POPIA Notice

AURALAB, 195 Wallace Street, Goodwood, Cape Town, South Africa. Information queries and requests: hello@auralabs.co.za or WhatsApp +27 657 560 568. Our owner acts as the Information Officer and is registered with the Information Regulator as required by POPIA.

We process the personal information you give us directly: name, WhatsApp number, email address, delivery address, order and payment records, fragrance preferences from the Find Your Scent quiz, and messages you send us. Basic technical data is collected automatically when you use the site. Supplying this information is voluntary, but without your name, contact number and address we cannot process or deliver an order.

• ·Concluding and performing our sales contract with you, including invoicing, delivery and support (section 11(1)(b)).
• ·Complying with legal obligations such as tax and accounting record keeping (section 11(1)(c)).
• ·Our legitimate interests in running, securing and improving the business (section 11(1)(f)).
• ·Direct marketing to existing customers of similar products, and to others only with consent (section 69).

We do not process special personal information or the personal information of children, and our products are sold to adults only.

Personal information may be shared with operators who act on our instructions: couriers, our bank and payment provider, website and database hosting providers, messaging and email providers, and our accountants. Where an operator stores information outside South Africa we rely on section 72, and only use providers bound by laws or contracts that give substantially similar protection.

As required by section 19 we apply reasonable technical and organisational measures: encrypted connections, role based access to our customer database, row level security on all customer records, strong authentication for administrator accounts, and confidentiality obligations on anyone who handles the data. Security compromises are reported to the Information Regulator and to affected data subjects under section 22.

Transaction and invoice records are retained for at least five years for tax purposes. Marketing records are retained until consent is withdrawn. Other records are deleted or de-identified once the purpose for which they were collected has been achieved.

• ·To be notified that your information is being collected, and of any compromise.
• ·To request confirmation of, and access to, the information we hold about you (section 23).
• ·To request correction, deletion or destruction of inaccurate, irrelevant or outdated information (section 24).
• ·To object to processing on reasonable grounds, and to withdraw consent at any time.
• ·To object to direct marketing and to unsubscribe at no cost.
• ·To complain to the Information Regulator, and to institute civil proceedings.

Requests may be made on Form 2 or Form 3 of the POPIA regulations, or simply in writing to hello@auralabs.co.za. We respond within a reasonable time and may verify your identity first. Access requests are handled under the Promotion of Access to Information Act 2 of 2000, and a prescribed fee may apply.

Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Complaints: complaints.IR@justice.gov.za. General enquiries: enquiries.IR@justice.gov.za.