Privacy Policy

ONUTRICIA — PRIVACY POLICY

Last Updated: October 2026

  1. Introduction & Scope

Onutricia (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, No. 4 of 2013 (“POPIA”) and other applicable South African legislation.

This Privacy Policy explains how we collect, use, disclose, safeguard, and process your personal information when you visit our website, register an account, or purchase collagen and wellness products from our online store.

  1. The Responsible Party

For the purposes of POPIA, the responsible party processing your personal information is:

  • Entity: Onutricia
  • Contact Email: hello@onutricia.co.za
  • Information Officer Contact: hello@onutricia.co.za

 

  1. Personal Information We Collect

We only collect personal information that is adequate, relevant, and necessary to provide our services and fulfil your orders:

  • Contact & Identification Data: First name, last name, email address, physical delivery address, postal code, and mobile phone number.
  • Transaction & Purchase Data: Products purchased, date and time of orders, delivery instructions, and order history.
  • Payment Data: Payment card details, billing addresses, or direct EFT transaction receipts. Please note: All online credit/debit card transactions are processed securely via encrypted third-party payment gateways. Onutricia does not store full credit card numbers or security CVV codes on our servers.
  • Technical & Browsing Data: IP address, browser type, device information, operating system, and browsing activity collected through standard Shopify platform cookies and analytics tags.

  1. Purpose of Processing Personal Information

We process your personal information for lawful business purposes, including:

  • Order Fulfilment: Processing, packaging, invoicing, and dispatching your products.
  • Delivery Coordination: Sharing your delivery address, recipient name, and contact number with contracted door-to-door courier services (such as Aramex or Fastway Couriers) to deliver your parcel and provide tracking updates.
  • Customer Support & Communication: Responding to inquiries, resolving delivery queries, and managing returns or refunds.
  • Transactional Communications (WhatsApp & SMS): Utilizing your mobile phone number for direct operational updates—including order confirmations, dispatch notices, courier tracking links, and customer care inquiries. We do not use your phone number for unsolicited direct marketing messages without your prior consent.
  • Legal & Tax Compliance: Maintaining accurate business records and complying with South African statutory obligations, including the South African Revenue Service (SARS) and consumer protection laws.

  1. Disclosure to Third-Party Service Providers (Operators)

We do not sell, rent, or lease your personal information to third parties. We only share necessary data with trusted third-party service providers (operators) under strict confidentiality agreements, including:

  • E-Commerce & Hosting Infrastructure: Shopify Inc., which hosts our online store and database securely.
  • Logistics & Couriers: Fastway Couriers and authorized courier partners to perform physical delivery.
  • Payment Gateways: Regulated South African payment service providers to securely handle credit/debit card transactions.
  • Communication Platforms: WhatsApp Business API / telecommunication providers used strictly to deliver transactional updates and support.

  1. Cross-Border Data Transfers

As our online store operates on the Shopify platform, your personal information may be stored or processed on secure servers located outside South Africa (such as in Canada, the United States, or the European Union). In accordance with Section 72 of POPIA, we ensure that adequate safeguards are maintained and that overseas service providers adhere to data protection standards substantially similar to POPIA.

  1. Data Security

We implement appropriate technical and organizational measures to protect personal information against loss, unauthorized access, destruction, misuse, or alteration. All transaction pages on our website utilize Secure Socket Layer (SSL/TLS) encryption technology.

  1. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by South African law (such as retaining financial and tax transaction records for 5 years as required by the Tax Administration Act).

  1. Your Legal Rights (Under POPIA)

As a data subject under POPIA, you have the right to:

◦        Request Access: Ask whether we hold personal information about you and request a copy of that record.

◦        Request Correction or Deletion: Request the correction, updating, or deletion of personal information that is inaccurate, irrelevant, excessive, outdated, or unlawfully obtained.

◦        Object to Processing: Object to the processing of your personal information on reasonable grounds, subject to statutory exceptions.

◦        Opt-Out of Direct Marketing: Unsubscribe from any promotional emails or newsletters at any time by clicking the “unsubscribe” link or emailing us directly.

◦        Lodge a Complaint: If you believe your personal information has been handled unlawfully, you have the right to contact or lodge a complaint with the South African Information Regulator:

◦        Website: https://inforegulator.org.za

◦        Email: enquiries@inforegulator.org.za / complaints.IR@inforegulator.org.za

 

  1. Cookies & Tracking Technologies

Our website uses standard cookies to enable core store functionality (such as remembering items in your cart), analyze site traffic, and optimize your browsing experience. You can modify your browser settings to refuse cookies; however, some features of the shopping cart and checkout process may not function properly without them.

  1. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact our Information Officer at: