Privacy policy

Last updated: August 9, 2026

BlossomBody Store operates this website and online store and provides the products and services available through it.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect and disclose your personal information when you visit our website, use our services, create an account, place an order, communicate with us or otherwise interact with BlossomBody.

This Privacy Policy is intended to comply with applicable South African privacy legislation, including the Protection of Personal Information Act 4 of 2013 ("POPIA"), as amended from time to time.

Where applicable, we process personal information in accordance with the conditions for lawful processing established by POPIA and respect the rights of data subjects provided for under the Act.

BlossomBody is powered by Shopify, which provides the technology and infrastructure used to operate our online store. Shopify and other service providers may process personal information on our behalf or in connection with providing their services.

This Privacy Policy explains how BlossomBody collects, uses, stores, protects and discloses personal information. By using our website, you acknowledge that you have been provided with access to this Privacy Policy.

For purposes of this Privacy Policy, "personal information" has the meaning given to it under the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable law.

Depending on how you interact with our website and services, we may collect and process the following categories of personal information:

• Contact information, including your name, email address, telephone number, billing address and delivery address.

• Order and transaction information, including products purchased, order details, delivery information, returns, refunds, exchanges and other transaction details.

• Payment information required to process your purchase. Payment information may be processed directly by our payment service providers in accordance with their own privacy policies, security practices and applicable laws.

• Account information, where you create an account with us, including account-related information and security credentials.

• Communications with us, including information you provide when contacting customer support, making an enquiry, submitting a complaint or otherwise communicating with BlossomBody.

• Device and technical information, including information about your device, browser, IP address, network connection and other technical identifiers.

• Usage information, including information about how you interact with, browse or use our website and services.

• Marketing and communication preferences, including whether you have chosen to receive promotional communications from us.

We may collect personal information from the following sources:

• Directly from you, including when you create an account, place an order, provide information during checkout, contact us, subscribe to communications or otherwise provide information to us.

• Automatically through our website and services, including information collected from your device, browser, cookies and similar technologies.

• From Shopify and other service providers that assist us in operating our store and providing services to you.

• From payment providers, delivery and courier providers, fraud prevention providers, analytics providers, advertising platforms and other service providers where permitted by law.

• From third parties or business partners where they are lawfully entitled to provide us with your personal information.

Depending on how you interact with us and the services you use, we may use your personal information for the following purposes:

• To provide, operate, maintain and improve our website and services.

• To process and fulfil your orders and transactions.

• To process payments and provide order-related services.

• To arrange delivery and shipping of products.

• To communicate with you regarding your orders, payments, deliveries, returns, refunds, account or other transactions.

• To provide customer support and respond to enquiries, requests and complaints.

• To maintain and manage customer accounts where applicable.

• To remember your preferences and improve your shopping experience.

• To provide recommendations, offers and information about products or services that may be relevant to you, where permitted by applicable law.

• To protect the security and integrity of our website, services, customers and business.

• To detect, prevent, investigate and address fraud, unauthorised activity, security incidents, illegal activity or other misuse of our services.

• To comply with applicable laws, regulations, legal processes and lawful requests from government or regulatory authorities.

• To establish, exercise or defend our legal rights.

• To enforce our terms, policies and other agreements.

• For business administration, reporting, analytics and other legitimate business purposes permitted by law.

We will only collect and process personal information for lawful and specific purposes and in a manner that is compatible with applicable law.

BlossomBody processes personal information in accordance with the conditions for lawful processing set out in POPIA.

Depending on the circumstances, personal information may be processed where it is necessary to provide products or services requested by you, perform a contract or transaction with you, comply with a legal obligation, protect legitimate interests permitted by applicable law, or where you have provided consent or another lawful basis for processing applies.

Where POPIA requires consent, we will request consent in an appropriate manner.

Where processing is based on consent, you may withdraw your consent, subject to applicable legal and contractual limitations. Withdrawal of consent will not affect the lawfulness of processing that took place before the withdrawal.

If you are located in South Africa, the processing of your personal information is subject to the Protection of Personal Information Act 4 of 2013 (POPIA), where applicable.

Subject to the conditions and limitations provided for under POPIA and other applicable laws, you may have the right to:

• Request access to personal information that we hold about you.

• Request correction or updating of personal information that is inaccurate, misleading, outdated or incomplete.

• Request the deletion or destruction of personal information where permitted by law.

• Object to certain processing of your personal information.

