Privacy Policy

Last updated: 28 August 2026
Exquisite Online Boutique (Pty) Ltd - Nelspruit, South Africa
Contact: support@exquisiteboutique.co.za

This policy complies with the Protection of Personal Information Act (POPIA) of South Africa.

1. Information We Collect

• Buyers: Full name, email, phone number, shipping address, order history, payment reference (we do NOT store card numbers).
• Sellers (Vendors): Full name, SA ID / Passport number, phone, email, residential address, bank account details (account holder name, bank name, account number, branch code), ID document, bank confirmation letter, business registration docs.
• Technical: IP address, device info, cookies, browsing behavior.

2. How We Use Your Information

• To process orders, payments, and shipping
• To verify seller identity (KYC) and bank account ownership
• To disburse funds to vendors minus commission
• For fraud prevention and risk management
• To communicate order updates, returns, and disputes
• To comply with legal obligations (FICA, tax)

3. Payment Processing

All payments are processed securely by Paystack (Paystack Payments Ltd). We do not store credit/debit card numbers, CVV, or PINs. Card data is handled directly by Paystack which is PCI-DSS compliant. Refunds are processed via Paystack to original payment method.

4. How We Share Information

• With verified sellers for order fulfilment (buyer name, address, phone)
• With courier partners for delivery
• With Paystack for payment processing
• We do NOT sell your data. We do NOT operate wallet balances or allow peer-to-peer transfers.

5. Data Retention

Buyer order data retained for 5 years for tax compliance. Seller KYC documents retained for 5 years per FICA requirements. After holding period of 2-5 business days post-delivery, vendor payout is completed and transaction funds are not retained on platform.

6. Your Rights Under POPIA

You have the right to:

• Access your personal information
• Request correction or deletion
• Object to processing
• Lodge a complaint with the Information Regulator of South Africa

To exercise rights, email privacy@exquisiteonlineshop.co.za with your ID and request.

7. Cookies

We use essential cookies for login, cart, and security. Non-essential analytics cookies only with your consent. You can disable cookies in your browser.

8. Security

We use HTTPS, encrypted databases, access control, and manual admin approval for all seller listings. KYC documents are stored securely with restricted access.

9. Children's Privacy

Our platform is not for persons under 18. We do not knowingly collect data from minors.

10. Changes to Policy

We will update this policy and notify users via email. Continued use after update constitutes acceptance.

11. Contact

Data Officer: Exquisite Online Boutique
Email: support@exquisiteboutique.co.za
Address: Nelspruit, Mpumalanga, South Africa