Privacy Policy

Last updated: 22 September 2026 

Oh, Belle ("Oh, Belle", "we", "us" or "our") operates this website and online store, including all related information, content, features, tools, products and services (collectively, the "Services"), to provide you with a curated shopping experience. 

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, use our Services, communicate with us, or purchase our products.

Oh, Belle is a South African business and processes personal information in accordance with applicable South African laws, including the Protection of Personal Information Act 4 of 2013 ("POPIA").

Our website is hosted on Shopify, which provides the technology that enables us to operate our online store and provide our Services.

Please read this Privacy Policy carefully so that you understand how we handle your personal information. 

1. Personal Information We Collect

"Personal information" means information relating to an identifiable, living person or, where applicable, an identifiable existing juristic person.

Depending on how you interact with us, we may collect the following information: 

Information you provide to us 

This may include:

• Your name and surname;
• Email address;
• Telephone or mobile number;
• Billing and delivery address;
• Information you provide when placing an order;
• Information relating to your purchases, returns, exchanges or enquiries;
• Communications you have with us, including customer service enquiries;
• Information you provide when you subscribe to our newsletter or other marketing communications;
• Information you voluntarily provide through forms, competitions, surveys or other interactions with us. 

Payment information 
When you make a purchase, payment information may be processed by our payment service providers. Depending on the payment method you choose, this may include payment card or other financial information.

We do not intend to retain complete payment card details on our own systems. Payment information is processed through the relevant payment service provider and/or Shopify in accordance with their own privacy and security practices.

Information collected automatically 

When you visit or use our website, certain information may be collected automatically, including:

• IP address;
• Browser type and device information;
• Operating system;
• Pages visited and how you interact with our website;
• Date and time of your visit;
• Referring website or link;
• Information collected through cookies and similar technologies. 

We may use this information to operate, secure and improve our website and Services.

2. How We Collect Your Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, subscribe to communications or otherwise provide information to us; 
• Automatically when you use or browse our website, including through cookies and similar technologies;
• Through Shopify and other service providers that support our website, payment processing, delivery, analytics, communications and other business functions; and
• From third parties where permitted by law and where necessary to provide our Services or conduct our business. 

We will generally collect personal information directly from you where reasonably practicable. 

3. Why We Use Your Personal Information

We will only process your personal information for a lawful purpose and in a manner that is compatible with the purpose for which it was collected.

Depending on how you interact with us, we may use your personal information to:

Process and fulfil your orders

We may use your information to:

• Process and confirm your orders;
• Process payments;
• Arrange delivery;
• Communicate with you about your order;
• Process returns, exchanges or refunds;
• Provide customer support; and
• Keep appropriate records of transactions. 
  

Provide and improve our Services

We may use information about how you interact with our website to:

• Maintain and improve our website;
• Improve our products and customer experience;
• Understand how customers use our Services;
• Personalise aspects of your shopping experience; and
• Diagnose technical problems and maintain website security. 
  

Communicate with you

We may use your contact details to communicate with you about:

• Orders and purchases;
• Deliveries;
• Returns and exchanges;
• Customer service enquiries;
• Changes to our Services; and
• Other information relating to your relationship with Oh, Belle. 
  

Marketing

Where permitted by applicable law, we may send you information about Oh, Belle products, collections, promotions, events or other marketing communications.

Where your consent is required for electronic direct marketing, we will obtain that consent in accordance with POPIA.

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

We will not use your personal information for direct marketing in a manner that is prohibited by POPIA.   South Africa's Information Regulator specifically regulates direct marketing under POPIA, including electronic communications.

Security and fraud prevention

We may process personal information where necessary to:

• Protect our website and customers;
• Detect or prevent fraudulent or unlawful activity;
• Investigate security incidents;
• Protect our rights and property; and
• Maintain the security and integrity of our Services. 
  

Legal and regulatory purposes

We may process and disclose personal information where reasonably necessary to comply with South African law, a court order, regulatory requirements or other lawful requests. 

4. Lawful Basis for Processing

Under POPIA, personal information must be processed lawfully and in accordance with the conditions for lawful processing.

Depending on the circumstances, we may process your personal information where:

• You have consented to the processing;
• Processing is necessary to perform a contract with you, such as processing and delivering an order;
• Processing is necessary to comply with a legal obligation;
• Processing protects a legitimate interest of yours or another person;
• Processing is necessary to protect our legitimate interests, provided that your interests and rights are appropriately considered; or
• Another lawful basis permitted by POPIA applies. 

Where we rely on your consent, you may withdraw your consent, although withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal. 

5. Sharing Your Personal Information

We may share personal information with third parties where reasonably necessary for the purposes described in this Privacy Policy and where permitted by law.

