Free delivery on orders over R1200 · Delivery is R189
Thoughtfully formulated. Purposefully layered. Inspired by nature.

Privacy Policy

Last updated: 6 September 2026

Cilla Skyn respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you:

  • visit the Cilla Skyn website;
  • create an account;
  • place an order;
  • communicate with us;
  • subscribe to our marketing communications;
  • interact with our social media channels; or
  • otherwise use our services.

We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. WHO IS RESPONSIBLE FOR YOUR INFORMATION?

For purposes of POPIA, the responsible party is:

Cilla Skyn

Information Officer

2. PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with Cilla Skyn, we may collect information such as:

Identity Information

  • first name;
  • surname;
  • username or account name; and
  • other identifying details you voluntarily provide.

Contact Information

  • email address;
  • telephone number;
  • delivery address;
  • billing address; and
  • other contact details.

Order Information

  • products ordered;
  • order numbers;
  • transaction dates;
  • order values;
  • delivery information;
  • returns or customer-service information; and
  • purchase history.

Payment Information

Payments may be processed by secure third-party payment providers.

Cilla Skyn may receive transaction information necessary to confirm or manage payment, but we do not ordinarily receive or store your complete payment-card details where these are processed directly by an external payment gateway.

Account Information

Where customer accounts are available, we may process:

  • account login information;
  • account preferences;
  • saved addresses;
  • order history; and
  • customer preferences.

Website & Technical Information

When you use our website, certain technical information may automatically be collected, including:

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • pages viewed;
  • referring website;
  • session information;
  • approximate geographic information;
  • cookie identifiers; and
  • website interaction data.

Communications

We may retain communications sent to or received from you, including:

  • emails;
  • customer-service enquiries;
  • WhatsApp communications;
  • social-media messages;
  • product queries;
  • complaints;
  • reviews; and
  • other correspondence.

3. WHY WE COLLECT PERSONAL INFORMATION

We may process personal information where reasonably necessary to:

  • process and fulfil your order;
  • confirm payment;
  • arrange delivery;
  • communicate order updates;
  • create and manage your customer account;
  • respond to questions and customer-care enquiries;
  • process valid refunds or replacements;
  • investigate damaged, incorrect or defective-product claims;
  • prevent or detect fraud;
  • maintain website security;
  • improve our products and customer experience;
  • analyse website usage;
  • maintain business and accounting records;
  • comply with tax, legal and regulatory requirements;
  • administer promotions or competitions;
  • send marketing communications where permitted; and
  • establish, exercise or defend legal rights.

4. HOW WE OBTAIN YOUR INFORMATION

We may receive personal information:

Directly From You

For example, when you:

  • place an order;
  • complete a form;
  • create an account;
  • subscribe to our newsletter;
  • contact customer support;
  • enter a promotion;
  • write a product review; or
  • communicate with us through social media.

Automatically

Certain information may be collected automatically through:

  • cookies;
  • pixels;
  • website analytics;
  • server logs; and
  • similar technologies.

From Service Providers

We may receive relevant information from trusted third parties involved in your transaction, such as:

  • payment providers;
  • courier companies;
  • website service providers; and
  • fraud-prevention services.

5. LEGAL BASIS & LAWFUL PROCESSING

Cilla Skyn processes personal information only where there is an appropriate lawful basis under POPIA and other applicable law.

Depending on the circumstances, processing may be necessary:

  • to perform a contract with you;
  • to take steps requested by you before entering into a contract;
  • to comply with a legal obligation;
  • to pursue a legitimate interest permitted by law;
  • to protect a legitimate interest of a data subject;
  • with your consent; or
  • on another lawful basis recognised under applicable law.

Where processing relies on consent, you may withdraw that consent subject to applicable legal requirements.

6. ONLINE ORDERS

When you place an order, we use the personal information you provide to:

  • identify you;
  • process the transaction;
  • verify payment;
  • fulfil the order;
  • arrange delivery;
  • provide order notifications; and
  • provide after-sales support.

