Privacy policy
Rytual Wellness
Privacy Policy
Last updated: 27 August 2026
Rytual Wellness is committed to protecting the privacy and personal information of our customers, website visitors, community members, and all individuals who interact with us. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and all applicable South African data protection legislation.
By using our website (www.rytualwellness.co.za) or purchasing our products, you acknowledge that you have read and understood this Privacy Policy.
This policy applies to all personal information processed by Rytual Wellness, whether collected online, in-store, via email, telephone, via The Ladies Club (TLC) community — including its WhatsApp community — or any other means.
1. Who We Are (Responsible Party)
In terms of POPIA, Rytual Wellness is the "Responsible Party" — the entity that determines the purpose and means of processing your personal information.
• Business Name: Rytual Wellness
• Website: www.rytualwellness.co.za
• Email: info@rytualwellness.co.za
Our designated Information Officer is responsible for overseeing POPIA compliance and can be contacted for any privacy-related queries or requests.
2. What Personal Information We Collect
We only collect personal information that is adequate, relevant, and not excessive for the purposes for which it is collected. The types of personal information we may collect include:
2.1 Information You Provide Directly
• Full name
• Email address
• Phone number
• Delivery and billing address
• Payment information (processed securely through third-party payment providers — we do not store your full card details)
• Account login credentials (if you create an account)
• Communications and correspondence you send us
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
• IP address and device information
• Browser type and operating system
• Pages visited and time spent on site
• Referring URLs
• Cookie and tracking data (see our Cookie Policy for more detail)
2.3 Information from Third Parties
We may receive personal information about you from third parties such as payment processors, courier and logistics providers, or social media platforms if you interact with us through those channels.
2.4 Information Collected via The Ladies Club WhatsApp Community [NEW]
If you join The Ladies Club (TLC) WhatsApp community, we may collect:
• Your phone number
• Your WhatsApp display name and profile photo, as set by you within WhatsApp
• Messages, images, and other content you share within the community or its groups
Section 10 of this Policy sets out, in full, how this information is used and protected.
3. Why We Collect Your Personal Information (Purpose)
We collect and process your personal information only for specific, explicitly defined, and lawful purposes. These include:
• Processing and fulfilling your orders, including delivery and returns
• Sending order confirmations, invoices, and shipping updates
• Responding to your enquiries, complaints, or feedback
• Creating and managing your customer account
• Sending marketing communications (only with your consent, which you may withdraw at any time)
• Improving our website, products, and services through analytics
• Complying with our legal and regulatory obligations
• Detecting and preventing fraud or other unlawful activities
• Contacting you in the event of a data breach affecting your personal information
• Facilitating and moderating The Ladies Club (TLC) WhatsApp community, including event coordination and member communication (see Section 10) [NEW]
We will not use your personal information for any purpose other than those listed above without first obtaining your consent, unless required by law.
4. Legal Basis for Processing
Under POPIA, we are required to have a lawful basis for processing your personal information. We rely on the following grounds:
• Consent: Where you have given us clear permission to process your information for a specific purpose (e.g. marketing emails, or joining the TLC WhatsApp community).
• Contract: Where processing is necessary to perform a contract with you (e.g. fulfilling an order).
• Legal obligation: Where processing is required to comply with South African law.
• Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your privacy rights.
5. Sharing Your Personal Information
We do not sell, rent, or trade your personal information. We may share it with trusted third parties only where necessary, and only to the extent required for the purposes described in this policy:
• Payment processors (e.g. PayFast, Peach Payments, or similar), to process transactions securely
• Courier and logistics providers, to fulfil and deliver your orders
• Email and marketing platform providers, to send communications on our behalf
• Website hosting and analytics providers (e.g. Google Analytics)
• WhatsApp (Meta Platforms, Inc.), where you choose to join The Ladies Club WhatsApp community — see Section 10 [NEW]
• Legal and regulatory authorities, where required by law or court order
All third parties who process personal information on our behalf are required to handle your data securely and in accordance with POPIA and our data processing agreements.
5.1 Cross-Border Transfers
Some of our third-party service providers may be based outside of South Africa. In such cases, we will only transfer your personal information to countries or organisations that provide an adequate level of protection as required by Section 72 of POPIA, or where you have provided your consent to the transfer. This includes WhatsApp/Meta Platforms, Inc. where you participate in the TLC WhatsApp community — see Section 10.5.
6. How We Protect Your Personal Information
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, alteration, or destruction. These measures include:
• SSL (Secure Socket Layer) encryption on our website
• Restricted access to personal information on a need-to-know basis
• Secure, password-protected systems and databases
• Regular security assessments and staff training
• Data breach response procedures
While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that affects your personal information, we will notify you and the South African Information Regulator as required by POPIA.
