Privacy Policy

PRIVACY POLICY (POPIA NOTIFICATION)

Last Updated: October 2026

LUXULI ("we", "us", or "our") is committed to protecting your privacy and ensuring that your personal information is processed in a lawful, fair, and transparent manner in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) of South Africa.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website www.luxuli.co.za, make a purchase, or interact with our handcrafted furniture services.

1. Responsible Party Information

For the purposes of POPIA, LUXULI is the "Responsible Party" determining the purpose and means of processing your personal information:

• Entity Name: LUXULI

• Physical Address: 134 Kempston Road, Gqeberha, South Africa

• Information Officer Contact: info@luxuli.co.za

• Phone: +27 79 485 6079

• Website: https://www.luxuli.co.za

2. Personal Information We Collect

We collect personal information directly from you when you place an order, request a custom quotation, contact us, or browse our website. This information includes:

• Contact & Identity Data: Full name, phone number, email address, physical delivery address, and billing address.

• Order & Customisation Data: Furniture specifications, bespoke dimensions, delivery notes, purchase history, and quote details.

• Payment Details: Transaction receipts and confirmation details (note: financial payment information, such as credit card details, is processed securely through encrypted third-party payment gateways like PayFast/Yoco and is never stored directly by LUXULI).

• Technical & Usage Data: IP address, device details, and site usage analytics collected via cookies when you browse www.luxuli.co.za.

3. Purpose of Collection & Legal Basis

We process your personal information only for specific, lawful reasons related to our business operations:

1. Contract Performance: To manufacture, fulfill, deliver, and invoice your standard or custom furniture orders.

2. Customer Support: To communicate with you regarding order statuses, delivery schedules, warranty queries, or custom quotes.

3. Legal Compliance: To maintain tax, accounting, and sales records as required by South African law.

4. Direct Marketing (With Consent): To send newsletters, promotions, or new product updates if you have opted in. You can opt out at any time.

Providing your information is necessary to fulfill orders or provide quotes. Failure to provide mandatory delivery and contact details will prevent us from fulfilling your order.

4. Third-Party Sharing & Service Providers

We do not sell, rent, or trade your personal information. We only share necessary data with trusted third-party service providers ("Operators") strictly for processing your transactions and deliveries:

• Delivery & Freight Partners: Logistics companies and couriers contracted to deliver items to your physical address.

• Payment Processors: Secure South African payment gateways handling checkout payments.

• IT & Hosting Services: Cloud platform providers (such as Google Workspace and Google Sites) that host our communications and website infrastructure.

All third-party service providers are legally obligated to maintain strict confidentiality and security over your data.

5. Cross-Border Data Transfers

Where website hosting or backup servers (such as Google infrastructure) are located outside of South Africa, your information may be transferred across international borders. We ensure that these international providers adhere to data protection standards equivalent to or stricter than POPIA.

6. Data Security Safeguards

We take reasonable technical and organizational measures to prevent unauthorized access, loss, misuse, or alteration of your personal data. This includes:

• Secure SSL encryption on our website.

• Access controls limiting employee or operator access strictly to a need-to-know basis.

• Encrypted cloud storage systems for order management.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or to comply with South African legal, statutory, tax, and accounting record-keeping requirements. Once retention is no longer required, data is securely deleted or de-identified.

8. Your Statutory Rights Under POPIA

As a data subject under South African law, you have the right to:

• Access Your Data: Request confirmation or a record of the personal information we hold about you.

• Request Correction or Deletion: Ask us to update, correct, or delete inaccurate, incomplete, or outdated information.

• Object to Processing: Object on reasonable grounds to the processing of your personal information, or object to direct marketing at any time.

• Lodge a Complaint: Contact the South African Information Regulator if you believe your data protection rights have been infringed.

To exercise any of these rights, please email our Information Officer at info@luxuli.co.za.

9. South African Information Regulator

If you are unsatisfied with how we handle any privacy concerns, you have the right to lodge a complaint with the Information Regulator:

• Website: https://inforegulator.org.za

• General Enquiries: enquiries@inforegulator.org.za

• POPIA Complaints: POPIAComplaints@inforegulator.org.za

10. Updates to This Policy

We reserve the right to update or amend this Privacy Policy as required by changes in legislation or business operations. The latest version will always be posted on this page with an updated date.