Privacy policy

Last updated: October 16, 2026

Skin Story ("we", "us") runs this online store. This policy explains what personal information we collect when you visit or buy from our store, how we use it, and your rights. We process personal information in line with South Africa's Protection of Personal Information Act (POPIA). Our store is hosted by Shopify.

What we collect

Contact and delivery details: your name, email, phone number and billing and shipping addresses.
Order details: what you buy, return or exchange. Card payments are handled by our payment providers; we never see or store your full card details.
Account details: if you create an account, your login details and preferences.
Messages: anything you send us, such as customer support questions.
Device and usage information: your IP address, browser, device and how you use our site, collected through cookies and similar technologies.

How we use it

To process and deliver your orders, handle returns and give customer support.
To send you marketing emails if you've signed up. You can unsubscribe at any time using the link in every email.
To show relevant ads on other websites and social media (including Facebook and Instagram), based on your activity on our store.
To keep our store secure, prevent fraud and meet our legal obligations.

Who we share it with

We share personal information only as needed to run our store: with Shopify, payment providers, our suppliers and couriers (to fulfil and deliver your order), and marketing and analytics partners such as Meta. Some of these providers are based outside South Africa, so your information may be processed in other countries with appropriate safeguards. We may also disclose information where required by law. We don't sell your personal information.

Shopify

Shopify processes information about your use of our store to provide and improve its services. You can read how Shopify uses personal information in the Shopify Consumer Privacy Policy and make requests through the Shopify Privacy Portal.

How long we keep it

We keep personal information only for as long as we need it to provide our services, resolve disputes and meet legal, tax and accounting requirements.

Your rights

Under POPIA you can ask to access, correct or delete the personal information we hold about you, object to its processing, and opt out of direct marketing. You also have the right to lodge a complaint with the Information Regulator of South Africa. To make a request, email us using the details below. We may need to verify your identity first.