Privacy Policy

Elsie Cold – Your Luxury Wellness Destination

Effective Date: August 13, 2025

Introduction

Elsie Cold (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.elsiecold.com, make purchases, or interact with our services.

This Privacy Policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy laws.

Information We Collect

Personal Information You Provide

We may collect the following information when you:

Create an account or make a purchase
Contact our customer service
Subscribe to our newsletter
Participate in surveys or promotions

Information collected includes:

Name and surname
Email address
Billing and shipping addresses
Payment information (processed securely through third-party payment processors)
Order history and preferences
Communication preferences

Automatically Collected Information

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device information
Pages visited and time spent
Referring website information
Cookies and similar tracking technologies

How We Use Your Information

We use your personal information for the following purposes:

Primary Purposes:

Order Processing: To process and fulfill your orders, including payment processing and delivery
Customer Service: To respond to your inquiries, provide support, and resolve issues
Account Management: To create and maintain your customer account
Product Delivery: To ship products to your specified address

Secondary Purposes:

Marketing Communications: To send promotional emails and newsletters (with your consent)
Product Development: To improve our products and services based on customer feedback
Legal Compliance: To comply with applicable laws and regulations
Website Improvement: To analyze website usage and enhance user experience

Legal Basis for Processing (POPIA Compliance):

Consent: For marketing communications and non-essential services
Contract Performance: For order processing and delivery
Legitimate Interests: For website improvement and customer service
Legal Obligation: For compliance with applicable laws

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers:

Payment Processors: To process payments securely
Shipping Partners: To deliver your orders
Email Service Providers: To send newsletters and communications
Website Analytics: To analyze website performance
Customer Support Tools: To provide efficient customer service

Legal Requirements:

When required by law, court order, or government request
To protect our rights, property, or safety
To investigate potential violations of our terms of service
In connection with business transfers or mergers (with notice to affected users)

Consent-Based Sharing:

With your explicit consent for specific purposes
For marketing partnerships (only with your opt-in consent)

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

Encryption: SSL/TLS encryption for data transmission
Secure Storage: Protected servers and databases
Access Controls: Limited access to personal information on a need-to-know basis
Regular Security Audits: Ongoing security assessments and improvements
Third-Party Security: Ensuring service providers maintain appropriate security standards

Your Rights Under POPIA

As a data subject, you have the following rights regarding your personal information:

Right of Access:

Request confirmation of what personal information we hold about you
Request a copy of your personal information

Right to Correction:

Request correction of inaccurate or incomplete personal information

Right to Deletion:

Request deletion of your personal information (subject to legal requirements)

Right to Object:

Object to processing for direct marketing purposes
Object to processing based on legitimate interests

Right to Data Portability:

Request your personal information in a portable format

Right to Restrict Processing:

Request limitation of processing in certain circumstances

Right to Withdraw Consent:

Withdraw consent for processing where consent is the legal basis

To exercise your rights, contact us at: support@elsiecold.com

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. You can control cookie preferences through your browser settings.

Types of Cookies We Use:

Essential Cookies: Necessary for website functionality
Analytics Cookies: To understand website usage and performance
Marketing Cookies: For personalized marketing (with consent)
Preference Cookies: To remember your settings and preferences

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:

Account Information: Until account deletion or 7 years after last activity
Order Information: 7 years for tax and legal compliance purposes
Marketing Preferences: Until you unsubscribe or object
Website Analytics: Aggregated data retained for business analysis

International Data Transfers

If we transfer your personal information outside of South Africa, we ensure appropriate safeguards are in place, including:

Adequacy decisions by regulatory authorities
Standard contractual clauses
Binding corporate rules
Explicit consent where required

Children’s Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

Post the updated policy on our website
Notify you of material changes via email or website notice
Update the “Effective Date” at the top of this policy

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Information Officer: The Elsie Cold Team
Email: support@elsiecold.com
General Inquiries: info@elsiecold.com
Website: www.elsiecold.com

Complaints

If you believe we have not complied with POPIA or other privacy laws, you may file a complaint with:

The Information Regulator: https://inforegulator.org.za/
Our Information Officer: support@elsiecold.com

We are committed to resolving privacy concerns promptly and transparently.

Additional Information for POPIA Compliance

Automated Decision-Making:

We do not use automated decision-making or profiling that significantly affects data subjects.

Data Processing Activities:

Our primary data processing activities include order management, customer service, marketing communications, and website analytics.

Data Protection Impact Assessments:

We conduct privacy impact assessments for high-risk processing activities.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

With gratitude,
The Elsie Cold Team

Last updated: August 13, 2025

Elsie Cold – Where luxury meets wellness, and every moment is an opportunity for transformation.