Effective Date: 2025-10-25
Last Updated: 2025-10-25

1. Introduction

Welcome to lafricaineboutique.com. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or make a purchase via our Website.

We encourage you to read this policy carefully.

2. Data Controller / Contact Details

Controller: La Africaine Boutique (Pty) Ltd
Website: lafricaineboutique.com
Email: admin[at]lafricaineboutique.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: name, title, gender

  • Contact data: email address, phone number, shipping and billing address

  • Transaction data: products purchased, payment method (excluding full card details), order history

  • Technical data: IP address, browser type/version, time zone setting, device identifiers, operating system, browsing behaviour on the Website (pages visited, time spent)

  • Marketing & communications data: preferences in receiving marketing from us and third parties, your communication history

  • Optional: If you create an account, details such as your password hash, saved addresses, wishlist items

4. How We Collect Your Personal Data

We collect data:

  • Directly from you when you register an account, place an order, subscribe to newsletter, or contact us.

  • Automatically when you use our Website (via cookies and analytics).

  • From third-party sources (for example payment processors, advertising networks, shipping providers) where applicable.

5. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

  • To process your orders, fulfil shipping and invoicing (legal basis: performance of contract).

  • To manage your account and provide customer service (legal basis: legitimate interest).

  • To send you marketing communications (legal basis: your consent). You may withdraw consent at any time.

  • To improve our Website, analyse behaviour, detect fraud and secure our services (legal basis: legitimate interest).

  • To comply with legal obligations (legal basis: legal obligation).

6. Recipients / Third-Party Disclosure

We may share your personal data with:

  • Service providers such as payment processors, couriers/shipping partners, IT hosting providers, email/marketing platforms.

  • Advertising networks and analytics services.

  • Law enforcement or regulators where required by law.
    We require all third-parties to commit to appropriate data protection standards.

7. International Transfers of Personal Data

If your data is transferred outside your country (for example to the EU or other jurisdictions), we will ensure that appropriate safeguards are in place (for example standard contractual clauses or data protection frameworks) in accordance with applicable law.
If you are in the EEA, we will ensure transfers comply with the GDPR. GDPR.eu+2deel.com+2

8. Data Retention

We will retain your personal data only as long as necessary for the purposes for which it was collected or as required by law. For example:

  • Account and order history: up to 7 years (or as required under tax/accounting law).

  • Marketing consent records: until you withdraw consent.

  • Analytics and technical logs: up to 1-2 years (or as required to detect fraud or security incidents).
    Criteria used to determine retention: purpose achieved, legal requirements, business necessity, security considerations.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: obtain confirmation whether your personal data is processed and a copy of the data.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure (“right to be forgotten”): request deletion of your data (subject to legal obligations).

  • Restriction of processing: request restriction of processing under certain conditions.

  • Data portability: receive your data in a structured, commonly-used format and transmit to another controller.

  • Object: object to processing based on legitimate interest or direct marketing.

  • Withdraw consent: for processing based on consent, you can withdraw at any time.

  • Lodge complaint: you have the right to lodge a complaint with your local data protection authority.
    We will respond to your request within the applicable statutory time period.

10. Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

  • Allow you to use essential site features (session cookies).

  • Analyse how you use the Website, improve it, personalise content.

  • Provide marketing, retargeting and social media features.
    You may manage your cookie preferences via the cookie banner or your browser settings. For more details please see our Cookie Policy (link here).

11. Security of Personal Data

We implement appropriate technical and organisational measures to secure your personal data, including encryption, access controls, monitoring and regular reviews. We seek to ensure confidentiality, integrity and availability of data.

12. Children’s Privacy

Our Website is not intended for individuals under the age of 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child under that age, please contact us to request deletion.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will publish the new version on our Website and indicate the date of the last update. If we make material changes, we may notify you by email (if you have an account) or via prominent notice on the Website.