Privacy Policy - InLei® South Africa

Who we are

Noi Ethos (Pty) Ltd (registration 2020/884144/07), trading as InLei® South Africa, is the responsible party for personal information collected through https://inlei.co.za and our stores, courses and partner programmes. Our Information Officer isthe director responsible for data protection, reachable at info@inlei.co.za or 4 Barbet Crescent, Tzaneen, 0850, Limpopo, South Africa.

What we collect

Orders and accounts: name, email, phone, delivery and billing address, order history, and your password (stored only as a secure hash).
Payments: handled by our payment providers. We never see or store your full card number.
Academy courses: attendee details, course dates, attendance and certification records.
Salons, stockists and trainers: business name, contact person, address, contact details, certifications, and for affiliates the sales and commission records needed to pay you.
Enquiries: what you send us by email, phone or the booking and stockist forms, including the salon you chose.
Website use: device and browser details, pages viewed and referral codes, through cookies and similar tools (see below).

We do not ask for special personal information (such as health details). If you share any in a message, we use it only to answer you.

Why we use it

We process personal information only for these purposes and on these grounds (POPIA section 11):

to take, deliver and support your orders and course bookings (to perform our contract with you);
to keep tax, accounting and product-safety records (legal obligation);
to run the partner salon finder, stockist and affiliate programmes, and to pass booking enquiries to the salon you choose (contract and legitimate interest);
to prevent fraud, secure the website and improve our service (legitimate interest);
to send marketing, where you have agreed or are an existing customer (see below).

Marketing

We send newsletters and offers by email, SMS or WhatsApp only if you opted in, or if you bought from us and we are telling you about similar products (POPIA section 69). Every message has a way to unsubscribe, and you can also email us to stop. We never sell your information.

We share personal information only with operators who work for us under written agreements that require them to protect it:

payment providers (such as PayFast and Paystack) to take payments;
couriers to deliver your order;
hosting, email and website services (such as Cloudflare, our server host and our email service) to run the site and send messages;
the partner salon you send a booking enquiry to;
InLei® head office (Selita Srl, Italy) for course certification records, where you are certified as an InLei® professional;
our accountants, auditors and legal advisers, and authorities where the law requires it.

Storage outside South Africa

Some of our service providers store data outside South Africa, for example in the European Union. We use only providers bound by laws or agreements that give protection similar to POPIA (section 72).

Partner salon listings

Certified partner salons appear on our public salon finder with their business name, area, address and booking details. Salons agree to this when they join, and can ask us to change or remove their listing at any time. Personal contact names and private numbers are not shown unless the salon asks for them to be.

Cookies and analytics

We use cookies that the site needs to work (your basket, sign-in and the "professional or client" view you chose), and analytics cookies (Google Analytics through Google Tag Manager) to see which pages are used. Referral codes from stockist QR codes and links are stored so the stockist earns their commission. You can block or delete cookies in your browser settings; the shop still works without analytics cookies. Analytics and advertising cookies only load after you accept them in the cookie banner, and you can change your choice at any time under Cookie settings.

How long we keep it

We keep order, invoice and commission records for five years, as tax law requires, and course certification records for as long as your certification is valid. Account and marketing details are kept until you close your account or unsubscribe. Enquiries are deleted after two years unless they became an order or booking.

Security

We protect personal information with encryption in transit, access controls, hashed passwords and limited staff access. If we believe your information has been accessed without authorisation, we will tell you and the Information Regulator as POPIA section 22 requires.

Your rights

You may ask us, free of charge, to:

confirm whether we hold information about you and give you a copy (POPIA section 23);
correct or delete information that is wrong, out of date or no longer needed (section 24);
stop using your information for marketing, or object to other processing based on legitimate interest (section 11(3)).

Email info@inlei.co.za and we will reply within 30 days. If you are not happy with our answer, you can complain to the Information Regulator (South Africa) atinforegulator.org.za.

Children

Our products and courses are for adults. We do not knowingly collect information about children under 18.

Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will email account holders.