Last updated: 21 August 2026

By Dr Terry Ann is operated by DRULEF RETAIL CC ("By Dr Terry Ann", "we", "us" or "our"). We operate this online store and website and provide the related information, content, features, products and services described in this Privacy Policy (the "Services"). For purposes of the Protection of Personal Information Act 4 of 2013 ("POPIA"), DRULEF RETAIL CC is the responsible party for the personal information that we process in connection with the Services, except where another party acts as a responsible party under applicable law.

Our website, www.bydrterryann.co.za, is powered by Shopify. Shopify provides the ecommerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, create an account, communicate with us, or otherwise interact with us.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy. If there is a conflict between this Privacy Policy and our Terms of Service in relation to the collection, use, processing or disclosure of personal information, this Privacy Policy will apply to that extent.

1. PERSONAL INFORMATION WE COLLECT OR PROCESS

In this Privacy Policy, "personal information" means information relating to an identifiable person or, where applicable under POPIA, an identifiable juristic person. It does not include information that has been lawfully de-identified so that it cannot reasonably be linked to an identifiable person.

Depending on how you interact with the Services, where you are located and what is permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact information, including your name, billing address, delivery address, telephone number and email address.

• Order and transaction information, including products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as your order history and related transaction details.

• Account information, including your account details, login credentials where applicable, preferences and settings.

• Payment information. Payments are processed by Shopify and/or third-party payment service providers. We may receive transaction details, payment status and payment confirmation information, but we do not necessarily receive or store your full payment-card details.

• Communications with us, including information you provide when you contact customer support, submit an enquiry, participate in a promotion, leave a review or otherwise communicate with us.

• Device and technical information, including information about your device, browser, network connection, IP address, cookie identifiers and other unique identifiers.

• Usage information, including information about how and when you access, browse, navigate and interact with the Services.

• Marketing and preference information, including your marketing choices, communication preferences and interactions with marketing communications.

If you voluntarily provide information that is regarded as special personal information under POPIA, such as health-related information in a customer-service enquiry, we will process that information only where permitted by applicable law and only to the extent reasonably necessary for the relevant purpose.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

• Directly from you, for example when you place an order, create an account, contact us, subscribe to communications, complete a form or otherwise provide information to us.

• Automatically when you use the Services, including through cookies, pixels, tags, log files and similar technologies.

• From Shopify and service providers that process information on our behalf or assist us in providing the Services.

• From business, marketing or technology partners and other third parties, where permitted by law.

3. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers, including Shopify, may use cookies and similar technologies to operate the website, keep the Services secure, remember preferences, understand how the website is used, improve the shopping experience and, where permitted, support advertising and marketing.

Where applicable law requires consent for non-essential cookies or similar technologies, we will use them for those purposes only after the required consent has been obtained. You can manage available choices through the cookie or privacy controls displayed on the website and through your browser settings. Blocking some cookies may affect the functionality of the Services.

4. HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information for the following purposes:

• Providing and improving the Services. This includes processing and fulfilling orders, processing payments, managing accounts, arranging delivery, handling returns and exchanges, remembering preferences, responding to enquiries, enabling reviews and improving or personalising the shopping experience.

• Communicating with you. This includes sending transactional messages about your account, orders, deliveries, returns, security or other service-related matters, and providing customer support.

• Marketing and advertising. Where permitted by law, we may send promotional communications and use information about your interactions with the Services to measure, personalise or improve marketing and advertising.

• Security and fraud prevention. We may use personal information to authenticate accounts, protect transactions, detect and investigate suspected fraud, misuse, malicious activity or security incidents, and protect our rights, users and Services.

• Legal and regulatory purposes. We may process personal information to comply with applicable laws and lawful requests, establish or exercise legal rights, defend legal claims, enforce our terms and policies, and meet accounting, tax, regulatory or record-keeping obligations.

• Business administration. We may use personal information for internal administration, analytics, reporting, quality assurance and business planning, where permitted by law.

5. DIRECT MARKETING

We will send direct marketing by electronic communication only where permitted by POPIA and other applicable law. This may include where you have consented to receive marketing or, where permitted, where you are an existing customer and we market our own similar products or services using contact details obtained in connection with a sale.

You can opt out of promotional emails at any time by using the unsubscribe link in the message. Where we send marketing by another electronic channel, we will provide an appropriate way to opt out. Opting out of marketing does not prevent us from sending non-promotional communications that are necessary for your account, orders, transactions or our legal obligations.

6. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary for legitimate business purposes and as permitted or required by law, including to:

• Shopify, which hosts and supports our online store and processes information in connection with the Services.

• Service providers and operators that support our business, such as payment processors, technology and IT providers, analytics providers, cloud-storage providers, customer-support providers, fulfilment partners, couriers and delivery providers.

• Business and marketing partners that help us provide services, measure campaigns or deliver advertising, where permitted by law and subject to applicable privacy requirements.

• Third parties where you direct us to disclose information or where disclosure is necessary to provide a service you request, such as shipping a product or using a third-party integration.

• Our affiliates or entities within our corporate group, where applicable and where permitted by law.

• Professional advisers, regulators, law-enforcement authorities, courts or other persons where disclosure is necessary to comply with a legal obligation, lawful process, protect rights or safety, investigate suspected wrongdoing, or establish, exercise or defend legal claims.

