Privacy Policy

PRIVACY POLICY & POPIA NOTICE

Last Updated: 17 August 2026
Effective Date: 17 August 2026
Version: 1.0

Your privacy matters to us.

This Privacy Policy explains how the Kajal Maharaj website (“Website”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our Website, make a purchase, download digital content, subscribe to our communications, contact us, participate in a promotion or otherwise interact with us.

We are committed to handling personal information responsibly, transparently and in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).

By using this Website, you acknowledge that your personal information may be processed as described in this Privacy Policy, subject to your rights under applicable law.

1. WHO WE ARE

This Website is the official online platform associated with the Kajal Maharaj brand.

The Website may offer or provide:

  • physical products;

  • wellness and lifestyle products;

  • digital books and eBooks;

  • downloadable guides and resources;

  • educational content;

  • courses or masterclasses;

  • newsletters;

  • promotional campaigns;

  • competitions;

  • events;

  • brand collaborations;

  • media content;

  • community initiatives; and

  • other products or services introduced from time to time.

For purposes of POPIA, the responsible party for personal information processed through this Website is:

Trading Name: Kajal Maharaj

Privacy Email: kajalmaharajshop@gmail.com

These details should be completed before this Privacy Policy is published.

2. OUR COMMITMENT TO YOUR PRIVACY

We aim to process personal information in a manner that is:

  • lawful;

  • reasonable;

  • transparent;

  • relevant to the purpose for which it was collected;

  • appropriately limited;

  • accurate where reasonably possible;

  • securely maintained; and

  • retained only for as long as reasonably or legally necessary.

We do not intend to collect personal information simply because it may be useful in the future.

Where reasonably practicable, we collect information that is necessary for providing our products, services, communications and Website functionality.

3. WHAT IS PERSONAL INFORMATION?

“Personal information” generally means information relating to an identifiable natural person and, where applicable under POPIA, certain identifiable juristic persons.

Depending on your interaction with the Website, this may include information such as your:

  • name;

  • surname;

  • email address;

  • telephone number;

  • billing address;

  • delivery address;

  • account details;

  • transaction information;

  • order history;

  • correspondence with us;

  • device information;

  • IP address;

  • online identifiers;

  • browsing activity;

  • marketing preferences; and

  • other information capable of being associated with you.

Not every piece of information collected through the Website will necessarily constitute personal information under applicable law.

4. PERSONAL INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with us.

4.1 Information You Provide Directly

You may provide personal information when you:

  • create an account;

  • place an order;

  • purchase a physical product;

  • purchase an eBook or other digital product;

  • subscribe to our newsletter;

  • complete a Website form;

  • contact customer support;

  • participate in a competition or giveaway;

  • submit a review;

  • request information;

  • submit a brand or media enquiry;

  • register for an event;

  • purchase or register for a course or programme;

  • communicate with us through email or messaging platforms; or

  • otherwise voluntarily provide information.

This may include:

Identity Information

  • first name;

  • surname; and

  • other identifying information reasonably required for a particular service.

Contact Information

  • email address;

  • telephone number;

  • billing address; and

  • delivery address.

Order Information

  • products purchased;

  • order number;

  • purchase value;

  • order date;

  • fulfilment information;

  • delivery information;

  • refunds or returns; and

  • customer-service history.

Account Information

  • account login details;

  • saved preferences;

  • order history; and

  • account activity.

Communication Information

  • emails;

  • customer-support requests;

  • enquiries;

  • feedback;

  • reviews;

  • competition entries; and

  • other communications sent to us.

5. PAYMENT INFORMATION

Payments made through the Website may be processed by third-party payment service providers.

Depending on the payment method selected, these providers may process information including:

  • cardholder name;

  • card number;

  • expiry information;

  • payment authorisation details;

  • billing information; and

  • transaction identifiers.

We do not necessarily receive or store your complete payment-card information.

Payment information may instead be securely processed by the relevant payment provider in accordance with its own security standards, terms and privacy practices.

We may receive limited information confirming the status of a transaction, such as:

  • whether payment was successful;

  • payment amount;

  • payment method;

  • transaction reference; and

  • refund information.

6. INFORMATION COLLECTED AUTOMATICALLY

When you visit or interact with our Website, certain technical information may be collected automatically.

Depending on the technology and services used, this may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate geographic location derived from technical information;

  • referring website;

  • pages viewed;

  • products viewed;

  • links clicked;

  • time spent on particular pages;

  • shopping-cart activity;

  • checkout activity;

  • purchase activity;

  • date and time of Website visits;

  • cookie identifiers;

  • advertising identifiers; and

  • other technical Website interaction information.

This information may be collected through cookies, pixels, tags, analytics services and similar technologies.

7. HOW WE USE PERSONAL INFORMATION

We may process personal information for purposes including the following.

