Privacy policy
How we handle your information.
This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it. It's written to comply with the Protection of Personal Information Act (POPIA), South Africa's privacy law.
If you have a question that isn't answered here, email us at info@comfycurve.co.za.
Who we are.
ComfyCurve (Pty) Ltd is a South African private company (registration number 2026/115500/07) trading as ComfyCurve, selling seamless shapewear online. Our registered office is at 24 Korhaan Street, Southdowns Residential Estate, Centurion, Gauteng, 0157. This is not a retail or returns location.
When we say "we", "us", or "our" in this policy, we're referring to ComfyCurve (Pty) Ltd. When we say "you" or "your", we're referring to anyone who visits our website, makes a purchase, or signs up to our mailing list.
Our Information Officer under POPIA is the head of the company. They can be contacted at info@comfycurve.co.za.
What we collect.
When you visit our website, we collect basic technical information automatically: your IP address, browser type, device type, and pages viewed. This is standard for any website and is used to keep the site secure and improve how it works.
When you place an order, we collect what's needed to fulfil it: your name, delivery address, billing address, email address, phone number, and payment information. Payment details are handled by our payment processor, not stored by us.
When you sign up to our mailing list, we collect your email address.
When you contact us by email, we collect your name, email address, and whatever you share in the message.
Why we collect it.
We collect personal information for specific, lawful purposes:
- To process and deliver your orders
- To send you order confirmations, shipping updates, and tracking information
- To respond to questions, returns requests, and customer service queries
- To send marketing emails, but only if you've signed up for them
- To improve our website and understand how customers use it
- To detect and prevent fraud
- To comply with our legal obligations under SA law (tax, accounting, consumer protection)
We don't collect personal information we don't need. We don't sell your information to third parties. Ever.
Who we share it with.
To run the business, we share specific information with a small number of third-party service providers. Each has access only to what they need to do their job:
- Shopify (our e-commerce platform): order data, customer details, browsing data
- Payfast (our payment processor): payment card details and transaction information. Payment details are not stored by us.
- Our courier partner: name, delivery address, phone number, for delivery
- Klaviyo (our email platform): email address, name (if you provide it), engagement data (email opens and clicks), and IP address. Only if you've signed up to our mailing list.
- Meta (Facebook and Instagram): website activity, conversion events, IP address, and hashed contact details where available, for advertising and ad measurement. Only if you've accepted cookies.
- Google: website analytics data, IP address, device information, and browsing behaviour for traffic analysis and ad measurement (via Google Analytics 4). Only if you've accepted cookies.
- Judge.me: we use Judge.me to collect, store, and display product reviews. After your order, Judge.me may email you to request a review. It processes your name, email address, and order details for this purpose.
Each of these providers is bound by their own privacy obligations and POPIA-aligned data processing terms.
We may also disclose your information if we're legally required to (court order, SARS request, law enforcement investigation).
About Shopify specifically.
Our website is hosted by Shopify, our e-commerce platform. When you use our site or make a purchase, your information is transmitted to and stored on Shopify's systems, which may be located outside South Africa. Shopify processes this information under its own privacy obligations. To learn more about how Shopify uses personal information, see the Shopify Consumer Privacy Policy at privacy.shopify.com.
International transfers.
Some of the service providers we use (Shopify, Klaviyo, Meta, Google, Judge.me) store data outside South Africa, typically in the European Union or the United States. POPIA allows this where the receiving country has comparable data protection laws, or where the third party is bound by contractual terms equivalent to POPIA's requirements. All of our service providers meet one of these conditions.
How long we keep it.
We keep your information only as long as we need it:
- Order records: 5 years (required for tax compliance under SARS rules)
- Customer accounts: until you ask us to delete them, or 3 years of inactivity
- Mailing list data: until you unsubscribe
- Customer service emails: 2 years from last contact
- Anonymised website analytics: indefinitely, because it contains no personal information
Your rights.
Under POPIA, you have the following rights over your personal information:
- The right to know what we hold about you
- The right to access and request a copy of it
- The right to correct anything inaccurate
- The right to ask us to delete it (subject to our legal record-keeping obligations)
- The right to object to direct marketing
- The right to withdraw consent at any time
- The right to lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, email us at info@comfycurve.co.za. We'll respond within 30 days.
Cookies and tracking.
Our website uses cookies to keep your shopping cart working, remember your preferences, and understand how the site is used. Some cookies are essential for the site to function. Others are optional and you can decline them through the cookie banner shown when you first visit. You can also disable cookies in your browser settings, though parts of the site may not work as expected.
Marketing emails.
If you've signed up to our mailing list, we'll send you updates about new pieces, restocks, and offers. Every email has an unsubscribe link at the bottom. You can also email us at info@comfycurve.co.za to be removed.
We don't send marketing emails to people who haven't signed up.
Security.
We take reasonable steps to protect your personal information against loss, unauthorised access, and misuse. Shopify provides industry-standard encryption for data in transit and at rest. Payment information is handled by certified payment processors, not stored by us directly.
No security system is perfect. If we ever became aware of a data breach that puts your personal information at material risk, we would notify you and the Information Regulator as required under POPIA.
Children.
Our products are designed for adult women. We don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with their information, contact us at info@comfycurve.co.za and we'll delete it.
Changes to this policy.
We may update this policy from time to time as our business or the law changes. The current version will always be on this page, with the last updated date below.
Complaints.
If you believe we've handled your personal information unlawfully, please contact us first at info@comfycurve.co.za. We'll do our best to resolve it.
If you're not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
enquiries@inforegulator.org.za
010 023 5200
inforegulator.org.za
Last updated: 26 June 2026.
