

  • Parcel information

  • Order or tracking reference

5.4 To provide customer support

We may use personal information to:

  • Answer questions

  • Verify orders

  • Investigate delivery issues

  • Handle complaints

  • Process returns

  • Resolve payment queries

  • Provide product information

5.5 To manage Sales Agent and partner programmes

We may process application information to:

  • Receive and assess applications

  • Communicate application outcomes

  • Complete onboarding

  • Issue Agent IDs and referral codes

  • Track referred sales

  • Calculate commission

  • Process commission payments

  • Manage training and agent support

  • Investigate referral-code disputes

  • Enforce programme terms

  • Suspend or terminate programme access where necessary

5.6 To improve our website and business

We may use aggregated, statistical or appropriately de-identified information to:

  • Understand website usage

  • Improve product discovery

  • Improve mobile usability

  • Analyse checkout behaviour

  • Evaluate marketing performance

  • Plan stock and promotions

  • Improve customer service

  • Detect technical problems

5.7 To meet legal and regulatory obligations

We may retain and process information as required for:

  • Tax and accounting

  • Fraud prevention

  • Consumer complaints

  • Payment disputes

  • Legal claims

  • Regulatory enquiries

  • Information-access requests

  • POPIA compliance

  • Applicable record-keeping obligations

Back to Top

6. Lawful Grounds for Processing

We will process personal information only where there is a lawful basis to do so.

Depending on the circumstances, we may rely on:

  • Your consent

  • The need to enter into or perform a contract with you

  • Compliance with a legal obligation

  • Protection of your legitimate interests

  • Pursuit of our legitimate business interests, where those interests do not unfairly override your privacy rights

  • Another lawful ground permitted under POPIA

Providing some personal information is voluntary. However, if you do not provide information that is necessary to process an order, payment, delivery, refund or application, we may be unable to provide the related service.

Back to Top

7. Marketing Communication

We may send marketing messages about products, promotions, new arrivals, discounts and related opportunities only where permitted by applicable law.

Electronic marketing may include:

  • Email

  • SMS

  • WhatsApp

  • Telephone communication

  • Social-media direct messages

  • Website notifications

Where consent is required, we will seek voluntary, specific and informed consent. Marketing consent will not automatically be assumed merely because a person submitted a Sales Agent application, contact form or partnership form.

Every electronic marketing message should:

  • Identify TZ Beauty Hub or the authorised sender

  • Provide a practical way to opt out

  • Include valid contact details

  • Respect previous opt-out instructions

The Information Regulator issued a Guidance Note on Direct Marketing under POPIA on 3 December 2024. The guidance addresses electronic and non-electronic direct marketing, lawful processing and consent requirements. [inforegulator.org.za], [inforegulator.org.za]

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in an email

  • Replying “STOP” where this option is provided

  • Contacting us at info@tzbeautysuites.com

  • Sending a WhatsApp message to 063 054 0899

We will retain enough information to record and respect your opt-out request.

Back to Top

8. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

  • Keep the website functioning

  • Remember cart contents

  • Maintain secure sessions

  • Remember preferences

  • Measure website usage

  • Understand website performance

  • Support payment and checkout functionality

  • Prevent fraud

  • Support advertising and campaign measurement

Cookies may include:

Essential cookies

These cookies are necessary for website security, checkout, account access and shopping-cart functionality.

Analytics cookies

These cookies help us understand how visitors use the website.

Functional cookies

These cookies remember preferences and support additional website features.

Advertising cookies

These cookies may help us measure advertising performance or show relevant advertisements, subject to applicable consent requirements.

Where required, the website will request cookie consent before placing non-essential cookies.

You can manage cookies through the website cookie banner or your browser settings. Blocking some cookies may affect website functionality.

Back to Top

9. When We Share Personal Information

We do not sell personal information.

We may share personal information with trusted service providers where necessary to operate our business, including:

  • Wix or other website and hosting providers

  • iKhokha and other payment providers

  • Banks and financial institutions

  • Courier and delivery providers

  • PUDO locker providers

  • Email, SMS and communication providers

  • Cloud-storage providers

  • Customer relationship management providers

  • Accountants, auditors and professional advisers

  • Fraud-prevention and security providers

  • Authorised Sales Agents, where reasonably required

  • Government bodies, regulators or law-enforcement authorities where legally required

Service providers should process personal information only for authorised purposes and apply appropriate safeguards.

iKhokha also processes merchant and payment information to provide payment services and meet regulatory requirements, including relevant FICA and KYC procedures. [connect.ikhokha.com], [help.ikhokha.com]

Back to Top

10. International Transfers

Some website, cloud, analytics, communication, payment or marketing service providers may store or process information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the information receives an appropriate level of protection through:

  • Applicable data-protection laws

  • Contractual safeguards

  • Binding organisational rules

  • Consent, where appropriate

  • Another transfer mechanism permitted under POPIA

POPIA regulates the flow of personal information across South Africa’s borders. [gov.za], [gov.za]

Back to Top

11. Protecting Personal Information

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved.

These measures may include:

  • Password controls

  • Multi-factor authentication where available

  • Restricted access

  • Secure payment gateways

  • Encryption where appropriate

  • Access monitoring

  • Device and software updates

  • Staff and Sales Agent confidentiality obligations

  • Secure storage

  • Backup and recovery controls

  • Service-provider assessments

  • Incident response procedures

The Information Regulator recommends collecting only necessary data, maintaining accuracy, using access controls and encryption where appropriate, applying strong passwords and multi-factor authentication, and securely deleting information that is no longer required. [eservices....tor.org.za]

No method of electronic transmission or storage can be guaranteed to be completely secure. We will nevertheless take reasonable steps to protect the personal information in our possession or control.

Back to Top

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required by law.