Some of this information must be shared with service providers in order to complete your transaction.

7. PAYMENT PROVIDERS

Cilla Skyn may use third-party payment gateways and payment processors.

When you make payment, certain personal and financial information may be sent directly to the payment provider.

The payment provider processes that information according to its own privacy and security policies.

Cilla Skyn does not ordinarily store your complete debit-card or credit-card information where payment is processed by a third-party gateway.

8. DELIVERY PARTNERS

We may provide our courier partners with information necessary to deliver your order, including:

  • recipient name;
  • delivery address;
  • mobile number;
  • email address where necessary;
  • parcel information; and
  • relevant delivery instructions.

Courier partners may use this information to complete delivery and communicate with you about the parcel.

9. MARKETING COMMUNICATIONS

Where permitted by law, Cilla Skyn may send marketing communications relating to:

  • new products;
  • launches;
  • skincare education;
  • special offers;
  • promotions;
  • events;
  • newsletters; and
  • Cilla Skyn news.

Where consent is required, we will seek the appropriate consent.

You can unsubscribe from marketing emails using the unsubscribe link contained in the communication.

You may also contact us directly to request that marketing communications stop.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications about your orders or account.

10. COOKIES

Our website may use cookies and similar technologies.

Cookies are small pieces of information stored on your browser or device.

They may be used to:

  • keep the website functioning;
  • maintain your shopping cart;
  • remember preferences;
  • keep accounts secure;
  • understand website traffic;
  • measure website performance;
  • analyse how customers use the website; and
  • support advertising or marketing functions where permitted.

Where legally required, you may be given choices about non-essential cookies.

You can also manage cookies using your browser settings.

Blocking certain cookies may affect how some website functions operate.

11. WEBSITE ANALYTICS

We may use analytics tools to better understand how visitors interact with our website.

Analytics information may include:

  • pages viewed;
  • time spent on pages;
  • referring sources;
  • device types;
  • general location information; and
  • user interactions.

We use this information to improve website functionality, navigation, content and marketing.

12. WOOCOMMERCE & WEBSITE TECHNOLOGY

The Cilla Skyn online store may use WordPress and WooCommerce together with plugins, hosting services and other technology providers.

These systems may process information necessary to:

  • operate the website;
  • manage your cart;
  • process orders;
  • maintain customer accounts;
  • prevent fraud;
  • provide security; and
  • maintain website performance.

We take reasonable steps to select service providers that provide appropriate data-protection and security safeguards.

13. SOCIAL MEDIA

If you communicate or interact with Cilla Skyn through platforms such as Instagram, Facebook, TikTok, Pinterest or other social networks, those platforms may also collect and process your information according to their own privacy policies.

Information you voluntarily make public on social media may be visible to other users.

Cilla Skyn is not responsible for the independent privacy practices of social-media platforms.

14. REVIEWS & USER-GENERATED CONTENT

If you submit a public product review, testimonial, photograph or other content for publication, the information you choose to make public may be displayed on our website, social media or marketing channels in accordance with our Terms & Conditions and applicable law.

Please avoid including private or sensitive information in public reviews.

15. WHO WE MAY SHARE INFORMATION WITH

We may share personal information with trusted service providers where reasonably necessary for legitimate business purposes, including:

  • website hosting providers;
  • WooCommerce and website service providers;
  • payment processors;
  • courier and logistics providers;
  • email and marketing platforms;
  • analytics providers;
  • cloud-storage providers;
  • accountants, auditors or professional advisers;
  • IT and security providers; and
  • regulatory or governmental authorities where legally required.

We do not sell your personal information.

Service providers are only given information reasonably necessary for the services they perform, subject to appropriate contractual and legal safeguards where required.

16. LEGAL DISCLOSURES

We may disclose personal information where reasonably necessary to:

  • comply with applicable law;
  • comply with a valid court order;
  • respond to a lawful request from an authority;
  • prevent fraud or unlawful activity;
  • protect Cilla Skyn’s legal rights;
  • protect customers or other individuals; or
  • establish, exercise or defend legal claims.

