Privacy policy

SECTION 17 – PRIVACY, PERSONAL INFORMATION AND POPIA COMPLIANCE

17. Privacy and Protection of Personal Information

Cosmetic Connection respects the privacy of its customers and is committed to protecting personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA"), the Consumer Protection Act 68 of 2008 and any other applicable South African legislation.

By using Cosmetic Connection's website, placing an order, creating an account or otherwise interacting with Cosmetic Connection, customers acknowledge that their personal information may be collected, processed and stored in accordance with this policy.

17.1 Collection of Personal Information

Cosmetic Connection may collect personal information including, but not limited to:

• full name;
• identity or passport number where legally required;
• company name;
• company registration number;
• VAT number where applicable;
• delivery address;
• billing address;
• email address;
• telephone number;
• payment information;
• order history;
• communication preferences;
• website usage information;
• IP address;
• device information; and
• any other information voluntarily provided by the customer.

Only information reasonably necessary for legitimate business purposes will be collected.

17.2 Purpose of Collection

Personal information may be collected and processed for purposes including:

• creating and managing customer accounts;
• processing orders;
• processing payments;
• arranging deliveries;
• communicating with customers;
• responding to customer enquiries;
• processing warranty claims;
• handling refunds and complaints;
• preventing fraud;
• verifying customer identity;
• complying with legal obligations;
• maintaining internal business records;
• improving products and services;
• conducting customer satisfaction surveys;
• sending marketing communications where consent has been provided or another lawful basis exists; and
• any other purpose permitted under applicable law.

17.3 Lawful Basis for Processing

Cosmetic Connection processes personal information only where permitted by law, including where processing is necessary:

• to perform a contract with the customer;
• to comply with legal obligations;
• for Cosmetic Connection's legitimate business interests;
• to protect the legitimate interests of the customer;
• where the customer has provided consent; or
• on any other lawful basis recognised under POPIA.

17.4 Accuracy of Information

Customers are responsible for ensuring that the personal information provided to Cosmetic Connection is accurate, complete and up to date.

Customers should notify Cosmetic Connection promptly of any changes to their contact or account information.

Cosmetic Connection shall not be liable for delays, failed deliveries or communication failures resulting from inaccurate or outdated information supplied by the customer.

17.5 Sharing of Personal Information

Cosmetic Connection may disclose personal information only where reasonably necessary, including to:

• payment service providers;
• banks;
• courier and logistics providers;
• IT service providers;
• cloud hosting providers;
• manufacturers where warranty claims are processed;
• legal advisers;
• auditors;
• regulatory authorities;
• law enforcement agencies; or
• any other third party where disclosure is authorised or required by law.

Cosmetic Connection does not sell customers' personal information to third parties.

17.6 International Transfers

Where personal information is processed or stored outside South Africa, Cosmetic Connection will take reasonable steps to ensure that the recipient provides an adequate level of protection substantially similar to that required under POPIA or that another lawful basis for the transfer exists.

17.7 Information Security

Cosmetic Connection implements reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• misuse;
• alteration;
• disclosure; and
• cyber threats.

While Cosmetic Connection takes reasonable security measures, no electronic storage or internet transmission can be guaranteed to be completely secure.

17.8 Customer Accounts

Customers are responsible for maintaining the confidentiality of their account credentials, including usernames and passwords.

Customers must notify Cosmetic Connection immediately if they suspect:

• unauthorised access to their account;
• password compromise;
• identity theft; or
• fraudulent account activity.

Customers remain responsible for activities conducted through their accounts until Cosmetic Connection has been notified of any unauthorised access.

17.9 Cookies and Website Analytics

The Cosmetic Connection website may use:

• cookies;
• analytics tools;
• session identifiers;
• website performance monitoring; and
• similar technologies

to improve website functionality, customer experience, security and website performance.

Customers may adjust their browser settings to limit or disable cookies; however, doing so may affect certain website functionality.

17.10 Marketing Communications

Where permitted by law, Cosmetic Connection may send customers:

• promotional offers;
• newsletters;
• product updates;
• competition information;
• promotional campaigns; and
• marketing communications.

Customers may opt out of receiving marketing communications at any time by following the unsubscribe instructions provided or by contacting Cosmetic Connection directly.

Opting out of marketing communications does not affect communications necessary for the administration of customer accounts or orders.

17.11 Retention of Personal Information

Cosmetic Connection will retain personal information only for as long as reasonably necessary to:

• fulfil the purposes for which it was collected;
• comply with legal obligations;
• resolve disputes;
• enforce contractual rights; or
• satisfy statutory record-keeping requirements.

Once personal information is no longer required, Cosmetic Connection will securely delete, destroy or de-identify such information in accordance with applicable law.

17.12 Customer Rights

Subject to POPIA and other applicable legislation, customers may have the right to:

• request access to their personal information;
• request correction of inaccurate information;
• request deletion of personal information where legally permissible;
• object to certain processing activities;
• withdraw consent where processing is based on consent;
• request information regarding the processing of their personal information; and
• lodge a complaint with the Information Regulator of South Africa.

Requests will be processed in accordance with applicable legal requirements and may be subject to identity verification.

17.13 Data Breaches

Where Cosmetic Connection becomes aware of a security compromise involving personal information and notification is required by law, Cosmetic Connection will notify affected individuals and the Information Regulator in accordance with POPIA.

17.14 Third-Party Websites

The Cosmetic Connection website may contain links to third-party websites or services.

Cosmetic Connection is not responsible for:

• the privacy practices of third-party websites;
• the content of third-party websites;
• the security of third-party websites; or
• the processing of personal information by third parties outside Cosmetic Connection's control.

Customers are encouraged to review the privacy policies of any third-party websites they access.