7.1 Processing Orders

We may use your information to:

  • process purchases;

  • confirm orders;

  • collect or confirm payment;

  • fulfil orders;

  • provide digital downloads;

  • arrange delivery;

  • provide order updates;

  • process returns;

  • issue eligible refunds;

  • manage disputes; and

  • provide customer support.

7.2 Providing Digital Products

Where you purchase an eBook, downloadable guide, course or other digital product, we may process your information to:

  • confirm your purchase;

  • provide download access;

  • email download links;

  • verify entitlement to the product;

  • troubleshoot access problems;

  • prevent misuse or unauthorised distribution; and

  • maintain appropriate transaction records.

7.3 Customer Service

We may use personal information to:

  • respond to questions;

  • investigate complaints;

  • resolve order problems;

  • assist with downloads;

  • manage returns;

  • respond to product enquiries;

  • verify customer information; and

  • maintain records of customer interactions.

7.4 Website Accounts

Where customer accounts are available, we may process information to:

  • create and administer your account;

  • authenticate access;

  • display previous orders;

  • maintain saved information;

  • provide personalised Website functionality; and

  • protect your account against unauthorised access.

8. EMAIL, NEWSLETTERS AND MARKETING

Where permitted by applicable law, we may use personal information to communicate with you regarding:

  • new products;

  • digital book launches;

  • Kajal Maharaj brand updates;

  • special offers;

  • promotions;

  • educational content;

  • newsletters;

  • events;

  • competitions;

  • collaborations;

  • new collections;

  • relevant Website content; and

  • other brand communications.

We will manage electronic direct marketing in accordance with applicable South African law, including POPIA.

Where consent is required, we will seek the appropriate consent.

You may withdraw consent or unsubscribe from eligible marketing communications at any time by:

  • selecting the unsubscribe option in an email;

  • changing your communication preferences where available; or

  • contacting us at kajalmaharajshop@gmail.com

Unsubscribing from marketing does not necessarily prevent us from sending legitimate non-marketing communications relating to an existing order, transaction, account, security matter or customer-service request.

9. SMS, WHATSAPP AND OTHER COMMUNICATIONS

If we introduce SMS, WhatsApp or other direct messaging services, we may process your telephone number and related information for:

  • transactional updates;

  • customer support;

  • order notifications;

  • delivery notifications; and

  • marketing communications where legally permitted.

Where consent is required for marketing communications, appropriate consent will be obtained.

You will be provided with a reasonable method of opting out of eligible marketing communications.

10. PERSONALISATION

We may use information about how customers interact with our Website to improve the relevance of their experience.

For example, we may use information about:

  • products viewed;

  • categories browsed;

  • previous purchases;

  • Website behaviour;

  • marketing engagement; and

  • general customer preferences

to improve product recommendations, Website layouts, marketing and customer experience.

Where required by applicable law, appropriate consent will be obtained for relevant tracking technologies.

11. ANALYTICS

We may use analytics technologies to understand how visitors use the Website.

Analytics information may help us understand:

  • Website traffic;

  • popular pages;

  • popular products;

  • customer journeys;

  • conversion rates;

  • Website performance;

  • device usage;

  • marketing effectiveness; and

  • areas where the Website can be improved.

Analytics providers may process information through cookies and similar technologies.

12. ADVERTISING AND SOCIAL MEDIA

We may use advertising platforms and social-media services to promote the Kajal Maharaj brand.

Depending on our advertising configuration and your consent choices, technologies associated with services such as Meta, Instagram, Facebook, TikTok, Google or other advertising platforms may be used to measure advertising performance or help deliver relevant advertising.

Information processed through these technologies may include:

  • Website visits;

  • product views;

  • shopping-cart events;

  • checkout events;

  • purchases;

  • advertising interactions;

  • device information; and

  • online identifiers.

The relevant third-party platform may independently process information in accordance with its own privacy terms.

Where applicable, we will implement consent mechanisms required by law for non-essential tracking technologies.

13. COOKIES

Cookies are small files or pieces of information stored on or associated with your device when you visit certain websites.

We may use cookies and similar technologies for purposes including:

Essential Cookies

These may be necessary for:

  • Website functionality;

  • shopping-cart operation;

  • checkout;

  • account login;

  • security;

  • fraud prevention; and

  • remembering essential settings.

Analytics Cookies

These may help us understand how visitors use our Website and improve its performance.

Functional Cookies

These may remember preferences and improve Website functionality.

Advertising Cookies

Where permitted, these may assist us in measuring campaigns, understanding advertising performance and providing more relevant advertising.

Further details may be provided in our separate Cookie Policy.

Where required, visitors will be given appropriate choices regarding non-essential cookies.

14. SHOPIFY

Our online store may be hosted through Shopify.

