Legal
Privacy Policy
How Marvolous Creams handles personal information for our website and online shop.
1. Introduction
Marvolous Creams respects your privacy and processes personal information for legitimate business and ecommerce purposes.
This Privacy Policy explains, in clear language, the kinds of information we may process and why. It is written with South Africa’s Protection of Personal Information Act (POPIA) in mind, but it is not a guarantee of complete legal compliance and is not a substitute for formal legal advice.
2. Responsible party
- Business: Marvolous Creams
- Address: Shop 2, Pongola Plaza, 38 Nuwe Republiek Street, Pongola, South Africa
- Email: orders@marvolous.co.za
- Telephone: 064 754 7258
3. Information collected
Depending on how you use the website and online shop, information may include:
- Name and surname
- Email address
- Telephone number
- Billing information
- Delivery and selected locker information
- Account login information
- Order history
- Customer-support correspondence
- IP address
- Device and browser details
- Cookie information
- Website activity
- Marketing preferences
Complete payment-card details are processed by the payment provider and are not directly stored by Marvolous.
4. How information is collected
Information may be collected:
- When you create an account
- During checkout
- When placing an order
- When contacting support
- When subscribing to marketing
- Through cookies and essential website technologies
- Through payment and delivery providers
5. Why information is used
Purposes include:
- Processing and delivering orders
- Confirming payments
- Managing accounts
- Providing customer service
- Handling returns and refunds
- Preventing fraud
- Maintaining website security
- Meeting accounting, tax and legal obligations
- Improving the website
- Sending marketing only where permitted
6. Legal or lawful grounds
We process personal information where needed:
- To perform your order or contract
- To meet a legal obligation
- For legitimate operational and security purposes
- With consent where consent is required
7. Payment processing
PayFast processes payment information according to its own privacy and security practices. PayFast is an independent payment provider and is not owned or controlled by Marvolous.
You can read PayFast’s privacy policy at payfast.io/privacy-policy.
8. Delivery providers
Information required for delivery may be shared with PUDO or relevant logistics providers.
Only information reasonably required to complete delivery should be shared.
9. Other service providers
Personal information may be processed by trusted providers supporting:
- Website hosting
- Security
- Website maintenance
- Accounting
- Payment processing
- Delivery
At the time of writing, the public Marvolous brand website at marvolous.co.za does not load third-party marketing analytics or advertising pixels. If that changes, this policy will be updated.
10. Marketing
Marketing messages should only be sent where there is a lawful basis or appropriate consent. You must be able to unsubscribe.
Transactional messages concerning orders, payment, security or delivery are not promotional marketing.
11. Cookies
The Marvolous brand website and online shop may use essential cookies or similar technologies for:
- Cart functionality on the online store
- Checkout
- Account login
- Security
- Session management
At the time of writing, no separate analytics or advertising cookie layer was detected on the public brand website. We have not added a cookie consent banner that does not control anything.
If non-essential cookies are introduced later, this policy will be updated and an appropriate consent mechanism will be considered before those cookies are enabled.
12. Information retention
Personal information is retained only for as long as reasonably necessary for:
- Orders
- Customer support
- Legal requirements
- Tax and accounting records
- Fraud prevention
- Resolving disputes
13. Information security
Marvolous uses reasonable technical and organisational safeguards to protect personal information.
No internet transmission or electronic storage method is completely secure, so we cannot promise absolute security.
14. Children’s information
The website and online shop are intended for customers capable of completing lawful online transactions.
Marvolous does not intentionally collect children’s personal information without appropriate authority or consent.
15. Customer rights
Subject to applicable law, you may:
- Ask whether your information is held
- Request access
- Request correction
- Request deletion where applicable
- Object to certain processing
- Withdraw consent where processing relies on consent
- Unsubscribe from marketing
- Lodge a complaint with the Information Regulator
Please start by contacting orders@marvolous.co.za.
You may also visit the official Information Regulator website at inforegulator.org.za.
16. International processing
Some hosting or service providers may process information outside South Africa.
Where applicable, reasonable steps will be taken to use providers and safeguards consistent with applicable data-protection requirements.
17. Security incidents
Marvolous will investigate suspected personal-information security incidents and take the notifications and other steps required by applicable law.
18. Changes to the policy
We may update this Privacy Policy from time to time. Changes will be published on this page together with the updated date.
19. Contact details
For privacy questions, please use the contact details below or visit our Contact page.