01Who we are
Mabontle Aura ("we", "us") is a fragrance house based in South Africa. We are the responsible party for the personal information described in this policy, as defined by the Protection of Personal Information Act 4 of 2013 ("POPIA").
Questions about this policy, or requests relating to your personal information, can be sent to mabontleaura@gmail.com.
02Information we collect
Orders are placed over WhatsApp. When you order we collect your name, mobile number, delivery address and your chosen collection point — the minimum required to fulfil and deliver your order. Your WhatsApp messages with us are also subject to WhatsApp's own privacy policy.
When you subscribe to the Aura Letter we collect your email address only. When you contact us we collect your name, contact details and the content of your message.
We do not collect or store your banking or card details at any point. The website itself takes no payments.
We collect anonymised analytics about how the site is used — pages viewed, device type, approximate region — to improve the experience. This data is not linked to your identity.
03How we use it
To process, fulfil and deliver your order, and to communicate with you about it — including delivery notifications by SMS, email and WhatsApp.
To respond to enquiries you send us via the contact form, email or WhatsApp.
To send you the Aura Letter, if and only if you have subscribed. Every letter includes a one-click unsubscribe link.
To meet our legal obligations, including keeping records required by tax and consumer protection law.
We do not sell, rent or trade your personal information to anyone, under any circumstances.
05How long we keep it
Order records are retained for five years, as required by South African tax legislation.
Newsletter subscriptions are kept until you unsubscribe, after which your address is deleted within 30 days.
Contact enquiries are kept for 24 months and then deleted.
06Your rights under POPIA
You have the right to ask what personal information we hold about you, to have it corrected if it is inaccurate, and to have it deleted where we have no lawful basis to keep it.
You may object to your information being used for direct marketing at any time, and withdraw consent you previously gave.
To exercise any of these rights, email mabontleaura@gmail.com. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa.
08Security
The site is served exclusively over encrypted HTTPS. No payments are taken through the website, so no banking data ever reaches our systems.
Access to customer records is restricted to the individuals who need it to fulfil orders. Should a breach affecting your personal information occur, we will notify you and the Information Regulator as POPIA requires.
09Changes to this policy
We may update this policy from time to time. The date at the top of this page always reflects the most recent revision, and material changes will be communicated to subscribers by email.