These third parties may include:

• Shopify, which provides the technology and hosting infrastructure for our online store;
• Payment processors and payment service providers;
• Courier and delivery companies;
• Website, IT and cloud service providers;
• Email, messaging and customer communication providers;
• Analytics and website service providers;
• Marketing service providers, where applicable;
• Professional advisers, where reasonably necessary; and
• Government authorities, regulators, courts or law enforcement where legally required.
  

Where we use third-party service providers to process personal information on our behalf, we will take reasonable steps to ensure that appropriate confidentiality and security measures are in place as required by POPIA.

We will not sell your personal information.

6. Shopify

Our online store is hosted and powered by Shopify.

When you use our website or place an order, certain information may be processed by Shopify in order to provide services such as website hosting, shopping cart functionality, payment processing, security, analytics and other Shopify services.

Shopify may process information in countries outside South Africa.  

Where Shopify or another service provider processes personal information on our behalf, we remain responsible for our processing of personal information in accordance with applicable South African law, while the relevant service provider may have its own responsibilities and privacy policies.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help websites remember information about your visit and understand how the website is being used.

We may use cookies to:

• Enable essential website functions;
• Keep items in your shopping cart;
• Remember certain preferences;
• Understand website traffic and usage;
• Improve website performance; and
• Support advertising or marketing activities where applicable.

Some cookies may be placed by third-party service providers, including Shopify or analytics and marketing providers.

You can adjust your browser settings to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website or prevent some features from working correctly.

8. International Transfers of Personal Information

Some of our service providers, including Shopify and other technology providers, may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with section 72 of POPIA.

POPIA permits cross-border transfers in circumstances including where the recipient is subject to an adequate level of protection, where the data subject has consented, where the transfer is necessary for a contract with or for the benefit of the data subject, or where another permitted condition applies.

9. Security of Personal Information

We take reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, unlawful processing or accidental destruction.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

If we become aware of a security compromise involving personal information, we will take the steps required by applicable law, including notifying the Information Regulator and affected data subjects where required by POPIA.

10. Retention of Personal Information

We will not retain personal information for longer than is necessary for the purpose for which it was collected or processed, unless:

• We are required or permitted to retain it by law;
• Retention is necessary for a legitimate business purpose;
• It is necessary to fulfil a contractual or legal obligation;
• It is required to resolve a dispute; or
• Another lawful reason for retention applies.

The appropriate retention period may differ depending on the type of information and the reason for which it was collected.

11. Your Rights Under POPIA

Subject to the conditions and limitations contained in POPIA, you may have the right to:

• Request access to personal information that we hold about you;
• Request correction or updating of inaccurate, outdated or incomplete personal information;
• Request deletion or destruction of personal information where permitted by law;
• Object to certain processing of your personal information;
• Object to the processing of your personal information for direct marketing purposes;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint regarding our processing of your personal information.

These rights are subject to applicable legal requirements and may not apply in every circumstance.

To exercise your rights, please contact us using the details provided in the Contact Us section below.

We may need to verify your identity before responding to a request in order to protect your personal information from unauthorised access.

The Information Regulator provides forms for requests relating to correction or deletion of personal information, objections to processing and complaints. 

12. Complaints

If you have a concern or complaint about how Oh, Belle handles your personal information, please contact us first using the details below so that we can investigate and respond to your concern. 

You also have the right to lodge a complaint with the Information Regulator of South Africa.

The Information Regulator is the independent regulatory authority responsible for overseeing compliance with POPIA and the Promotion of Access to Information Act (PAIA).

13. Children's Personal Information

Our Services are not directed specifically at children.

Under POPIA, the processing of personal information of a child is subject to specific requirements and restrictions. We do not knowingly collect or process personal information of children in circumstances where such processing is prohibited by POPIA. 

If you believe that a child has provided us with personal information in circumstances where we should not have collected it, please contact us so that we can assess the situation and take appropriate steps. 

The Information Regulator has issued specific guidance regarding the processing of  children's personal information under POPIA.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms or other services that are not operated or controlled by Oh, Belle.

If you follow a link to a third-party website, that website will have its own privacy policy and terms of use.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the relevant privacy policy before providing personal information to a third party. 

15. Social Media 

We may use social media platforms such as Instagram or other third-party platforms to communicate with customers and promote Oh, Belle.

If you interact with us through a social media platform, that platform may collect and process your personal information in accordance with its own privacy policy. 

Please be aware that information you choose to share publicly on social media may be visible to other users. 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology or applicable laws and regulations.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy. 

Where required by law, we will provide additional notice of significant changes. 

17. Contact Us 

If you have questions about this Privacy Policy, wish to exercise your rights under POPIA, or have a privacy-related complaint, please contact us:

Oh, Belle

Email: ohbelleofficial@gmail.com