Version 2.0 | 13 October 2026
1. Who we are and how to reach us
RANIA AND MARDIYAH COLLABORATION (PTY) LTD, trading as Youghazi Fragrance Collection (registration number 2018/295332/07), is responsible for the personal information described in this policy.
This policy explains how we handle personal information through youghazi.co.za, our stores, offices, warehouses, workshops and experiences, and our customer communications.
Office and head office address: Shop 1, Orient Mews, 36 Constantia Road, Wynberg, Cape Town, 7800, South Africa.
Privacy enquiries: privacy@youghazi.co.za, for our designated privacy contact.
General enquiries: info@youghazi.co.za.
Returns: returns@youghazi.co.za.
WhatsApp/contact: +27 66 256 0379.
2. Information we collect
Depending on your interaction with us, information may include your name, email address, telephone number, delivery and billing addresses, account details, age or date of birth, gender, orders, payment confirmations, returns, enquiries, reviews and communication preferences.
When you browse our website, technical information may include your IP address, device and browser details, pages viewed, interactions and cookie choices. Optional tracking is subject to the choices explained in our Cookie Policy.
We also process business photography, video and audio, CCTV recordings at our premises, and customer call recordings where that service is used, as explained below. We do not routinely request medical histories or allergy information. If you voluntarily disclose relevant health information, we limit its use to the assistance or safety purpose for which it is provided, subject to applicable law.
3. Where information comes from
We receive information from you, from a person placing an authorised order or booking on your behalf, from your website activity, and from service providers supplying transaction, delivery or support information.
Shopify is our central system for customer and order records. Original correspondence may also remain in email or messaging histories. Promotional media and recordings may be held separately on authorised business devices, cloud services and business social media accounts.
4. Accounts, purchases and services
We use information to create and manage accounts, process payments, fulfil orders and bookings, arrange delivery, provide workshops and experiences, answer enquiries, handle returns and refunds, request feedback, and keep appropriate business records.
Contact, payment, order and delivery information is necessary for the services requested. Where an account is required, sign-in must allow a straightforward supported verification process. Age or date-of-birth and gender information may be processed where provided for an explained, lawful purpose; demographic marketing information is separate from information necessary to buy a product. Optional promotional permission can be declined without preventing a purchase or attendance.
We process information on an applicable lawful basis, including performance of a contract, legal obligations, lawful legitimate interests, or consent where required. Legitimate-interest processing remains subject to your applicable rights to object.
5. Recommendations, marketing and analysis
Where used, we may send promotions through email, SMS, WhatsApp or other messaging channels. These may include related products, replenishment reminders, new fragrances and invitations to return. Promotional messages are distinct from necessary order, delivery and service messages.
We obtain consent where required. Where the law permits marketing to existing customers about our own similar products or services, we provide an opportunity to opt out when collecting contact details and in each promotional message. You can also contact privacy@youghazi.co.za to withdraw permission or object to direct marketing.
We may analyse purchase and website activity and group customers using available age, gender and location information to understand demand, busy periods, website use and promotion performance. We use aggregated or de-identified results where practicable. Personalised suggestions do not mean that we sell your contact details.
6. Who receives information
Access is limited to the owner and authorised staff who need customer information for orders, support and fulfilment. Relevant service providers may process necessary information for hosting, account administration, payments, delivery, communications, analytics, advertising, reviews, bookings, technical support and business administration, where used.
Authorised photographers, editors and marketing agencies may handle promotional media for their assigned work. Collaboration partners receive approved promotional content, not customer contact lists, and may publish it only through Youghazi-approved collaborations within the permission obtained.
We do not sell or rent customer contact lists. Information may be disclosed to professional advisers or authorities where legally required or otherwise lawfully necessary.
7. CCTV at our premises
Our stores, offices, warehouses and restocking/storage premises use video and audio surveillance. Purposes include security, theft prevention, incident investigation, staff monitoring and training, reviewing customer interactions, and understanding foot traffic, busy periods and the flow through stores.
