← Back to the store

PRIVACY POLICY

Effective 27 May 2026

1. Introduction

This Privacy Policy explains how Dyel Distribution (Pty) Ltd, trading as Luxiaojun SA (“we”, “our”, “us”), collects, uses, stores and protects your personal information when you visit www.luxiaojun.co.za or place an order with us.

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA), and other applicable South African law. By using the Website or placing an order, you consent to the processing of your personal information as described here.

2. Who we are

  • Responsible party: Dyel Distribution (Pty) Ltd t/a Luxiaojun SA
  • Location: Gauteng, South Africa
  • Contact for privacy queries: sales@luxiaojun.co.za

For data-subject access, correction or deletion requests, please use the contact above with “POPIA request” in the subject line.

3. What personal information we collect

We collect only what we need to fulfil orders and run the business. Specifically:

  • Identity information: full name, email address, mobile number
  • Location: city and province (for delivery routing)
  • Order details: product chosen (colour, size), delivery method, payment method, order reference (LXJ-####)
  • Payment metadata: PayFast transaction IDs and status. We do not collect, see or store card numbers, expiry dates or CVVs — these are handled exclusively by PayFast
  • Consent record: timestamp at which you agreed to the Terms, the version you agreed to, and your IP address at the time
  • Operational data: server-side logs (IP address, browser type, pages visited) collected through hosting and analytics services

We do not knowingly collect special personal information (race, religion, health, biometric data, etc.) and do not require any of these to make a purchase.

4. Why we collect it

Each piece of data has a lawful purpose:

  • To fulfil your order — name, contact details, location, order details, payment metadata
  • To communicate with you — email and mobile for order confirmations, payment confirmations, dispatch notifications, and any necessary support
  • To comply with the law — tax-record retention (SARS), proof-of-consent for online contracts (POPIA, ECT Act)
  • To improve the Website — aggregate, anonymous analytics to understand which pages people visit and where they drop off
  • To prevent fraud — IP and order metadata to detect suspicious patterns

We do not sell or rent your personal information to anyone, ever.

5. Who we share it with

We share your data only with service providers we need to operate the business, and only the data they need to do their job. These include:

  • Payment processor — PayFast, an authorised South African payment service provider, handles all card payments
  • Couriers — PostNet and Courier Guy receive your name, contact details, and the locker you’ve chosen, to deliver your parcel
  • Email service — a transactional email provider sends order and payment notifications on our behalf
  • Cloud hosting and database — cloud service providers host the Website and store our customer database
  • Analytics — aggregate analytics providers receive anonymised page-view data to help us understand site usage

All providers we use are reputable and contractually required to handle your data securely and only for the agreed purpose. We do not disclose personal information to any other third parties except where required by law (for example, a court order).

6. Cross-border transfers

Some of our cloud service providers operate from outside South Africa. Where we transfer personal information outside South Africa, we ensure that the recipient is subject to laws, binding corporate rules or contractual obligations that provide a level of protection at least equivalent to POPIA, as required by section 72 of the Act.

7. How long we keep it

  • Order records: 7 years from the date of order, as required by the Tax Administration Act and SARS record-keeping rules.
  • Returns and exchange records: 3 years after the return is closed, for accounting and dispute purposes.
  • Consent records: kept alongside the related order for as long as the order record is retained.
  • Marketing data (where applicable): until you withdraw consent.
  • Server logs: typically 90 days, automatically purged.

After the retention period, we delete or anonymise personal information so it can no longer be linked back to you.

8. How we protect it

We take security seriously. Measures include:

  • HTTPS encryption on the Website for all data in transit
  • Authenticated, role-restricted access to the customer database
  • Card payment data handled exclusively by PCI-DSS compliant providers (PayFast)
  • Password protection on the admin dashboard, with rotated credentials
  • Application-level audit trails on consent and order changes
  • Regular software updates for all dependencies and platforms

No system is ever 100% secure. If we become aware of a personal-information breach that is likely to result in real risk of harm, we will notify the Information Regulator and affected data subjects without undue delay, as required by section 22 of POPIA.

9. Your rights

Under POPIA you have the right to:

  • Be informed about how we use your data (this policy)
  • Access the personal information we hold about you
  • Correction of any inaccurate or incomplete information
  • Deletion of your personal information, where there is no legal obligation requiring us to keep it
  • Object to processing for direct marketing or on legitimate grounds
  • Withdraw consent previously given (this does not affect the lawfulness of processing already carried out)
  • Lodge a complaint with the Information Regulator (see contact below)

To exercise any of these rights, email sales@luxiaojun.co.za with “POPIA request” in the subject line. We’ll respond within reasonable time and at most within 30 days.

10. Marketing communications

We send marketing and promotional messages — such as new colourway drops, restocks and occasional offers — only where you have opted in, or otherwise where permitted under section 69 of POPIA. We may contact you by:

  • Email (newsletter and promotional mailers)
  • Social media advertising

You can opt out of marketing at any time — use the unsubscribe link in any marketing email, or email sales@luxiaojun.co.za with “unsubscribe” in the subject line. Opting out of marketing does not affect transactional emails (order, payment and dispatch notifications), which we still need to send to fulfil your order.

11. Cookies and tracking

The Website uses cookies and similar technologies for essential functionality (keeping you logged in to admin areas, remembering form input) and for aggregate analytics (understanding how the site is used).

We do not currently use third-party advertising cookies. If we add advertising or re-marketing tracking in future, we will update this policy and (where required) ask for your consent before such cookies are set.

You can disable cookies in your browser settings. Some site features may not work correctly without them.

12. Children

The Website is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact sales@luxiaojun.co.za and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or business practice. The effective date at the top of this page shows the current version. Material changes will be announced on the Website, and where required by law we will obtain fresh consent.

14. Contact

For any privacy-related question, request or complaint:

Dyel Distribution (Pty) Ltd
Email: sales@luxiaojun.co.za
Gauteng, South Africa

If we cannot resolve your complaint, you may also approach the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za