1. Purpose
MUHLE Glow Beauty respects the privacy of customers, students, trainers, applicants, service providers and website visitors. This policy explains how MUHLE collects, uses, stores, protects and shares personal information in connection with its website, Shop and Academy.
2. Applicable Law
MUHLE intends to process personal information in accordance with applicable South African privacy and data-protection law, including POPIA, as applicable.
3. Information We May Collect
Depending on the service used, MUHLE may collect names, contact details, email addresses, delivery addresses, account information, order details, student registration information, course information, payment references and communications.
4. Shop Information
When customers place orders, MUHLE may process information necessary to identify the customer, fulfil the order, arrange delivery, process payment, communicate about the order and provide customer support.
5. Academy and Student Information
For Academy registration and learning services, MUHLE may collect information necessary for registration, course administration, assessments, practical training, certification, student support and communication.
6. Payment Information
Payments may be processed by third-party providers such as PayFast. MUHLE should not unnecessarily store sensitive banking or card information handled by the payment provider.
7. WhatsApp, Email and Communications
MUHLE may use official WhatsApp, email, telephone and other communication channels to respond to enquiries, process orders, support students and communicate important service information.
8. Marketing
MUHLE may send specials, product information, Academy information or other marketing communications where permitted by law and where the required consent or lawful basis exists. Appropriate marketing controls must be provided.
9. AI Assistants and Beauty Tools
MUHLE may use Bella, Adrian and other approved AI-assisted tools to assist customers and students. Information submitted to an AI tool should be limited to what is reasonably necessary for the service.
10. Foundation Match and AI Beauty Analysis
Where MUHLE provides foundation matching or beauty-analysis tools, the website must clearly explain what information is collected, whether an image or other personal information is processed, the purpose of processing and applicable retention/deletion arrangements.
11. Purpose of Processing
Personal information may be used to provide products and services, process orders and payments, deliver products, administer Academy registrations, communicate with customers and students, improve services, manage accounts, meet legal obligations and protect MUHLE against fraud or misuse.
12. Data Minimisation
MUHLE should collect only information reasonably necessary for the stated purpose and avoid requesting sensitive or unnecessary information.
13. Sharing with Service Providers
MUHLE may share necessary information with trusted service providers such as payment providers, couriers, hosting providers, website/LMS providers, communication providers, IT providers and approved practical-training partners where required.
14. Third-Party Websites
The MUHLE website may contain links or integrations to third-party services. Customers should review the privacy notices of independent third parties.
15. Cookies
The website may use cookies or similar technologies for essential functions, account functionality, analytics or other purposes. The separate MUHLE Cookie Policy should explain these technologies.
16. Security
MUHLE will take reasonable technical and organisational measures appropriate to the information processed to protect personal information against loss, unauthorised access, disclosure, alteration or misuse.
17. Data Breach
Where a security compromise affecting personal information occurs, MUHLE will follow applicable legal requirements concerning investigation, containment, notification and remediation.
18. Retention
MUHLE will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, legal obligations, legitimate business records, dispute resolution or other lawful purposes.
19. Student and Certificate Records
Certain Academy records may need to be retained for legitimate administrative, certification, audit or legal purposes. Retention periods should be defined internally and implemented consistently.
20. Children's Information
The website and Academy should not knowingly collect personal information from children where prohibited by applicable law. Where a service involves a minor, appropriate consent and safeguarding procedures must be followed.
21. Customer and Student Rights
Subject to applicable law, individuals may have rights concerning access to, correction of, deletion of or objection to processing of their personal information. Requests should be directed through the official MUHLE contact channel.
22. Correction of Information
Customers and students should notify MUHLE if their personal information changes or is inaccurate so records can be updated where appropriate.
23. Complaints
Privacy complaints should be submitted to MUHLE through its official contact details. MUHLE will investigate and respond in accordance with applicable procedures and law.
24. Information Officer
MUHLE should publish the current Information Officer/contact details required for POPIA compliance and ensure the details remain current.
25. Website Implementation Requirement
Sakhile must ensure that this policy matches the actual website forms, student registration, checkout, cookies, analytics, AI tools, Foundation Match App, WhatsApp integration, email systems, hosting and third-party integrations.
26. Policy Updates
MUHLE may update this policy to reflect changes in services, technology, data processing or legal requirements. The current website version applies subject to applicable law.