Privacy & Cookie Policy
How we look after your information, in line with South Africa’s POPIA.
Who we are
Lustique Co. [registered name & registration details — confirm] (“we”, “us”) is the responsible party for your personal information — bridal hair & makeup, 242 Frangipani Street, La Montagne, Pretoria.
Our Information Officer is Zandeline Kemp [confirm]. For anything about your privacy, contact info@lustiqueco.co.za · 067 925 3894.
What we collect
- Your name, email, phone, and the wedding details you share (date, venue/town, party, hair lengths, preferences) when you enquire or request a quote.
- Booking and payment records once you book (amounts, dates — not your card details; see “Who we share it with”).
- Basic website usage (via cookies and privacy-friendly analytics) to improve the site.
- Your marketing preferences — only if you opt in.
How we use it
- To prepare your quote, check availability, plan your booking, and provide our services.
- To contact you about your enquiry or booking.
- To meet our legal and tax obligations.
- To send you helpful content or offers — only with your consent, and you can unsubscribe anytime.
- To keep the website working, secure, and better over time.
Our lawful basis (POPIA)
We process your information because it’s necessary to respond to your enquiry and provide the service you’ve asked for, to meet legal obligations (such as keeping financial records), for our legitimate interest in running and securing the site — and, for marketing, on the basis of your consent. You may withdraw consent at any time.
Who we share it with
We don’t sell your information. We work with a small set of trusted providers who process it on our behalf, under contract and confidentiality (your “operators” under POPIA), and only as much as needed to serve you:
- Email & quotes (e.g. Brevo) — to send your quote, confirmations and any updates.
- Payments (e.g. Yoco) — a PCI-compliant payment provider handles your card/EFT securely. We never see or store your card details.
- Scheduling & documents (Google Workspace) — calendar availability, your quote/invoice, and our correspondence.
- Hosting & security (Cloudflare) — serves the website and protects it from abuse.
- Website analytics (Google Analytics) — only after you accept cookies; helps us understand and improve the site.
We may also disclose information if the law genuinely requires it.
Where your information is processed
Some of these providers store or process information on secure servers outside South Africa. Where that happens, POPIA requires your information to enjoy comparable protection — and we rely on providers whose own data-protection commitments and standard safeguards meet that bar.
How we keep it safe
We use reputable, secured services, encryption in transit (HTTPS), access controls, and a “least-privilege” approach (people and tools only see what they need). No system is ever perfectly secure, but we take protecting your information seriously — and if a breach ever affected you, we’d notify you and the Information Regulator as the law requires.
How long we keep it
We keep your information only as long as we need it. As a guide [periods to confirm]: enquiries that don’t become bookings are kept up to 24 months, then deleted; booking and financial records are kept up to 5 years to meet tax and legal obligations. After that, we securely remove it.
Your rights
You may ask us to access, correct, or delete your information, to object to its processing, or to withdraw consent to marketing. Just email info@lustiqueco.co.za and we’ll help.
If we can’t resolve your concern, you have the right to complain to the Information Regulator (South Africa): POPIAComplaints@inforegulator.org.za · 010 023 5200 · Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · inforegulator.org.za.
Children’s information
If your booking includes children (for example flower girls), the details you share about them are provided by you as the adult arranging the booking, and you confirm you’re entitled to share them. We use them only to plan the day.
Cookies
We use a small number of cookies. You’ll be asked to accept or decline non-essential cookies when you first visit; you can change your choice anytime via the Manage cookies link in our footer. Declining non-essential cookies won’t stop you from using the site.
| Cookie | Purpose | Type | Retention |
|---|---|---|---|
lc_cookie | Remembers your cookie choice so we don’t ask again | Essential | Until you clear it |
_ga | Google Analytics — distinguishes visitors for usage statistics | Analytics (consent-gated) | 2 years |
_ga_* | Google Analytics — session state for this property | Analytics (consent-gated) | 2 years |
Analytics cookies (_ga, _ga_*) are set by Google Analytics and are only loaded after you explicitly accept. You can withdraw consent at any time using the Manage cookies link; the cookies will be cleared on your next visit. For details on how Google processes this data, see Google’s Privacy Policy.
Updates
We may update this policy; the latest version always lives here. Last updated: [effective date — set on publish].