17. INTERNATIONAL PROCESSING

Some of the technology, hosting, payment, analytics, email or other service providers used by Cilla Skyn may operate outside South Africa.

This can result in personal information being processed or stored in another country.

Where personal information is transferred across borders, Cilla Skyn will take reasonable measures required under POPIA to ensure that the transfer is lawful and that appropriate protection is provided.

18. HOW LONG WE KEEP INFORMATION

Cilla Skyn retains personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Retention periods may vary depending on whether the information relates to:

  • an order;
  • accounting or tax records;
  • customer-service correspondence;
  • legal claims;
  • fraud prevention;
  • marketing consent; or
  • another legitimate business purpose.

When information is no longer required, we will take reasonable measures to securely delete, destroy or de-identify it where appropriate.

19. SECURITY

Cilla Skyn takes reasonable technical and organisational measures to protect personal information against:

  • loss;
  • misuse;
  • unauthorised access;
  • unlawful processing;
  • alteration;
  • destruction; and
  • unauthorised disclosure.

Measures may include:

  • secure website technology;
  • access controls;
  • password protection;
  • reputable payment gateways;
  • limited employee access; and
  • appropriate service-provider safeguards.

No online system is completely risk-free, and absolute security cannot be guaranteed.

20. DATA BREACHES

Where Cilla Skyn has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will take appropriate action in accordance with POPIA, including making required notifications where applicable.

21. YOUR RIGHTS

Subject to POPIA and other applicable law, you may have the right to:

  • ask whether we hold personal information about you;
  • request access to personal information we hold;
  • request correction of inaccurate or outdated information;
  • request deletion or destruction where legally appropriate;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • object to direct marketing;
  • request information regarding how your personal information is processed; and
  • lodge a complaint with the Information Regulator.

Some rights are subject to legal exceptions.

For example, Cilla Skyn may need to retain certain transaction records despite a deletion request where retention is required by tax, accounting, consumer or other legislation.

22. CORRECTING YOUR INFORMATION

We rely on customers to provide accurate information.

If your details change or you discover that information held by Cilla Skyn is incorrect, please contact us so that the information can be updated where appropriate.

Customers with an online account may also be able to update certain details through their account.

23. CHILDREN’S INFORMATION

The Cilla Skyn website is not intentionally directed at children for the purpose of collecting their personal information.

Individuals under 18 should use the website and purchase products only with the involvement of a parent or legal guardian where required.

We do not knowingly process children’s personal information in circumstances requiring parental or guardian authorisation without obtaining the legally required authorisation.

24. THIRD-PARTY LINKS

Our website may contain links to third-party websites.

Cilla Skyn does not control the privacy practices of independent third parties.

We encourage you to review the privacy policies of external websites before providing personal information to them.

25. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time because of:

  • changes to our website;
  • changes to our business practices;
  • new technology;
  • changes to service providers; or
  • legal or regulatory developments.

The latest version will be published on the Cilla Skyn website with the updated revision date.

26. INFORMATION OFFICER

Questions or requests relating to personal information may be directed to:

Cilla Skyn Information Officer

Email: info@cillaskyn.co.za
Telephone: +27 64 911 1932
Address: The Straight Avenue, Pineslopes, Sandton, 2191

Please include sufficient information for us to identify and respond to your request.

We may request reasonable proof of identity before providing access to personal information.

27. INFORMATION REGULATOR

If you believe that your personal information has been processed contrary to POPIA, you may have the right to lodge a complaint with the Information Regulator (South Africa).

Current regulator contact details should be obtained from the Information Regulator’s official website.

We encourage customers to contact Cilla Skyn first so that we have an opportunity to address the concern.

28. CONTACT CILLA SKYN

For privacy questions or requests:

Cilla Skyn

Email: info@cillaskyn.co.za
Telephone / WhatsApp: +27 64 911 1932
Physical Address: The Straight Avenue, Pineslopes, Sandton, 2191
Website: www.cillaskyn.co.za