7. Your Rights as a Data Subject
In terms of POPIA, you have the following rights regarding your personal information:
Right to be notified: You have the right to be informed when we collect your personal information and how we intend to use it.
Right of access: You may request a copy of the personal information we hold about you.
Right to correction: You may request that we correct or update any inaccurate or incomplete personal information.
Right to deletion: You may request that we delete your personal information, subject to any legal obligations requiring us to retain it.
Right to object: You have the right to object to the processing of your personal information, including for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint: You have the right to lodge a complaint with the South African Information Regulator if you believe we have violated your privacy rights.
To exercise any of these rights, please contact our Information Officer at privacy@rytualwellness.com. We will respond to your request within a reasonable time, and no later than 30 days.
8. Direct Marketing
We will only send you marketing communications (such as newsletters, promotions, and product updates) if you have explicitly opted in to receive them. Each marketing communication will include a clear and easy way for you to unsubscribe or opt out at any time.
In accordance with Section 69 of POPIA, we will not send unsolicited electronic marketing communications without your prior consent.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and personalise content. In accordance with POPIA, we will request your consent before placing non-essential cookies on your browser.
You can manage or withdraw your cookie preferences at any time through your browser settings or our cookie consent banner. Certain functional cookies are necessary for the website to operate and cannot be disabled.
For full details on the cookies we use, please refer to our Cookie Policy, available on our website.
10. The Ladies Club (TLC) WhatsApp Community [NEW]
The Ladies Club (TLC), a community initiative of Rytual Wellness, operates a WhatsApp community and its associated groups to connect members, share event details, and facilitate community conversation. This section explains how we handle your personal information within that community, in addition to the rest of this Policy, which applies equally.
10.1 What We Collect
When you join the TLC WhatsApp community, we — and, depending on WhatsApp's own group and community settings, other members and admins — may have access to:
• Your phone number
• Your WhatsApp display name and profile photo, as set by you within WhatsApp
• Messages, images, and other content you share within the community or its groups
10.2 How We Use It
We use this information solely to:
• Facilitate community discussion, event coordination, and member engagement
• Share TLC announcements, event details, and updates with members
• Moderate community content in line with TLC's house rules
• Add or remove members from the community as needed (e.g. on request, or for a breach of house rules)
10.3 Consent and Visibility
Joining the TLC WhatsApp community is entirely voluntary, and your continued membership is treated as your consent to this processing. Please note that WhatsApp is a platform owned and operated by Meta Platforms, Inc., and your use of WhatsApp is also governed by WhatsApp's own Privacy Policy and Terms of Service, which we encourage you to review.
Depending on WhatsApp's own community and group settings, your phone number, display name, and profile photo may be visible to TLC admins and, in some groups, to other members of the community.
10.4 Our Commitments
• We will not share your phone number or any information from the TLC WhatsApp community with third parties outside of TLC administration, except where required by law.
• TLC admins moderate the community for the safety and comfort of all members, in line with our published house rules.
• You may leave the TLC WhatsApp community at any time. Once you leave, your information will no longer be visible to the group going forward, though messages you have already sent may remain visible to members who received them, consistent with how WhatsApp works.
• If you would like your information removed from any records of the community we keep outside of WhatsApp (e.g. an admin contact list), please contact us at info@rytualwellness.co.za.
10.5 Cross-Border Processing
As WhatsApp is operated by Meta Platforms, Inc., your personal information shared within the community may be processed on servers located outside of South Africa. This transfer occurs subject to WhatsApp's own privacy safeguards, and by using WhatsApp to participate in the TLC community, you acknowledge this cross-border processing, consistent with Section 5.1 of this Policy.
11. Retention of Personal Information
We will retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by law. Retention periods are determined by:
• The nature of the personal information and the purposes for which it was collected
• Our legal and regulatory obligations (e.g. tax and financial records)
• Whether you have an active customer account or TLC WhatsApp community membership with us
When personal information is no longer required, we will securely delete or anonymise it in line with our data retention procedures.
12. Children's Privacy
Our website, products, and TLC community (including its WhatsApp community) are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a child without appropriate parental consent, we will take steps to delete that information promptly.
13. The Information Regulator
The South African Information Regulator oversees the enforcement of POPIA. If you believe your privacy rights have been violated and we have not resolved your concern satisfactorily, you have the right to lodge a complaint with the Regulator:
• Website: www.justice.gov.za/inforeg
• Email: complaints.IR@justice.gov.za
• Telephone: 010 023 5207
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Where material changes are made, we will notify you via email or a prominent notice on our website.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Information Officer:
• Email: info@rytualwellness.co.za
• Website: www.rytualwellness.co.za/contact
• Address: Lone Hill, Johannesburg, South Africa
We are committed to resolving any privacy concerns promptly and transparently. Your trust means everything to us.