Last updated: 30 August 2026
GHOST by Valazat (“GHOST,” “we,” “us,” “our”) respects your privacy. This policy explains what personal information we collect when you visit valazat.com or place an order, why we collect it, how we protect it, and the rights you have over it. It is written to align with South Africa’s Protection of Personal Information Act (POPIA) and, for customers in the European Union and United Kingdom, the General Data Protection Regulation (GDPR).
1. Who we are
GHOST by Valazat is a fragrance house operating from South Africa, shipping worldwide. For any privacy question, contact us at the details in section 10.
2. Information we collect
We collect information in three ways: what you give us directly, what is generated automatically as you use the site, and what our service providers pass back to us.
- Account and order information: name, email address, billing and shipping address, phone number, order history and order contents.
- Payment information: processed directly by our payment gateway. We do not store full card numbers on our servers.
- Contact and support information: anything you send us through the contact form, WhatsApp, phone or email, including your name, email address and message.
- Technical information: IP address, browser type, device type, pages viewed, and referring site, collected automatically through cookies and similar technologies.
- Marketing information: your email address, only if you opt in through the newsletter form, and only for the purpose you signed up for.
3. How we use your information
- To process, fulfil, ship and support your order.
- To communicate with you about an order, a support request, or a question you have raised.
- To detect and prevent fraud and abuse.
- To send marketing communications, only where you have opted in, and you can unsubscribe at any time.
- To understand how the site is used, so we can improve it.
- To comply with legal, tax and accounting obligations.
4. Cookies
We use cookies for things that make the store work: keeping items in your bag, remembering your currency and language preference, and keeping you logged in to your account. We may also use analytics cookies to understand traffic to the site. You can disable cookies in your browser settings, though parts of the store, particularly the bag and checkout, will not function correctly without them.
5. Who we share information with
We do not sell your personal information. We share it only with service providers who need it to do their job on our behalf, including:
- Our payment gateway, to process payment securely.
- Couriers and postal services, to deliver your order.
- Our hosting and email-delivery providers, to run the site and send transactional email.
- Government or regulatory bodies, only where required by law.
Each of these providers is only given the information they need, and is required to keep it secure.
6. International transfers
Because we ship worldwide, your order information may be transferred to and processed in countries outside South Africa, including the country you are shipping to and the countries where our service providers operate. Where this happens, we take reasonable steps to ensure your information is protected to a standard consistent with this policy.
7. How long we keep your information
We keep order and account information for as long as needed to fulfil the purposes described above, and afterwards for as long as required by tax, accounting or legal obligations. Marketing information is kept until you unsubscribe or ask us to delete it.
8. Your rights
Subject to applicable law, you have the right to:
- Ask what personal information we hold about you, and request a copy of it.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete your personal information, subject to our legal obligation to retain order records.
- Withdraw consent to marketing communications at any time.
- Object to certain uses of your information.
- Lodge a complaint with your local data protection authority. In South Africa, this is the Information Regulator (inforegulator.org.za).
To exercise any of these rights, contact us using the details in section 10.
9. Security
We use industry-standard measures, including SSL encryption on all pages, to protect your information in transit and at rest. No system is completely secure, but we take reasonable steps to protect your data against unauthorised access, alteration, disclosure or destruction.
10. Contact us
For any question about this policy or your personal information, reach us through the contact page, on WhatsApp, or by phone. Details are on our Contact page.
11. Changes to this policy
We may update this policy from time to time, for example as our services or the law changes. The “last updated” date at the top of this page will always reflect the most recent revision.