Privacy Policy

Privacy Policy

What we collect, and why we're not weird about it

We respect your data the same way we respect our ingredients: minimal, intentional, and nothing you didn't agree to. This policy is written in line with South Africa's Protection of Personal Information Act (POPIA).

What we collect

• Contact details you give us at checkout: name, email, phone number, delivery address.
• Order history and preferences, so we can process your orders and (if you've opted in) let you know when your favourite blend is back in stock.
• Basic site analytics — how people move through our site — to help us improve it. This data is aggregated and doesn't identify you personally.
• Payment information is processed directly by our payment provider. We do not store your card details on our servers.

Why we collect it

• To process, pack, and ship your order.
• To communicate with you about your order status, or respond to a query you've raised.
• To send marketing communications — but only if you've opted in, and you can opt out at any time.
• To meet our legal and tax obligations as a registered South African business.

Who we share it with

• Couriers and delivery partners, solely to get your order to you.
• Our payment processor, to complete your transaction securely.
• We do not sell, rent, or trade your personal information to third parties. Full stop.

Your rights under POPIA You have the right to:

• Ask what personal information we hold about you.
• Request corrections to inaccurate information.
• Request deletion of your information, where we're not legally required to retain it.
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, email us at fullmoonbeautysa@gmail.com and we'll respond within a reasonable timeframe.

Cookies

• Our site uses cookies to remember your cart, preferences, and improve site performance. You can disable cookies in your browser settings, though some site features may not work as intended without them.

Data security

• We take reasonable technical and organisational measures to protect your information. No online system is 100% infallible, but we treat your data with the same care we'd want our own treated.