Legal

Privacy Policy

Last updated: 29 September 2026

This policy explains what personal information NUVORA collects, why, what we do with it and the choices you have. It is written to meet the Protection of Personal Information Act, 4 of 2013 (POPIA).

Who we are

NUVORA is the trading name of a partnership between Elandre Du Preez and Stefan Van Veijeren, based in Pretoria, South Africa. The partnership is not a registered company. We are the "responsible party" for your personal information under POPIA.

As a partnership, our Information Officer is one of our partners. You can reach them at milleralex9764@gmail.com with any privacy question or request.

What we collect

Your details: name, email address, billing details and anything else you give us at checkout or when you contact us.
Your photos: the five photos you upload for your analysis (front, two 45° angles and two profiles).
Your intake answers: what you tell us about your goals, preferences and lifestyle.
Order and payment records: what you bought, when, and the payment reference. Card and bank details are handled by our payment provider, Payfast. We never see or store your full card number.
Messages: emails and contact-form messages you send us.
Website data: basic device, browser and usage information collected through cookies when you visit this website.

Giving us your photos and intake answers is voluntary, but we cannot produce your report without them.

Your photos need extra care

Photos of your face can reveal special personal information, such as your race or ethnic origin, and your intake answers or skin analysis may touch on health (for example a skin condition). POPIA protects this kind of information more strictly.

We process it only with your consent, which you give by ticking the consent box before you upload your photos, and only to produce your report. We will never:

sell your photos or personal information;
publish your photos, post them on social media or use them in advertising;
show your photos or results on our website (including the Results page) without your separate written permission;
use your photos to train a public AI model;
use your photos for identification, surveillance or profiling.

You can withdraw your consent at any time by emailing us. Withdrawing does not undo processing that already took place, and it may mean we cannot finish your report.

Why we use your information

To produce and deliver your report, which is the service you bought.
To process your payment and keep order records, as tax and accounting law requires.
To support you, for example when you ask a question or report a problem with your report.
To keep our website and service secure and to prevent fraud.
To send you marketing, only if you agreed to it or are an existing customer, and never after you unsubscribe.

Who we share it with

We share your information only with service providers who help us run NUVORA, and only as much as they need to do their job. They include:

Shopify, which runs this website, our checkout and our customer records;
Payfast, which processes payments;
Meta (Facebook and Instagram), which receives information about visits and purchases on this website through its pixel, so we can measure our ads. It never receives your photos or intake answers;
providers of secure file storage, email, and image-editing and AI-assisted production tools used to create your report.

Some of these providers store or process information outside South Africa. When that happens, we use providers that are bound by data-protection laws or agreements that give your information protection similar to POPIA, as section 72 of POPIA requires.

We may also disclose information when the law, a court order or a regulator requires it.

How long we keep it

Photos: deleted within 30 days after we deliver your report. That window lets us correct your report if you raise a problem within 7 days of delivery. Copies held in secure backups are overwritten in the normal backup cycle.
Intake answers and your report: kept for 12 months, the period your report stays valid, so we can help with questions about it. Then they are deleted.
Order, payment and tax records: kept for five years, as South African tax law requires.
Marketing preferences: kept until you unsubscribe.

You can ask us to delete your information sooner. We will, unless the law requires us to keep it.

How we protect it

We use secure, encrypted connections, access controls and reputable providers, and only people who need your information to produce or support your report can see it. No system is perfectly secure. If a breach affects your personal information, we will tell you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you can ask us to:

confirm whether we hold personal information about you, and give you a copy;
correct information that is wrong or incomplete;
delete information we no longer have a lawful reason to keep;
stop using your information for direct marketing;
withdraw your consent to our use of your photos.

Email milleralex9764@gmail.com. We may ask you to confirm your identity first, and we will respond within a reasonable time.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Information Regulator:

Email: POPIAComplaints@inforegulator.org.za
Website: www.inforegulator.org.za
Phone: 010 023 5200
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

Marketing

We only send marketing emails or messages if you have opted in, or if you are a customer and the message is about similar NUVORA services. Every message includes a way to unsubscribe. Emails about your order or report are not marketing and will still be sent.

Age

NUVORA is for adults only. You must be 18 or older to buy a report, and you may not submit photos of anyone under 18. Before the upload form opens, we ask you to confirm that you are 18 or older and that the photos are of you.

Cookies

This website uses cookies to keep your cart working, remember your preferences, understand how the site is used and measure our advertising. Shopify sets most of them, and the Meta pixel sets advertising cookies. You can block or delete cookies in your browser settings, though parts of the site may then stop working.