Privacy Policy

This notice explains how The Wellness Cabinet handles your personal information. It is written to meet our obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated: 8 September 2026

Who is responsible

The Wellness Cabinet (registration number 2026/653512/07) is the responsible party for your personal information. We trade from 8 Hillside Road, Metropolitan Park, Parktown, Johannesburg, 2096.

Our Information Officer is Mohamed Zaid Jibhai, who can be reached at info@thewellnesscabinet.co.za or on 069 418 3219. Any question, complaint or request about your personal information should go to them.

What we collect, and why

We only collect what we need to sell you something and get it to you. We do not ask for identity numbers, and we never see your card details.

When you place an order

• Your name, email address and mobile number — to confirm the order, arrange payment and contact you if something is wrong with it.
• Your delivery address — to deliver the order. If you choose a locker or counter instead, we record that point rather than a street address.
• What you ordered, and what you paid — because we have to keep a record of the sale.
• Anything you write in the notes box — this is optional and entirely up to you. Please see the section on health information below before you write anything about your health there.

If you create an account

• The same contact and address details, kept so that checkout fills itself in next time.
• Your password, which is stored only as a cryptographic hash. We cannot read it, and nobody here can tell you what it is — if you forget it, it can only be reset, never recovered.
• Your order history and any products you save, so you can find them again.

When you simply browse

We do not run advertising trackers or analytics on this site. We do not build a profile of what you look at. Your shopping basket is stored in your own browser and is not sent to us until you check out.

Health information

POPIA treats information about your health as special personal information, which we may only process in limited circumstances and must protect more carefully than ordinary details.

Because of what we sell, some of what we hold may say something about your health — the products you buy, the concerns you browse, the newsletter topics you tick, and anything you choose to tell us in the notes box or over WhatsApp. We treat all of it as health information.

• We use it only to supply what you ordered and to advise you responsibly on it.
• We do not use it for marketing, and we do not share it with anyone for advertising. The single exception is the newsletter topics you tick for yourself: those decide which letter you are sent, and nothing else does — not what you bought, and not what you looked at.
• You are never required to tell us anything about your health in order to buy from us. If you would rather discuss something privately, speak to us on WhatsApp or in person instead of typing it into an order.

Who else sees your information

We do not sell your personal information. We never have and we will not. It reaches other companies only where they do something necessary on our behalf:

• Our email provider (Brevo, operated by Sendinblue SAS) receives your name and email address so that order confirmations and password reset messages can be delivered. Their system also records whether an email was delivered and opened.
• Our hosting provider Render Services, Inc. stores the database this site runs on, on servers in Frankfurt, Germany. That is outside South Africa, so the cross-border section below applies.
• Ozow (Pty) Ltd take payment for us. When you pay, you leave this site for Ozow's own secure page and pay from your bank account there. Your banking login and account details are entered on their system and your bank's, never on ours, and are never passed to us. They receive your order reference and the amount, so the payment can be matched to your order, and they tell us only whether it succeeded. Ozow is a licensed South African payment provider and keeps that information in South Africa.
• The Courier Guy, who carry our parcels, receive the delivery address and your contact number so that they can deliver your order.
• Bob Go, and the courier or Bob Box locker network we book through it, receive the delivery address or chosen locker, your name and your contact number so that they can price and deliver your order.
• Pargo, when you choose a Pargo counter, receive your name, contact number and email address so that they can tell you when your parcel has arrived and hand it over. The map you choose the counter on is Pargo's own page, shown inside our checkout, and it may ask your browser for your location to find counters near you.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

Sending information out of South Africa

Two of the companies listed above hold your information outside South Africa:

• Render Services, Inc. runs this site and its database on servers in Frankfurt, Germany.
• Sendinblue SAS (Brevo), who send our emails, are based in France.

Both are in the European Union and are bound by the General Data Protection Regulation, which protects personal information to a standard comparable to POPIA. We also have written terms with each of them requiring that they process your information only on our instructions. On that basis, and because sending it is necessary to perform the contract we have with you when you place an order, section 72 of POPIA permits the transfer.

Your payment information does not leave South Africa: Ozow hold it here. Our couriers are South African and hold the delivery details here.

How long we keep it

• Order records are kept for 5 years, because tax and company law require us to keep records of what we sold.
• Account details are kept for as long as you have an account. Ask us to close it and we will delete it, apart from the order records above.
• Newsletter addresses are kept for as long as you want the letter. If you unsubscribe we keep the address on a do-not-send list rather than deleting it, so that nothing puts you back on by accident. Ask us to erase it entirely and we will.
• Anything we no longer need is deleted or de-identified.

How we protect it

• The whole site is served over an encrypted connection, so what you type reaches us privately.
• Passwords are stored as salted hashes using a deliberately slow algorithm, so they cannot be recovered from our database.
• Access to customer information is limited to the people who need it to run the shop, and is protected by a separate password.
• If your personal information is ever compromised, POPIA requires us to notify both you and the Information Regulator, and we will.

Your rights

Under POPIA you may, at any time:

• Ask what personal information we hold about you.
• Ask us to correct anything that is wrong or out of date.
• Ask us to delete information we no longer have a good reason to keep.
• Object to how we are using your information.
• Withdraw your consent to marketing, at any time and without giving a reason.

Write to our Information Officer at info@thewellnesscabinet.co.za and we will respond within a reasonable time. There is no charge for asking.

If you are not satisfied with how we have handled it, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

Marketing

We send you email about an order you have placed, or about your account. Buying something does not put you on a mailing list.

We also send a letter about health topics, but only to people who have asked for it — by typing their address into the sign-up on this site. We keep your email address, your first name if you gave one, the health topics you chose, and the date you signed up. We use it for that letter and nothing else, we do not sell or share the list, and every letter carries a link that takes you off it in one click. You can also ask us at info@thewellnesscabinet.co.za and we will do it for you. The letters are sent through Brevo, the same provider that sends our order emails.

Cookies and what is stored in your browser

We use as little as we can get away with:

• A sign-in cookie, set only if you create an account and sign in, so you stay signed in. It contains no readable information about you.
• Your shopping basket, stored in your own browser. It never reaches us until you check out, and clearing your browser data removes it.
• A note that you closed the newsletter invitation, so that it stops asking you. It holds nothing but the fact that you said no, and the date.

We do not use advertising cookies, and there are no third-party trackers on this site.

Children

This shop is intended for adults. We do not knowingly collect information about anyone under 18. If you believe a child has given us their details, tell us and we will delete them.

Changes to this notice

If we change how we handle personal information we will update this page and change the date at the top. Material changes will be brought to your attention rather than made quietly.

Getting hold of us

info@thewellnesscabinet.co.za
WhatsApp 069 418 3219
8 Hillside Road, Metropolitan Park, Parktown, Johannesburg, 2096

See also our Terms & Conditions.