Privacy Policy

Last updated: 20 October 2026

Oasis Tanning Co (“we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect through oasistanning.co.za and in the course of doing business with you, why we collect it, who we share it with, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

The responsible party for your personal information is:

Oasis Tanning Co
Plot 9, Dancornia AH, Brandvlei, Randfontein, Gauteng, South Africa
Phone: 011 416 2270
Email: orders@oasistanning.co.za

Information Officer

Our Information Officer is responsible for making sure we comply with POPIA. You can contact them about anything in this policy:

The owner of Oasis Tanning Co
Email: orders@oasistanning.co.za
Phone: 011 416 2270

2. What information we collect

Information you give us

  • Contact form and enquiries: your name, email address, the service you are asking about (tanning or products) and your message. If you phone or email us, we keep the details you share.
  • Newsletter: your first name and email address, plus the date, time and IP address of your sign-up and confirmation, so we have a record of your consent.
  • Orders and tanning work: the information we need to quote, process, deliver and invoice your order, such as your name, contact details, delivery address, billing details, details of the skins or products involved, and any permits or documents the law requires for them.

Information collected automatically

  • Website analytics: if you accept analytics cookies, Google Analytics records how you use the site (pages visited, time on site, approximate location, device and browser type). We use this to understand which pages are useful and to improve the site.
  • Security and server logs: our web host and our security software (Wordfence) record IP addresses, browser details and the pages requested, to protect the site from attacks and spam.
  • Blog comments: comments are now closed, but if you commented on our blog in the past, the name, email address and comment you submitted, and your IP address, are still stored. Ask us if you would like a past comment removed.

3. Why we use your information

We only process personal information where POPIA allows it. We use your information to:

  • reply to your enquiries and prepare quotes (to take steps you have asked for before entering into a contract);
  • carry out tanning work, supply products, deliver orders and invoice you (to perform our contract with you);
  • keep accounting, tax and other records, and meet permit and other legal requirements (to comply with the law);
  • send you our newsletter (only with your consent);
  • understand how our website is used (only with your consent to analytics cookies); and
  • keep our website and systems secure (our legitimate interest in protecting our business and our visitors).

4. Newsletter and direct marketing

We only send marketing emails to people who have asked to receive them, by signing up on our website and confirming their email address. Every newsletter has an unsubscribe link, and you can also ask us to remove you at any time. Unsubscribing does not affect any enquiry or order you have with us.

5. Cookies

Cookies are small files stored on your device. We use:

  • Necessary cookies that make the site work and remember your cookie choices. These do not need consent.
  • Analytics cookies (Google Analytics), which are only set if you accept them.
  • Third-party content: the map on our Contact page is provided by Google Maps and only loads if you accept it, because Google may set its own cookies.

You can change your choice at any time using the cookie settings link at the bottom of every page. Our Cookie Policy lists each cookie, what it does and how long it lasts.

6. Who we share your information with

We do not sell your personal information. We share it only with:

  • Service providers who work for us (operators): our web host xneelo (South Africa), Mailchimp (newsletter, USA), Google (Analytics and Maps, USA), and our email, accounting and IT providers. They may only use your information to provide their service to us and must keep it secure.
  • Couriers and freight companies, to deliver your order.
  • Government authorities, where the law requires it, for example for permits, customs, tax or law enforcement.
  • Professional advisers, such as our accountants, auditors and lawyers.

7. Sending information outside South Africa

Some of our service providers, including Mailchimp and Google, store information outside South Africa, mainly in the United States. We only use providers that are bound by data protection laws or agreements giving your information a level of protection similar to POPIA, as section 72 of POPIA requires. If we export products to you outside South Africa, we will share the information needed for delivery and customs with the relevant carriers and authorities.

8. How long we keep your information

  • Enquiries that do not lead to an order: up to 2 years.
  • Order, invoice and permit records: for as long as tax and other laws require (generally 5 years after the transaction, or longer if a specific law requires).
  • Newsletter subscribers: until you unsubscribe. We keep a record of your opt-out so that we do not email you again.
  • Analytics data: for the retention period set in our Google Analytics account.
  • Security logs: for as long as needed to protect the site, usually a few months.

9. How we protect your information

We take reasonable technical and organisational measures to keep your information safe, including an encrypted (HTTPS) website, security software, access controls on our systems and contracts with our service providers. If we believe your personal information has been accessed without permission, we will notify you and the Information Regulator as POPIA requires.

10. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and for a copy of it;
  • ask us to correct or delete information that is inaccurate, out of date, incomplete or that we are no longer allowed to keep;
  • object to us processing your information, including for direct marketing;
  • withdraw your consent at any time (this does not affect anything we did before you withdrew it); and
  • complain to the Information Regulator.

To use any of these rights, contact our Information Officer using the details in section 1. We may need to confirm your identity before acting on your request. Requests for records can also be made under our PAIA manual, which is available on request from our Information Officer.

The Information Regulator

If you are not happy with how we have handled your personal information, you can lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za. We would appreciate the chance to resolve your concern first, so please contact us before you do.

11. Children

Our website and services are intended for adults. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian.

12. Links to other websites

Our website links to other sites, such as our Facebook and Instagram pages. Those sites have their own privacy policies, and we are not responsible for how they handle your information.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on this page.