UBELLA Academy (Pty) Ltd Registration Number: 2021/682226/07 Last updated: 29 July 2026

1. Introduction

UBELLA Academy (Pty) Ltd ("UBELLA", "we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit www.ubella.co.za (the "Website"), purchase our makeup products, book our makeup services, or enrol in our online courses.

This Policy is issued in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). Where you access our Website or services from outside South Africa (including the European Union or United Kingdom), we also have regard to applicable data protection standards such as the General Data Protection Regulation ("GDPR") and the UK GDPR, as described further below.

By using the Website or our services, you consent to the collection and use of your personal information as described in this Policy.

2. Information We Collect

We may collect the following categories of personal information:

• Identity and contact information: name, surname, email address, telephone number, postal/delivery address, billing address.
• Payment information: billing details and transaction information (card details are processed directly by our payment gateway provider and are not stored on our servers).
• Order and booking information: products purchased, services booked, course enrolments, appointment dates and preferences.
• Course and learner information: learner profile details, progress and completion records for online courses.
• Technical information: IP address, browser type, device information, and website usage data, collected via cookies and similar technologies.
• Marketing preferences: information about your consent to receive marketing communications.
• Communications: records of correspondence, enquiries, and WhatsApp/social media messages you send us.

3. How We Collect Information

We collect personal information when you:

• Create an account or learner profile on our Website;
• Purchase a product from our online shop;
• Book a makeup service or appointment;
• Enrol in an online course;
• Contact us via email, phone, WhatsApp, or our contact form;
• Subscribe to marketing communications; or
• Browse our Website (via cookies and analytics tools).

4. Purpose of Processing

We use your personal information to:

• Process and fulfil orders, bookings, and course enrolments;
• Provide access to purchased online courses and learning content;
• Communicate with you regarding orders, bookings, appointments, and enquiries;
• Process payments and prevent fraud;
• Arrange delivery of physical products, including through third-party couriers;
• Send marketing communications where you have consented (you may opt out at any time);
• Improve our Website, products, and services;
• Comply with our legal, tax, and regulatory obligations; and
• Enforce our Terms of Service and protect our legal rights.

5. Legal Basis for Processing

We process your personal information on the following bases: performance of a contract with you (e.g. processing an order or course enrolment); your consent (e.g. marketing communications); compliance with a legal obligation (e.g. tax and accounting records); and our legitimate business interests (e.g. fraud prevention, Website security, and service improvement).

6. Sharing of Information

We do not sell your personal information. We may share your personal information with:

• Payment service providers, to process payments securely;
• Courier and logistics companies, to deliver physical products;
• IT service providers and hosting providers, including cloud-based platforms that host our Website, e-commerce store, and online course platform;
• Email and marketing platforms, for sending communications you have opted into;
• Accounting and legal professionals, where necessary for our business operations; and
• Regulatory or law enforcement authorities, where required by law.

Any third party we share your information with is required to protect it in accordance with applicable data protection law.

7. Cross-Border Transfers

As we serve customers both in South Africa and internationally, and use service providers that may be based outside South Africa (for example, cloud hosting, payment processing, or email marketing platforms), your personal information may be transferred to and processed in other countries. Where this occurs, we take reasonable steps to ensure such transfers comply with POPIA's cross-border transfer requirements, including using service providers that maintain adequate levels of data protection.

8. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to improve functionality, remember your preferences, process transactions in our online shop, and analyse Website traffic. You can control or disable cookies through your browser settings; however, this may affect the functionality of the Website, including your ability to complete purchases or access course content.

9. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting, or reporting requirements (for example, South African tax and consumer protection laws typically require records to be kept for a minimum of five years). Course access and learner records are retained for as long as your course access remains valid, plus a reasonable period thereafter.

10. Security of Information

We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or outdated information;
• Request deletion of your personal information, subject to our legal retention obligations;
• Object to or withdraw consent for processing, including marketing communications;
• Request a record of the categories of third parties who have had access to your information; and
• Lodge a complaint with the Information Regulator (South Africa) if you believe your rights under POPIA have been infringed.

Information Regulator contact details: Website: www.justice.gov.za/inforeg Email: complaints.IR@justice.gov.za

If you are located in the European Union or United Kingdom, you may also have rights under the GDPR/UK GDPR, including the right to lodge a complaint with your local supervisory authority.

To exercise any of your rights, please contact us using the details in Section 14 below.

12. Children's Information

Our products, services, and courses are intended for adults. We do not knowingly collect personal information from children under the age of 18 without the consent of a parent or legal guardian, as required by POPIA.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "last updated" date. We encourage you to review this Policy periodically.

14. Contact Us / Information Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact:

UBELLA Academy (Pty) Ltd Registration Number: 2021/682226/07 Information Officer: [INSERT NAME OF INFORMATION OFFICER] Telephone: 067 060 5687 Email: info@ubella.co.za Website: www.ubella.co.za Business hours: Tuesday – Saturday