Shopify provides technology that enables us to display products, process orders and operate our online store.

As part of providing these services, Shopify may process personal information relating to Website visitors and customers.

Shopify's processing of personal information is governed by its applicable privacy documentation and contractual arrangements.

15. WHEN WE MAY SHARE PERSONAL INFORMATION

We do not sell your personal information simply as a database of customer details.

However, personal information may need to be shared with carefully selected third parties where reasonably necessary to operate the business or provide services.

These may include:

E-Commerce Providers

Including our Website and commerce technology providers.

Payment Processors

To securely process transactions.

Delivery and Logistics Providers

Where required to deliver physical products.

Digital Delivery Providers

To deliver eBooks, downloads or other digital products.

Email and Communication Providers

To send transactional emails, newsletters and authorised marketing communications.

Analytics Providers

To help us understand Website performance and usage.

Advertising Platforms

Where legally permitted and subject to applicable privacy and consent requirements.

IT and Hosting Providers

To maintain Website infrastructure, data storage, cybersecurity and business systems.

Professional Advisers

Including attorneys, accountants, auditors and other advisers where reasonably necessary.

Regulatory and Law-Enforcement Authorities

Where disclosure is required or permitted by law.

16. INTERNATIONAL DATA TRANSFERS

Some service providers we use may operate outside South Africa or process information using infrastructure located in other countries.

As a result, personal information may in certain circumstances be transferred or processed outside the Republic of South Africa.

Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is handled in accordance with applicable requirements under POPIA, including where relevant the requirements governing transborder information flows.

17. INFORMATION SECURITY

We take reasonable technical and organisational measures designed to protect personal information against:

  • loss;

  • unauthorised access;

  • unlawful processing;

  • misuse;

  • alteration;

  • destruction; and

  • unauthorised disclosure.

Security measures may include, where appropriate:

  • secure Website connections;

  • access controls;

  • authentication mechanisms;

  • reputable technology providers;

  • payment-security measures;

  • system monitoring;

  • software updates;

  • internal access restrictions; and

  • other reasonable security safeguards.

However, no internet-based system can be guaranteed to be completely secure.

Customers should also take appropriate precautions to protect passwords, accounts and devices.

18. SECURITY INCIDENTS

If we become aware of a security compromise involving personal information, we will investigate the incident and take reasonable remedial measures.

Where notification is required under POPIA or other applicable law, we will notify the appropriate parties and/or regulatory authority as required.

19. HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required or permitted by law.

Retention periods may depend on:

  • the nature of the information;

  • whether you have an active account;

  • transaction and accounting requirements;

  • tax requirements;

  • legal obligations;

  • fraud-prevention requirements;

  • potential disputes;

  • contractual obligations; and

  • legitimate business-record requirements.

When information is no longer reasonably required, we may delete, destroy, anonymise or de-identify it where appropriate.

20. ACCURACY OF INFORMATION

We take reasonable steps to maintain accurate personal information where necessary for the purposes for which it is processed.

You are responsible for ensuring that information supplied to us is accurate and for notifying us where important information changes.

Where customer-account functionality allows, you may be able to update certain information yourself.

21. YOUR RIGHTS UNDER POPIA

Subject to applicable law and any lawful limitations, you may have rights relating to your personal information.

These may include the right to:

Request Access

You may request confirmation of whether we hold personal information about you and, where applicable, request access to it.

Request Correction

You may ask us to correct or update personal information that is inaccurate, incomplete, misleading or outdated.

Request Deletion or Destruction

In circumstances permitted by law, you may request that personal information be deleted or destroyed.

This right is not absolute where we are legally entitled or required to retain particular records.

Object to Processing

You may object to certain processing in circumstances provided for by POPIA.

Withdraw Consent

Where processing is based on consent, you may withdraw that consent, subject to applicable law and the consequences of such withdrawal.

Withdrawal will not necessarily affect processing that lawfully occurred before consent was withdrawn.

Object to Direct Marketing

You may object to eligible direct marketing and unsubscribe from marketing communications.

Lodge a Complaint

You may lodge a complaint concerning the processing of personal information with us and, where appropriate, with the Information Regulator of South Africa.

22. EXERCISING YOUR PRIVACY RIGHTS

To exercise a privacy right, please contact:

Privacy / Information Officer

Email: kajalmaharajshop@gmail.com

We may need to verify your identity before providing access to, correcting or deleting personal information.

This is intended to prevent another person from improperly accessing your information.

We will respond to legitimate requests within the periods required by applicable law.

23. INFORMATION REGULATOR

If you believe that your personal information has been processed unlawfully, you have the right to raise the matter with the Information Regulator of South Africa.

Information about complaints, data-subject rights and the Information Regulator's current contact channels can be obtained from the Information Regulator's official website.