• Object to the processing of your personal information for direct marketing purposes.

• Withdraw consent where processing is based on your consent.

• Request information about how your personal information is being processed, where applicable.

• Lodge a complaint regarding the processing of your personal information.

These rights are not absolute and may be subject to legal requirements, exemptions, legitimate business requirements or other limitations under POPIA and applicable law.

To exercise an applicable privacy right, please contact us using the contact details provided in the "Contact Us" section of this Privacy Policy.

We may use your personal information to communicate with you about our products, services, promotions, offers and other marketing information where permitted by applicable law.

Where required by POPIA, we will obtain your consent before sending direct marketing by means of unsolicited electronic communication, including email, SMS, telephone or similar electronic channels.

Where permitted by section 69 of POPIA, we may communicate with an existing customer regarding our own similar products or services where the requirements of POPIA are satisfied.

Where we rely on the existing-customer exception for electronic direct marketing, we will provide a reasonable opportunity for the customer to object to receiving such communications when collecting their contact information and in subsequent marketing communications.

You may unsubscribe from promotional communications at any time by using the unsubscribe option provided in our marketing communications or by contacting us directly.

Marketing communications will identify BlossomBody or the person on whose behalf the communication is sent and will provide appropriate contact details through which you can request that further marketing communications cease.

We will respect valid objections to direct marketing in accordance with applicable law.

We may disclose personal information to third parties where reasonably necessary and permitted by applicable law.

These third parties may include:

• Shopify and technology service providers that help us operate our online store.

• Payment processors and payment service providers that process transactions.

• Courier, delivery and fulfilment providers that assist with delivering your orders.

• IT, cloud storage, hosting, security and technical service providers.

• Customer service and communication providers.

• Analytics and website performance providers.

• Marketing and advertising service providers, where permitted by law.

• Fraud prevention, security and risk management providers.

• Professional advisers, including legal, accounting or financial advisers where necessary.

• Government authorities, regulators, courts or law enforcement agencies where disclosure is required or permitted by law.

• Other parties where you have requested or authorised us to disclose your information.

We take reasonable steps to ensure that third parties processing personal information on our behalf provide appropriate safeguards and process personal information in accordance with applicable legal requirements.

Payments made through our website may be processed by third-party payment service providers.

BlossomBody does not intentionally request or require customers to send complete payment card details to us by email, social media, messaging services or other unsecured communication channels.

Payment providers may collect and process payment card or financial information necessary to complete your transaction in accordance with their own privacy policies, security requirements and applicable laws.

You should never send complete payment card numbers, passwords or other sensitive financial information to BlossomBody through unsecured communication channels.

Our online store is hosted and powered by Shopify.

Shopify provides the technology and infrastructure that enables us to offer our products and services to you.

Information that you submit through our website may be transmitted to and processed by Shopify and other third parties that provide services to us. These providers may be located in countries other than South Africa.

Shopify may also process information relating to your access to and use of our website in accordance with Shopify's own privacy policies and applicable legal requirements.

For more information about how Shopify processes personal information, please refer to Shopify's applicable privacy policies.

Our website may contain links to websites, applications, social media platforms or other online services operated by third parties.

These third-party services are not controlled by BlossomBody.

If you follow a link to a third-party website or service, your interaction with that third party may be subject to its own privacy policy and terms.

We are not responsible for the privacy practices, security, content or policies of third-party websites or services.

Our website and service providers may use cookies, pixels, tags, web beacons and similar technologies to operate and improve our website, remember preferences, understand website usage, provide security, measure performance and support marketing or advertising activities where permitted by applicable law.

Cookies may be used to help remember items in your shopping cart, process transactions, understand how visitors use our website and improve the customer experience.

You may be able to control or disable certain cookies through your browser settings. However, disabling cookies may affect the functionality of certain parts of our website.

Where applicable, additional cookie notices or consent mechanisms may be provided on our website.

Our services are not intended to be used by children where prohibited by applicable law, and we do not knowingly collect personal information from children in circumstances where such collection is unlawful.

If you are a parent or legal guardian and believe that a child has provided us with personal information unlawfully, please contact us using the contact details provided in this Privacy Policy so that we can investigate and take appropriate action.

Where POPIA or other applicable law imposes additional requirements concerning the processing of children's personal information, we will comply with those requirements.

We take reasonable and appropriate technical and organisational measures designed to protect personal information against loss, damage, unauthorised access, unlawful processing, disclosure, alteration or destruction.

