Privacy policy

Privacy Policy

Last updated: 25 October 2026

Who we are

This store is operated by DJG (Pty) Ltd, trading as UnderToneSA, based in Durban, KwaZulu-Natal, South Africa. We are the responsible party for the personal information described in this policy under the Protection of Personal Information Act (POPIA). Our store runs on Shopify.

By using our website or placing an order, you acknowledge that you have read this policy. If our Terms of Service and this policy conflict on how we handle personal information, this policy applies.

Information we collect

  • Contact details: your name, email address, phone number, and billing and delivery addresses.
  • Order information: the products you view, add to your cart and buy, and any returns, refunds or cancellations.
  • Payment information: your payment is processed securely by our payment provider, Yoco. Your full card details are entered on their secure checkout and are not stored by us.
  • Communications: messages you send us, such as support emails.
  • Device and usage information: your IP address, browser, device, and how you move around the website, collected through cookies and similar technologies.
  • Marketing preferences: whether you have signed up for or opted out of our emails.

We collect this information from you directly, automatically when you use the website, and from our service providers.

How we use your information

  • To process and deliver your orders, take payment and arrange refunds.
  • To send order updates, including your confirmation, processing, dispatch and delivery emails and your tracking details.
  • To give customer support and respond to your questions.
  • To send marketing emails, such as our welcome offer, product information and reminders about items left in your cart. We do this only where you have signed up or given your consent, and every email has an unsubscribe link.
  • To show you advertising on other platforms, based on your activity on our website.
  • To improve our website, products and service.
  • To prevent fraud, keep the store secure and meet our legal obligations.

Who we share it with

We share personal information only where needed, with:

  • Shopify, which hosts our store.
  • Yoco, which processes payments.
  • Aramex, which delivers your order. We give them your name, address and phone number.
  • Klaviyo, which sends our emails.
  • Advertising and analytics providers, such as Meta, which help us measure and run our marketing.
  • Professional advisers, regulators and the authorities, where the law requires or allows it.

These providers may only use your information to provide their service to us, and some use it under their own privacy notices. We do not sell your personal information.

Transfers outside South Africa

Some of these providers store or process information outside South Africa, including in countries such as Canada and the United States. Where this happens, we take reasonable steps to make sure your information is protected as required by POPIA.

Cookies

Our website uses cookies and similar technologies to keep your cart working, remember your preferences, measure how the site is used and support our advertising. You can block or delete cookies in your browser settings, but some parts of the store may not work properly without them.

Security and retention

We take reasonable steps to protect your personal information. No system is completely secure, and we cannot guarantee perfect security. We keep personal information only for as long as we need it to serve you, resolve disputes, and meet legal and tax record keeping requirements. After that, we delete it or make it anonymous.

Your rights

Under POPIA, you may ask us to:

  • tell you what personal information we hold about you;
  • correct or update it;
  • delete it, where we no longer need it or are not required to keep it;
  • stop using it for marketing. You can unsubscribe at any time using the link in our emails, and we will still send you service messages about your orders.

To make a request, email us at Support@UnderToneSA.co.za. We may need to confirm your identity first.

Children

Our store is not intended for children, and we do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us their information, contact us and we will delete it.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Regulator of South Africa: www.inforegulator.org.za.

Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date.

Contact

DJG (Pty) Ltd, trading as UnderToneSA
Durban, KwaZulu-Natal, South Africa
Email: Support@UnderToneSA.co.za