Privacy policy

At Midnight Desires, your privacy is extremely important to us. We are committed to handling your personal information securely, discreetly, and transparently, in full compliance with the Protection of Personal Information Act (POPIA) of South Africa.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

We may collect the following personal information:

  • Full name
  • Email address
  • Contact number
  • Billing and delivery addresses
  • Payment-related details (processed securely via third-party providers)
  • Account login details (if applicable)
  • Any information you provide when contacting us

1.2 Information Collected Automatically

When you visit our site, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Referral and interaction data

This helps us improve performance, security, and user experience.

2. How We Use Your Information

We use your information to:

  • Process and fulfil orders
  • Arrange delivery and provide updates
  • Communicate regarding orders or enquiries
  • Provide customer support
  • Improve our website and services
  • Comply with legal obligations
  • Prevent fraud or unauthorised activity

We only process your data where there is a lawful basis to do so.

3. Payment Information

All payments are processed via secure third-party payment gateways.

Midnight Desires does not store or have access to your full banking or card details. Payment providers handle your data according to their own security standards.

4. Sharing of Information

We only share your information where necessary, including with:

  • Courier partners (for delivery)
  • Payment providers
  • Hosting, IT, and analytics services
  • Legal or regulatory authorities (if required)

We do not sell, rent, or trade your personal information.

5. Data Storage & Security

We take reasonable technical and organisational measures to protect your information against:

  • Unauthorised access
  • Loss or misuse
  • Alteration or disclosure

While we take security seriously, no system is completely secure, and absolute security cannot be guaranteed.

6. Data Retention

We retain personal information only for as long as necessary to:

  • Fulfil the purposes outlined in this policy
  • Meet legal and regulatory requirements

Data is securely deleted or anonymised when no longer needed.

7. Cookies & Tracking

We use cookies to:

  • Improve functionality
  • Analyse site usage
  • Enhance your browsing experience

You can disable cookies in your browser, but some features may not function properly.

8. Your Rights (POPIA)

You have the right to:

  • Access the personal information we hold about you
  • Request corrections or deletion
  • Object to processing
  • Withdraw consent where applicable

Requests can be made by contacting us.

9. Third-Party Links

Our website may contain links to external websites.

We are not responsible for their privacy practices and encourage you to review their policies before sharing information.

10. Children’s Privacy

Midnight Desires does not knowingly collect information from individuals under 18.

If such data is identified, it will be removed promptly.

11. Discretion & Sensitive Purchases

Due to the nature of our products, we take extra steps to protect your privacy:

  • Orders are handled with strict confidentiality
  • Packaging is discreet and unbranded
  • Personal data is never used in a way that could expose sensitive purchase information

12. Age Verification

Where required, we may collect limited information to verify age.

This data:

  • Is used only for compliance purposes
  • Is not used for marketing
  • Is stored securely and only retained as long as necessary

13. Limitation of Liability

While we take reasonable steps to protect your data, Midnight Desires is not liable for:

  • Unauthorised access beyond our control
  • Failures in third-party systems
  • Cyber incidents or force majeure events

14. Changes to This Policy

We may update this Privacy Policy at any time.

Changes take effect once published. We encourage regular review.

15. Contact

For any privacy-related questions or requests, please contact our support team.

If you want, I can also:

  • Add a cookie consent banner script (POPIA/GDPR friendly)
  • Or tailor this specifically for Paystack + WooCommerce + tracking tools (Google Analytics, Meta Pixel, etc.)

That’s usually the next step to keep everything fully compliant.