• Parties involved in an actual or proposed corporate transaction, such as a restructuring, merger, acquisition, financing, sale of assets, insolvency or similar business transaction, subject to appropriate safeguards.

7. OUR RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of Shopify-powered services in order to provide, secure, support and improve those services. Information submitted through our store may therefore be transmitted to Shopify and to Shopify's service providers, including in countries other than South Africa.

Where Shopify provides enhanced services or features that use information from your interactions with our store together with information from Shopify or other merchants, Shopify may process certain information for its own purposes and may be responsible for responding to requests relating to that processing.

For more information about how Shopify processes consumer personal information, please read the Shopify Consumer Privacy Policy.

You can also use Shopify's Privacy Portal to access available privacy controls and request options relating to information processed by Shopify.

8. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links to websites, applications or online services operated by third parties. If you follow a link to a third-party service, its own privacy, security and other terms will apply. We are not responsible for the privacy or security practices of third parties that we do not control.

Information you post or disclose in public or semi-public areas, including on third-party social-media platforms, may be visible to other users and may be used by those third parties in accordance with their own terms and privacy notices. The inclusion of a third-party link does not, by itself, imply endorsement of that third party.

9. CHILDREN'S PERSONAL INFORMATION

The Services are not intended for use by children under 18 without the involvement of a parent or legal guardian. We do not knowingly collect personal information from children in circumstances where doing so would be prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided us with personal information in circumstances that are not permitted, please contact us using the details below. We will take appropriate steps in accordance with applicable law.

10. SECURITY AND RETENTION

We take reasonable technical and organisational measures designed to safeguard personal information against loss, misuse, unauthorised access, interference, alteration, disclosure or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Please do not send sensitive or confidential information to us through insecure channels. If you create or use an account, you are responsible for keeping your login and access details secure and should not share them with anyone else.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or subsequently processed, or as required or permitted by law. The relevant period may depend on factors such as whether we need the information to provide the Services, maintain an account, complete transactions, comply with tax, accounting or regulatory obligations, resolve disputes, prevent fraud or enforce agreements. When we are no longer authorised or required to retain personal information, we will delete, destroy or de-identify it in accordance with applicable law.

11. YOUR PRIVACY RIGHTS AND CHOICES

Your rights depend on the laws that apply to you. If POPIA applies, you may, subject to applicable requirements and limitations:

• Ask whether we hold personal information about you and request access to that information.

• Request correction of inaccurate, incomplete, excessive, out-of-date or misleading personal information.

• Request deletion or destruction of personal information where permitted by law.

• Object, on reasonable grounds and in the prescribed manner, to certain processing of your personal information.

• Object to direct marketing and withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

• Lodge a complaint with the Information Regulator (South Africa) if you believe your personal information has been processed in breach of POPIA.

Depending on where you live, other privacy laws may provide additional rights, such as rights to restrict processing, receive a portable copy of certain information, opt out of certain targeted advertising or data sharing, or appeal a decision relating to a privacy request. We will honour applicable rights where required by law.

We may need to verify your identity before acting on a request. Where permitted by law, an authorised representative may submit a request on your behalf, but we may require proof of authority and may also need to verify your identity directly.

We will not discriminate against you for exercising a privacy right. We will respond within the time required by applicable law.

12. PRIVACY AND ADVERTISING CHOICES

Where applicable privacy laws give you the right to opt out of the "sale" or "sharing" of personal information or the use of personal information for targeted advertising, you may use the privacy controls made available through the website or Shopify. If your browser sends a recognised Global Privacy Control preference signal, Shopify may treat that signal as an opt-out request for the relevant browser or device where required by applicable law.

13. INTERNATIONAL TRANSFERS

Because we use Shopify and other service providers that may operate in different countries, your personal information may be transferred to, stored in or processed outside South Africa.

Where POPIA applies, we will transfer personal information outside South Africa only where the transfer is permitted under applicable law. This may include where the recipient is subject to a law, binding corporate rules or a binding agreement that provides an adequate level of protection; where you consent to the transfer; where the transfer is necessary for the performance or conclusion of a contract in circumstances permitted by law; or where another lawful transfer condition applies.

Where another applicable privacy law imposes additional cross-border transfer requirements, we will use an appropriate lawful transfer mechanism as required.

14. COMPLAINTS

If you have a concern about how we process your personal information, please contact us first using the details below so that we can investigate and respond.

If you are in South Africa and believe that your personal information has been processed in a manner that infringes POPIA, you may lodge a complaint with the Information Regulator (South Africa). Complaints may also be submitted through the Regulator's eServices portal or using its prescribed complaint process.

Information Regulator contact details:
Telephone: 010 023 5200
Toll-free: 0800 017 160
Email: POPIAComplaints@inforegulator.org.za
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, South Africa

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, Services or legal and regulatory requirements. When we update it, we will publish the revised version on this website and update the "Last updated" date. Where required by law, we will provide additional notice of material changes.

16. CONTACT US

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a concern about our handling of personal information, please contact us using the details below.

Business	By Dr Terry Ann / DRULEF RETAIL CC CK2009/153992/23
Privacy / customer service email	care@bydrterryann.co.za
Address	24 Nellie Rd, Norwood, Johannesburg, 2192, South Africa
Customer service hours	Monday to Friday, 9:00 am to 5:00 pm

We aim to respond to customer-service and privacy enquiries as promptly as reasonably possible.