PRIVACY POLICY

Last updated: 19 January 2026

​

This Privacy Policy explains how Upenya Cosmetics (Pty) Ltd (“Upenya”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you visit www.upenya.co.za (the “Site”) or otherwise interact with us. By using the Site, you agree to the practices described in this Policy.

​

1. Information we collect

a. Information you provide directly

• Contact and account information

When you subscribe to newsletters, complete contact forms, or create an account, we may collect your name, email address, and contact details.

• Transactional information

When you purchase products, we collect information necessary to fulfil your order, such as shipping and billing details. Payment information is processed securely by third-party payment service providers and is not stored by Upenya.

• Communications

Any correspondence, feedback, or reviews you submit to us.

 

b. Information collected automatically

• Usage information

• Information about how you use the Site, including pages viewed, time spent on pages, and referring or exit links.

• Device and technical information

• IP address, browser type and version, operating system, and device identifiers.

• Cookies and similar technologies

 

We use cookies and similar technologies to improve site functionality and understand usage patterns. You can manage or disable cookies through your browser settings, although some features of the Site may not function correctly.

 

2. How we use your information

We use personal information to:

• Process and fulfil orders and provide customer support

• Communicate with you about orders, enquiries, and updates

• Send marketing communications where you have given consent

• Improve Site functionality, content, and performance

• Monitor security and prevent fraud

• Comply with applicable legal and regulatory requirements, including POPIA and, where applicable, GDPR

​

3. Sharing your information

We do not sell personal information.

We may share information with:

• Service providers

• Third parties who assist with order fulfilment, payment processing, email communications, analytics, or website hosting, under confidentiality and data-protection obligations.

• Legal or regulatory authorities where required by law or to protect our legal rights or the safety of users.

• Business transfers

If Upenya undergoes a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

 

4. Third-party links

The Site may contain links to third-party websites or platforms. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review their policies before providing personal information.

 

5. Your rights and choices

Subject to applicable law, you may have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Request deletion of your information, subject to legal retention obligations

• Opt out of marketing communications at any time

Requests can be made by emailing info@upenya.co.za.

 

6. Data security

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. While we take data protection seriously, no online system is completely secure, and we encourage caution when sharing information online.

 

7. Children’s privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children. If such information is identified, we will take steps to delete it promptly.

​

8. International data transfers

As a South African company, personal information may be processed or stored outside South Africa where necessary. Any international transfers are carried out in accordance with applicable data-protection laws and appropriate safeguards.

​

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised “Last updated” date.

​

10. Contact details

If you have questions or concerns about this Privacy Policy, please contact:

Upenya (Pty) Ltd
Email: info@upenya.co.za
Address: Consulting Room B7, Ivory Tusk Lodge,
75 Douglas Street, Tzaneen, 0850, South Africa