CCTV recordings are retained for 30 days. Access is restricted to the owner and authorised managers or security staff. Disclosure to law enforcement may occur where legally required or permitted. Surveillance is used only on an applicable lawful basis and proportionately to its stated purpose; audio interception must satisfy applicable law. Our CCTV does not use facial recognition or automated identification of individuals.
CCTV recording is separate from promotional photography. Visiting a monitored premises does not, by itself, authorise us to use identifiable CCTV footage in advertising.
8. Customer calls
Where customer telephone or WhatsApp calls are recorded, we notify callers before recording. Recordings may be used for customer service, training, quality assurance and dispute resolution, on an applicable lawful basis.
Call recordings will ordinarily be retained for 90 days. Relevant recordings may be retained longer where needed for an unresolved complaint, dispute or legal requirement. Customer-supplied voice notes are correspondence, rather than recordings of calls.
9. Promotional photography, video and audio
Photography and filming may take place in stores, workshops and experiences. We obtain permission before using identifiable images, video or audio of attendees for social media, advertising or promotional collaborations. You may decline promotional recording without affecting your booking or attendance.
Being in the background, booking or attending does not automatically establish promotional permission. Where permission has not been obtained, we use material that does not identify you or remove identifying detail before promotional publication.
Promotional media has no single fixed deletion period. Its retention must remain justified by its authorised purpose and applicable legal requirements. You may withdraw consent or ask about removal through privacy@youghazi.co.za. Withdrawal does not invalidate earlier lawful use, and public sharing may limit our ability to retrieve copies made independently by others.
10. Children and health information
Children may attend workshops with a parent or guardian. Under-18 account use and purchases require parent or legal guardian authorisation. Where children's personal information is processed on the basis of consent, prior permission must come from a legally competent person. Payment-card authorisation is not a substitute for that permission.
We obtain prior parent or legal guardian permission for identifiable promotional media of children. If you believe a child's information has been supplied without the necessary permission, contact our designated privacy contact.
11. How long we keep information
Customer accounts, order records, original correspondence and promotional media currently have no single fixed retention period. Retention is determined by the continuing purpose of the record and applicable legal, accounting, support and dispute-resolution requirements, rather than inactivity alone.
We retain personal information only for as long as reasonably necessary or otherwise lawfully justified. When it is no longer needed for a lawful purpose, we delete, destroy or de-identify it. Account closure or erasure of personal details may leave transaction history that must lawfully be retained. CCTV and call-recording periods are stated above.
12. Security and international services
We use role-based access controls and restrict information to authorised business purposes. Access is removed when a staff member or provider leaves, including changing shared passwords they knew. Authorised media providers work under our agreements and applicable law. No internet service or device can be guaranteed completely secure.
Hosting, cloud, communications, analytics, advertising and other providers may process information outside South Africa. Transfers must have a lawful basis under POPIA and appropriate protection, such as adequate laws or binding contractual safeguards, or another permitted basis. Provider location and protection can differ between services; our privacy contact can assist with questions about a relevant transfer.
If a security compromise requires notification, we notify the Information Regulator and affected individuals as required by law. Please report suspected account misuse promptly and protect your sign-in credentials.
13. Your choices and rights
Subject to applicable law, you may request confirmation of processing, access to your information, correction, deletion or account closure; withdraw consent; object to relevant processing, including direct marketing; and ask how your information is used or shared.
Send requests to privacy@youghazi.co.za. We may reasonably verify identity or authority before releasing information or making changes. Some requests are subject to lawful retention obligations or other statutory limits. We will explain any applicable limit and respond within the time required by law.
You may complain directly to South Africa's Information Regulator without first completing our complaint process. Current contact details and complaint procedures are available at inforegulator.org.za.
14. Related policies and updates
Read this policy with our Cookie Policy, Terms of Use and Sale, Shipping Policy and Returns and Refunds Policy. The Privacy and Cookie Policies govern data processing and tracking choices; general sales terms do not override those choices. Third-party sites and accounts have their own privacy notices. We may update this policy when practices, services or legal requirements change; material new consent-based uses require appropriate notice and permission.