Privacy Policy - True to Life

Introduction

At True to Life Hair Care, we value your privacy. We are committed to protecting your personal information per the Protection of Personal Information Act, 2013 (POPIA), the General Data Protection Regulation (GDPR), and applicable United Arab Emirates (UAE) data protection laws. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services.

By using our website, you consent to the collection, use, and processing of your personal data as described in this privacy policy.

Information We Collect

We may collect the following personal information from you:

Contact Information: Name, email address, phone number, delivery address.
Demographic Information: Age, gender, and location.
Usage Data: How you use our website, products, and services.
Payment Information: Billing details for transactions made on our website.
Cookies and Tracking Technologies: Cookies collect Information automatically (more on this below).

Purpose of Data Collection

We collect your personal information for the following purposes:

To provide you with products and services.
To communicate with you about promotions, offers, and updates.
To improve our website and user experience.
To process transactions securely.
To comply with legal obligations (e.g., for tax purposes or responding to legal requests).

Legal Basis for Processing Data (GDPR Compliance)

We will only process your personal data if we have a lawful basis for doing so, including:

Consent: You provided explicit consent for us to process your personal data for specific purposes.
Contractual Necessity: Where processing is necessary for the performance of a contract with you (e.g., fulfilling an order).
Legal Obligation: To comply with legal obligations (e.g., financial records for tax purposes).
Legitimate Interests: Where processing is necessary for our legitimate interests, provided your rights and interests do not override these.

Data Sharing and Transfers

We do not sell your personal data to third parties. However, we may share your information in the following situations:

With service providers (e.g., payment processors, delivery companies) to fulfil your orders.
With third-party marketing services, only if you have provided consent.
To comply with legal obligations, such as law enforcement requests or court orders.

International Data Transfers (GDPR Compliance): If we transfer your data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place (e.g., standard contractual clauses).

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. This includes retention for accounting or reporting requirements.

Your Rights

GDPR (EU Customers)

You have the following rights regarding your personal data:

Access: The right to request access to the personal data we hold about you.
Rectification: The right to correct any inaccurate or incomplete personal data.
Erasure: The right to request deletion of your personal data (“right to be forgotten”).
Data Portability: The right to receive your data in a structured format and transfer it to another provider.
Objection: The right to object to certain types of processing, including direct marketing.

POPIA (South African Customers)

Access and Correction: You can request access to your personal information and request corrections or deletions where necessary.
Objection to Processing: You have the right to object to the processing of your personal data for marketing purposes.

UAE Data Protection Law

You have the right to withdraw consent at any time, request data access, rectification, and erasure, and to object to processing, especially in cases of direct marketing.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and collect anonymous traffic data. You can manage cookie settings in your browser or refuse cookies, but this may affect website functionality.

Data Security

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have implemented appropriate technical and organisational measures, including encryption, secure servers, and firewalls.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on our website with the effective date.

Contact Us

If you have any questions or concerns about this privacy policy or your personal data, please contact us at:

Email: connect@truetolifeco.com

Contact From

Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the relevant supervisory authority:

For EU Customers: Contact your local data protection authority.
For South African Customers: Contact the Information Regulator of South Africa.
For UAE Customers: Contact the UAE Data Protection Office.

Table of Contents