Privacy policy

Last updated: 10 November 2026

CURVA respects your privacy. This policy explains how we collect, use and protect your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are (responsible party)

CURVA
14 Egret Street, Roodepoort, Gauteng, 1709, South Africa
Email: lisachastainb@gmail.com · Phone: 065 942 8699
Information Officer: Lisa Chastain, lisachastainb@gmail.com

2. What we collect

  • Contact and identity details: name, email address, phone number.
  • Order details: delivery and billing address, items bought, order history, sizes and fit preferences you share.
  • Payment information: payments are processed securely by Yoco. We do not see or store your full card number.
  • Communications: emails, contact-form messages and reviews you send us.
  • Technical data: IP address, device and browser information, and cookies (see section 7).
  • Marketing preferences: whether you have subscribed to our emails.

3. Why we use it

  • To process, deliver, exchange and refund your orders (to perform our contract with you).
  • To give customer service and fit help.
  • To prevent fraud and keep the store secure (legitimate interest).
  • To meet legal, tax and accounting obligations.
  • To send marketing emails, only if you subscribe (consent). You can unsubscribe at any time with the link in every email.
  • To understand how the store is used and improve it (legitimate interest; analytics/ad cookies only with your consent where required).

4. Who we share it with

We share only what is needed with service providers ("operators") who process it for us under contract: Shopify (store platform and hosting), Yoco (payments), our courier partners (delivery), email and customer-service tools, and analytics/advertising platforms such as Meta, TikTok and Google where you have allowed those cookies. We may also share information when the law requires it. We never sell your personal information.

5. Cross-border transfers

Some providers (for example Shopify) store data outside South Africa. We only use providers that are bound by laws, binding rules or agreements that give your information protection substantially similar to POPIA, as section 72 of POPIA requires.

6. How long we keep it

We keep personal information only as long as needed for the purposes above, and for as long as the law requires for tax and accounting records (generally 5 years). After that we delete or de-identify it.

7. Cookies

We use essential cookies to run the store and cart, and, with your consent where required, analytics and advertising cookies. You can manage cookies through the cookie banner or your browser settings; blocking essential cookies may stop parts of the store from working.

8. Security

We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) checkout. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

9. Your rights

Under POPIA you may ask to access the personal information we hold about you, correct or delete it, object to processing (including direct marketing) and withdraw consent at any time. Email lisachastainb@gmail.com; we will respond within a reasonable time and may need to verify your identity.

10. Complaints

Please contact us first so we can help. You also have the right to lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za · POPIAComplaints@inforegulator.org.za.

11. Children

Our store is intended for adults (18+). We do not knowingly collect information from children.

12. Changes

We may update this policy. The latest version is always on this page with its "last updated" date.