We encourage customers to contact us first where appropriate so that we have an opportunity to investigate and address the concern.

Nothing in this Policy limits your right to approach the Information Regulator where permitted by law.

24. CHILDREN'S PERSONAL INFORMATION

Our Website is primarily intended for adults and is not designed to intentionally collect children's personal information without appropriate authority.

Where products or content relate to motherhood, parenting, children or families, this does not mean that the Website is directed at children.

Where children's personal information must legitimately be processed, we will seek to do so in accordance with applicable South African law, including requirements concerning appropriate consent or authorisation.

Parents and guardians should supervise children's use of online services.

If you believe that a child has provided personal information to us improperly, please contact us.

25. COMPETITIONS AND GIVEAWAYS

Where we run competitions, giveaways or promotional campaigns, we may collect information necessary to:

  • administer entries;

  • verify eligibility;

  • contact winners;

  • deliver prizes;

  • prevent fraudulent entries; and

  • comply with legal requirements.

Additional competition-specific terms may apply.

Entry into a competition will not automatically constitute consent to unrelated direct marketing where separate consent is legally required.

26. REVIEWS, TESTIMONIALS AND USER CONTENT

Customers may have opportunities to provide:

  • reviews;

  • ratings;

  • photographs;

  • testimonials;

  • feedback; or

  • other content.

Where such content contains personal information, it will be processed in accordance with this Privacy Policy and any applicable permissions.

We will not knowingly present a private customer communication as a public testimonial without an appropriate basis or permission.

27. BRAND, MEDIA AND COLLABORATION ENQUIRIES

If you contact Kajal Maharaj or the Website regarding:

  • media enquiries;

  • interviews;

  • brand partnerships;

  • collaborations;

  • sponsorships;

  • appearances;

  • speaking engagements;

  • influencer campaigns; or

  • commercial opportunities,

we may process the contact and professional information you provide for the purpose of assessing, responding to and managing the enquiry.

Submitting an enquiry does not automatically subscribe you to consumer marketing communications.

28. LINKS TO THIRD-PARTY WEBSITES

Our Website may contain links to:

  • social-media platforms;

  • media publications;

  • partner websites;

  • payment providers;

  • delivery providers; or

  • other third-party websites.

Once you leave our Website, the relevant third party may process information according to its own privacy policy.

We encourage users to review the privacy practices of websites and services they use.

29. AUTOMATED DECISION-MAKING

Certain Website, fraud-prevention, advertising or e-commerce systems may use automated processes.

Where an automated decision has legal or substantial consequences for a person and applicable law provides specific rights or protections, we will comply with the relevant legal requirements.

30. FRAUD PREVENTION

We may process information where reasonably necessary to:

  • detect suspicious transactions;

  • protect customer accounts;

  • prevent payment fraud;

  • investigate abuse;

  • protect our intellectual property;

  • prevent unauthorised digital-product distribution; and

  • protect the Website and its users.

Where appropriate, suspicious activity may be referred to relevant payment providers, professional advisers or lawful authorities.

31. LEGAL OBLIGATIONS

We may process or disclose personal information where reasonably necessary to:

  • comply with applicable law;

  • comply with valid legal processes;

  • respond to lawful regulatory requests;

  • enforce agreements;

  • establish or defend legal claims;

  • investigate suspected unlawful conduct; or

  • protect our legitimate legal interests.

Any disclosure will remain subject to applicable law.

32. BUSINESS TRANSFERS

If the Website or relevant business undergoes a legitimate restructuring, merger, acquisition, sale or transfer, personal information may form part of the transferred business records where lawful and reasonably necessary.

Any such processing remains subject to applicable data-protection requirements.

33. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect:

  • changes to our Website;

  • new products or services;

  • new technology;

  • changes to service providers;

  • changes to our business;

  • regulatory guidance; or

  • changes to applicable law.

The latest version will be published on this Website.

The Last Updated date at the beginning of this Policy will indicate when the Policy was most recently revised.

Where required by law, material changes will be communicated appropriately.

34. CONTACT US ABOUT PRIVACY

For questions, concerns or requests relating to this Privacy Policy or your personal information, please contact:

Kajal Maharaj — Privacy Office

Email: kajalmaharajshop@gmail.com

35. FINAL PRIVACY COMMITMENT

The Kajal Maharaj brand is built around community, trust and creating a meaningful relationship with the people who choose to engage with it.

We recognise that purchasing a product, subscribing to a newsletter or becoming part of our community may involve trusting us with personal information.

We take that responsibility seriously.

Our aim is not simply to comply with privacy legislation, but to treat personal information with the level of care and respect we would expect for our own.

Your information is part of your identity. We will always strive to treat it that way.

© 2026 Kajal Maharaj. All rights reserved.

Privacy Policy Version 1.0 — Effective 17 August 2026