Retention periods may depend on:

  • The nature of the information

  • The purpose for which it was collected

  • Contractual obligations

  • Tax and accounting requirements

  • Consumer complaints

  • Returns and warranty periods

  • Fraud-prevention needs

  • Payment disputes and chargebacks

  • Legal claims

  • Regulatory requirements

  • Whether the person has requested deletion

Examples include:

  • Order and financial records may be retained for the legally required accounting or tax period.

  • Unsuccessful Sales Agent applications may be retained for 6 MONTHS, unless a longer period is lawfully required or the applicant consents to future consideration.

  • Active Agent records may be retained for the duration of the relationship and an appropriate period afterwards.

  • Marketing consent and opt-out records may be retained to prove and respect the person’s preferences.

  • Customer-service records may be retained until the enquiry or dispute has been resolved and for a reasonable period afterwards.

When information is no longer required, we will securely delete, destroy or de-identify it.

Back to Top

13. Your Privacy Rights

Subject to applicable law, you may have the right to:

  • Ask whether we hold personal information about you

  • Request access to your personal information

  • Request correction of inaccurate or outdated information

  • Request deletion or destruction where legally appropriate

  • Object to certain processing

  • Withdraw consent

  • Object to direct marketing

  • Request information about the recipients of your data

  • Lodge a complaint with the Information Regulator

The Information Regulator provides official forms for objections, correction or deletion requests, direct-marketing consent and privacy complaints. [inforegulator.org.za]

To exercise your rights, contact:

Information Officer: Thandiwe Zondi
Email: thandiwe@tzbeautysuites.com
Subject line: Privacy Request

We may request reasonable information to verify your identity before granting access, making corrections or deleting information. We will not disclose personal information to an unauthorised person.

Back to Top

14. Automated Decisions

We may use filters or workflow rules to identify incomplete Sales Agent applications, possible duplicate submissions or applications requiring manual review.

We will not make a final decision with significant consequences solely on the basis of automated processing where this would be prohibited under applicable law.

Sales Agent applications should receive an appropriate level of human review before approval or decline.

Back to Top

15. Children’s Personal Information

Our products and services are primarily intended for adults or for purchases made with the involvement of a parent or legal guardian.

We do not knowingly collect personal information directly from children without appropriate consent or another lawful basis.

If you believe a child has submitted personal information without appropriate permission, contact us at info@tzbeautysuites.com so that we can investigate and take appropriate action.

Separate authorisation requirements may apply to the processing of children’s personal information under POPIA. [inforegulator.org.za], [inforegulator.org.za]

Back to Top

16. Special Personal Information

We do not intentionally collect special personal information unless:

  • It is necessary for a legitimate and lawful purpose

  • You provide it voluntarily and the processing is lawful

  • We are required or permitted to process it by law

  • Appropriate safeguards are applied

Special personal information includes information relating to health, religious or philosophical beliefs, political persuasion, trade-union membership, race or ethnic origin, biometric information, sex life and certain criminal-behaviour information. [inforegulator.org.za]

Please do not submit unnecessary health, identity, banking or other sensitive information through ordinary website forms, WhatsApp or email.

Back to Top

17. Security Incidents

If we become aware of unauthorised access to personal information, we will investigate the incident and take reasonable steps to contain and address it.

Where required by POPIA, we will notify the Information Regulator and affected individuals as soon as reasonably possible, taking into account legitimate law-enforcement needs.

The Information Regulator provides a Security Compromise Notification process under section 22 of POPIA. [inforegulator.org.za]

Back to Top

18. Third-Party Websites

Our website may contain links to:

  • Payment platforms

  • Courier tracking pages

  • PUDO services

  • Social-media platforms

  • Partner websites

  • External forms or cloud-storage services

We do not control the privacy practices of independent third parties. You should read the privacy policy of the relevant third-party service before submitting personal information.

Back to Top

19. Sales Agents and Customer Information

Authorised Sales Agents must:

  • Collect only information necessary for the enquiry or sale

  • Keep customer information confidential

  • Use customer information only for approved sales activity

  • Protect devices and accounts used to store customer information

  • Respect opt-out requests

  • Avoid copying customer information into unauthorised personal databases

  • Return or securely delete customer information when instructed

  • Report suspected privacy incidents immediately

Sales Agents must not:

  • Sell customer information

  • Share customer information with unauthorised parties

  • use customer information for unrelated businesses

  • Send unlawful unsolicited marketing

  • Request complete card details

  • Request a card security code

  • Request online banking passwords or one-time PINs

  • Collect payment into a personal account unless expressly authorised in writing

Back to Top

20. Changes to This Policy

We may update this Data Privacy Policy from time to time to reflect:

  • Changes to our services

  • New payment or delivery providers

  • New website functionality

  • Changes to the Sales Agent programme

  • Legal or regulatory developments

  • Changes to our information-handling practices

The updated version will be published on this page with a revised “Last updated” date.

Material changes may also be communicated by email, website notice or another appropriate channel.

21. Contact Us

If you have questions, concerns or requests relating to personal information, contact:

TZ Beauty Hub Information Officer
Name: Thandiwe Zondi
Email: info@tzbeautysuites.com
WhatsApp: 063 054 0899
Address: 13 Payne Witpoortjie
Website: www.tzbeautysuites.com

Back to Top

22. Complaints to the Information Regulator

If you believe that your personal information has been processed unlawfully, you should first contact us so that we can attempt to resolve the matter.

You also have the right to submit a complaint to the South African Information Regulator.

Website: https://inforegulator.org.za
Online services: https://eservices.inforegulator.org.za

The Information Regulator is empowered to monitor and enforce compliance with POPIA and the Promotion of Access to Information Act. [eservices....tor.org.za], [inforegulator.org.za]

Back to Top
bottom of page