Effective: 22 October 2026
Who handles your information
Health Shop Online is operated by The Healing Altar (Pty) Ltd, South African company registration 2014/081801/07. The company is the responsible party for personal information handled for this store. Our business, returns and legal-service address is: The Healing Altar (Pty) Ltd, 2 Crescendo Lane, 1 Windsor Way, Olivedale, Randburg, Johannesburg, 2188, South Africa.
Yogan Pillay, Director/Managing Director and Information Officer, personally oversees privacy enquiries. Email info@healthshoponline.co.za or call 068 646 9353.
What we collect and why
We use the name, contact details, billing and delivery details, chosen products, payment status and correspondence supplied for orders, delivery, support, returns, refunds and record-keeping. The Contact form requires your name, email and cellphone number; its message field is optional. Details needed to fulfil an order or answer an enquiry must be supplied for us to provide that service. Optional newsletter consent is separate from purchase.
We process information where needed to take steps you request, perform a purchase contract, meet legal duties, protect legitimate interests such as preventing fraud, or act on your consent where required. Server and security systems may process technical information such as IP addresses and request logs to operate and protect the site. Please avoid sending unnecessary sensitive health information through enquiries or public reviews.
Recipients and services
Information needed for payment, delivery, support and website operation is handled through the relevant payment, banking, courier, hosting, email, security and technical service providers. PayFast and direct bank transfer are available. Contact-form enquiries are configured to reach a Gmail inbox. Domain hosting and mail infrastructure identify Domains.co.za. Website features also use Automattic/Jetpack services, including forms and image delivery. Newsletter subscriptions use Mailchimp. These services have their own privacy information and may process information outside South Africa.
Provider information: Domains.co.za Privacy Policy; Domains.co.za Data Processing Agreement; Google Privacy Policy; PayFast Privacy Policy; Automattic visitor notice; Mailchimp Privacy Policy. These links describe provider practices; they do not imply that all providers have the same role or that all information remains in South Africa. If you choose a WhatsApp contact link, WhatsApp’s own terms and privacy practices apply.
Cookies and your marketing choices
The store uses essential functionality for browsing, cart, checkout, login and security. Optional Mailchimp browser tracking, popup/remarketing code, WooCommerce order attribution and Collect.chat display are currently disabled or held. We do not treat continued browsing as consent to optional tracking.
The checkout newsletter choice starts unselected. Leave it unselected to decline marketing, or select it to request newsletter subscription. You may withdraw marketing consent using the unsubscribe link in a newsletter or by contacting Yogan Pillay at the email or telephone above. Withdrawal does not affect the lawfulness of earlier processing. Essential order and service messages are separate from marketing. Browser cookie controls are also available, although blocking essential cookies may prevent cart or checkout functions.
Reviews
Reviews submitted for publication can display the review and author information publicly. Please do not include confidential information or unnecessary health details in a review. Contact us about a published review or a request concerning its personal information.
Retention and security
Retention depends on the purpose, applicable record-keeping obligations, and unresolved returns, complaints or legal matters. You can request a review of information held about you. Some records must be retained where law requires or another lawful basis applies. We do not promise automatic deletion on a fixed date. Access controls, security tools and backups are configured, but no website or communication service can guarantee absolute security.
Your rights and complaints
Subject to applicable law, you may request access, correction or deletion, object to processing, and withdraw consent where processing relies on it. Contact Yogan Pillay using the details above. We verify identity before disclosing or altering personal information and record requests and responses. A request may be limited by lawful retention or other applicable duties; we will explain the relevant outcome. You may also complain to South Africa’s Information Regulator.
We will date changes to this notice on this page. A notice update does not itself obtain fresh consent to optional processing.