17.15 Reservation of Rights

Cosmetic Connection reserves the right to amend this Privacy section from time to time to reflect changes in:

• applicable legislation;
• regulatory guidance;
• business operations;
• security practices; or
• technological developments.

Any amendments will apply from the date they are published, subject to applicable legal requirements.

Nothing contained in this section limits any rights afforded to data subjects under POPIA or any other applicable South African legislation.

SECTION 21 – COMPANY INFORMATION, CONTACT DETAILS, EFFECTIVE DATE AND POLICY ACCEPTANCE

21. Company Information

This Policy applies to all products and services supplied by the following Cosmetic Connection entities:

Cosmetic Connection eCommerce (Pty) Ltd

Registration Number: 2020/595141/07
VAT Number: 4240292526

This entity is responsible for all purchases placed through the official Cosmetic Connection online store, website and other authorised online sales channels.

Cosmetic Connection (Pty) Ltd

Registration Number: 1999/010351/07
VAT Number: 4790182432

This entity is responsible for all purchases made at Cosmetic Connection's physical retail stores.

Throughout this Policy, the term "Cosmetic Connection" refers collectively to the above entities, together with their authorised employees, representatives and agents acting within the scope of their authority, unless the context indicates otherwise.

21.1 Contact Details

Customers may contact Cosmetic Connection regarding:

• orders;
• deliveries;
• Click & Collect;
• returns;
• refunds;
• defective products;
• warranty claims;
• exchanges where applicable;
• complaints;
• privacy requests;
• promotions;
• competitions; or
• general customer service.

Customer Support Email: support@cosweb.co.za

Social Media Support Email: socialsupport@cosweb.co.za

Landline: (051) 250-4011

WhatsApp Support: (066) 194-1099

Customers are encouraged to use the appropriate contact method to ensure that enquiries are directed to the relevant department and resolved as efficiently as possible.

21.2 Business Hours

Cosmetic Connection's customer service and operational business hours are as follows:

Summer Trading Hours (September – May)

Winter Trading Hours (June – August)

Customer service enquiries received outside the above business hours will be attended to as soon as reasonably practicable during the next business day.

Cosmetic Connection reserves the right to amend its trading hours from time to time due to operational requirements, special trading days, public holiday regulations, extraordinary circumstances or other business needs. Any changes will be communicated through Cosmetic Connection's official communication channels where reasonably practicable.

21.3 Effective Date

This Policy becomes effective on the date specified below and remains in force until amended or replaced by Cosmetic Connection.

Effective Date: 01-July-2026

21.4 Policy Version

This document constitutes the official version of the Cosmetic Connection Policy.

Policy Version: CosmeticConnectionPV2.001

Last Updated: 01-July-2026

Cosmetic Connection reserves the right to publish updated versions from time to time.

21.5 Previous Policies

From the Effective Date, this Policy supersedes all previous versions of Cosmetic Connection's applicable policies relating to the same subject matter.

Transactions completed before the Effective Date shall remain subject to the policy applicable at the time of the transaction unless otherwise required by law.

21.6 Acceptance of this Policy

By:

• accessing the Cosmetic Connection website;
• creating a customer account;
• placing an order;
• purchasing products;
• collecting products;
• accepting delivery of products; or
• otherwise transacting with Cosmetic Connection,

the customer confirms that they have had a reasonable opportunity to read this Policy and agree to be bound by it to the extent permitted by applicable law.

Where mandatory consumer rights apply under the Consumer Protection Act or any other applicable legislation, those rights shall prevail over any inconsistent provision contained in this Policy.

21.7 Electronic Acceptance

Customers acknowledge that acceptance of this Policy may occur electronically, including by:

• completing an online purchase;
• clicking an "I Accept", "Proceed to Checkout" or similar confirmation button;
• creating an online account;
• making payment for an order; or
• continuing to use Cosmetic Connection's online services after being notified of amendments to this Policy where such continued use constitutes acceptance under applicable law.

Electronic acceptance shall have the same legal force and effect as a handwritten signature where recognised by South African law.

21.8 Language

This Policy is published in English.

Should Cosmetic Connection provide translated versions for convenience, the English version shall prevail in the event of any inconsistency, unless otherwise required by law.

21.9 No Partnership or Agency

Nothing contained in this Policy creates:

• a partnership;
• a joint venture;
• an employment relationship; or
• an agency relationship

between Cosmetic Connection and any customer.

Customers act solely as purchasers of products or services unless otherwise agreed in writing.

21.10 Customer Acknowledgement

The customer acknowledges that:

• this Policy has been drafted to comply with applicable South African legislation;
• statutory consumer rights remain unaffected by any provision that cannot lawfully be limited or excluded;
• Cosmetic Connection may amend this Policy in accordance with its amendment provisions;
• customers remain responsible for reviewing the latest published version before placing future orders; and
• continued transactions with Cosmetic Connection constitute acceptance of the most recent applicable version of this Policy where permitted by law.

21.11 Interpretation

If any uncertainty arises regarding the interpretation of this Policy, it shall be interpreted:

• consistently with applicable South African legislation;
• in a manner that gives effect to consumers' mandatory statutory rights; and
• in accordance with the ordinary commercial meaning of its provisions.

21.12 Final Reservation of Rights

Cosmetic Connection reserves all rights, remedies and protections available under:

• the Consumer Protection Act 68 of 2008;
• the Electronic Communications and Transactions Act 25 of 2002;
• the Protection of Personal Information Act 4 of 2013;
• the Companies Act 71 of 2008;
• the common law of South Africa; and
• any other applicable legislation.

Nothing contained in this Policy shall be interpreted as limiting any right or remedy that Cosmetic Connection or a consumer may have under applicable law.