These measures may include appropriate security practices provided by Shopify and our service providers, access controls, security monitoring and other safeguards appropriate to the nature of the information being processed.

However, no method of transmission over the internet or method of electronic storage is completely secure.

While we take reasonable steps to protect personal information, we cannot guarantee absolute or perfect security.

You should not use unsecured communication channels to send sensitive or confidential information to us.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or processed, or where retention is required or permitted by applicable law.

The length of time we retain personal information may depend on factors such as:

• Whether we need the information to provide services to you.

• Whether we need the information to maintain business and transaction records.

• Whether we are required to retain the information under applicable law.

• Whether the information is necessary to resolve disputes or enforce agreements.

• Whether the information is required for legitimate business, security or fraud-prevention purposes.

When personal information is no longer required and there is no legal or legitimate reason to retain it, we will take reasonable steps to delete, destroy or de-identify it where appropriate.

If we become aware of a security compromise involving personal information, we will take reasonable steps to assess, contain and address the incident.

Where POPIA requires notification to affected data subjects and/or the Information Regulator, we will provide such notification in accordance with applicable law.

Because BlossomBody uses Shopify and other third-party service providers, your personal information may be stored, processed or transferred outside South Africa.

Where personal information is transferred to a third party in another country, BlossomBody will take reasonable steps to ensure that the transfer is conducted in accordance with section 72 of POPIA and other applicable laws.

Where required by POPIA, an international transfer may take place where the recipient is subject to a law, binding corporate rules or binding agreement that provides an adequate level of protection; where you have consented to the transfer; where the transfer is necessary for the performance or conclusion of a contract; or where another lawful basis recognised by section 72 applies.

Some third-party service providers may have their own international data-processing arrangements and privacy policies.

You may choose not to receive promotional communications from us by using the unsubscribe option included in our promotional emails or by contacting us directly.

If you opt out of promotional communications, we may still send you non-promotional communications that are necessary for your transactions or relationship with us, including order confirmations, payment information, delivery updates, account-related communications, security notices or other service-related messages.

If you have concerns or complaints about how BlossomBody processes your personal information, we encourage you to contact us first using the contact details provided below so that we can investigate and attempt to resolve your concern.

If you believe that your personal information has been processed unlawfully or that your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator of South Africa in accordance with applicable law.

POPIA Complaints:

General Enquiries:

Telephone:

010 023 5200

You may also submit a POPIA complaint through the Information Regulator's official eServices portal.

If you wish to access, correct, update, delete, object to the processing of, or otherwise make a request concerning your personal information, please contact us using the contact details below.

We may need to verify your identity before processing certain requests in order to protect your personal information and prevent unauthorised access.

Where permitted by applicable law, we may refuse or limit a request where a lawful exemption or other legal requirement applies.

We will respond to valid requests within the period required by applicable law.

BlossomBody Store's Information Officer is responsible for overseeing compliance with POPIA and handling privacy-related enquiries and requests.

BlossomBody will maintain an appropriate contact point for privacy and POPIA-related enquiries.

For privacy enquiries, requests concerning personal information, or questions about this Privacy Policy, please contact:

BlossomBody Store

Privacy and POPIA enquiries:

Sales@BlossomBody.store

21 Mohwelere Street

Pretoria

Gauteng

0008

South Africa

Where applicable, requests concerning the exercise of rights under POPIA should be directed to the contact details above.

If BlossomBody is involved in a merger, acquisition, restructuring, sale of assets, financing, insolvency proceeding or other business transaction, personal information may be transferred as part of that transaction where permitted by applicable law.

Any such transfer will be handled in accordance with applicable privacy and data-protection requirements.

We may collect, use, retain or disclose personal information where reasonably necessary to comply with applicable laws, regulations, court orders, legal processes or lawful requests from government authorities or regulators.

We may also process personal information where reasonably necessary to establish, exercise or defend our legal rights, prevent fraud or other unlawful activity, protect our customers or business, or enforce our terms and policies.

We may update this Privacy Policy from time to time to reflect changes to our business practices, services, technology, legal requirements or regulatory obligations.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

Where required by applicable law, we will provide additional notice of material changes.

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise any applicable rights under POPIA, please contact us.

BlossomBody Store

Sales@BlossomBody.store

21 Mohwelere Street

Pretoria

Gauteng

0008

South Africa

Sales@BlossomBody.store