Privacy policy

Last updated: 9 September 2026

This Privacy Policy / POPIA Privacy Notice ("Notice") is issued by Infinity Professional Group (Pty) Ltd (registration number 2017/380225/07), trading as Mediceuticals South Africa ("Mediceuticals", "we", "us", "our"), the responsible party as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA") for the personal information described below.

1. Who we are

Infinity Professional Group (Pty) Ltd trading as Mediceuticals South Africa is a South African company that imports and distributes the Mediceuticals hair and scalp care brand in South Africa and operates the website www.mediceuticals.co.za (the "Site") on the Shopify platform.

Registered office: 11 Beach Road, Mossel Bay, Western Cape, 6506
Business / premises address: 82 Montagu Street, Mossel Bay, Western Cape, 6500
Telephone: 082 876 9992
Email: info@infinitycollection.co.za

2. Our Information Officer

Infinity Professional Group (Pty) Ltd has appointed Dinette Wessels as its Information Officer who is responsible for compliance with POPIA. Requests, queries or complaints relating to this Notice or your personal information can be directed, for the attention of the Information Officer, Dinette Wessels, to the contact details in section 13 below.

3. Scope of this Notice

This Notice applies to personal information we collect through: the Site; our online quiz ("Medi Quiz", powered by our service provider Tangent AI); our checkout and order process; our newsletter and marketing sign-ups; our wholesale application; our contact form; and any other interaction you have with us, including via telephone, email or social media.

4. Personal information we collect

Depending on how you interact with us, we may collect:

Website visitor data: IP address, device and browser information, pages viewed, referral source, and similar data collected automatically through cookies and similar technologies (see our Cookie & Tracking Policy).
Customer and order data: name, delivery and billing address, email address, telephone number, order history and products purchased.
Payment-related information: payment confirmation and transaction details processed by our payment gateway and Shopify's payment infrastructure. We do not store full card numbers on our own systems.
Shipping information: delivery address, courier tracking data.
Quiz participant data (Medi Quiz): your answers to quiz questions about your hair type, scalp type, hair concerns and, if you choose to answer, lifestyle factors (which may include references to stress, hormonal changes, medication or chemotherapy), and, if you provide it, your email address. See section 8 below for more detail on the quiz and special personal information.
Marketing data: your email address and marketing preferences if you subscribe to our newsletter or opt in to marketing communications, and your engagement with our marketing emails and adverts.
Wholesale applicant data: business name, contact person's name, email, phone number, VAT/company registration number, business address, business type and expected order volume, submitted through our Wholesale Application form.
Contact and support data: your name, email, phone number and the content of any message you send us via our contact form, email or telephone.

5. How we collect personal information

We collect personal information directly from you (for example when you place an order, complete the quiz, subscribe to our newsletter, or submit a form); automatically through your use of the Site (via cookies and similar technologies); and from our service providers who process personal information on our behalf as described below.

6. Why we process your personal information (purpose and lawful basis)

Purpose	Lawful basis under POPIA
Processing and fulfilling your order, arranging delivery, providing customer support	Performance of a contract with you / your consent to purchase
Providing quiz results and personalised product recommendations	Your consent (given when you use the quiz)
Sending you direct marketing (newsletters, promotions, remarketing)	Your separate, specific consent (opt-in), or an existing customer relationship in accordance with section 69 of POPIA and the "opt-out" rules for similar products/services, where applicable
Processing your wholesale application	Steps taken at your request prior to entering into an agreement / legitimate interest in assessing trade applicants
Responding to enquiries submitted via our contact form	Your consent / legitimate interest in responding to your enquiry
Security, fraud prevention and enforcing our terms	Legitimate interest and compliance with legal obligations
Complying with tax, customs, consumer-protection and other legal obligations	Compliance with a legal obligation
Website analytics and improving the Site	Legitimate interest / consent (cookies), see our Cookie Policy

7. Direct marketing

We will only send you direct electronic marketing (email, SMS or WhatsApp) where you have given your consent, in line with section 69 of POPIA and the Electronic Communications and Transactions Act 25 of 2002. Ticking a marketing consent box, or separately subscribing to our newsletter, is not a condition of receiving your Medi Quiz results, completing your order, or using the Site. You may withdraw your consent and unsubscribe from marketing communications at any time, free of charge, using the unsubscribe link in any marketing email or by contacting us using the details in section 13.

8. The Medi Quiz and special personal information

Our Medi Quiz is a product-recommendation tool, not a medical or diagnostic tool. It asks about your gender, scalp type, hair type, hair and scalp concerns (for example dandruff, dryness, oiliness, thinning) and, optionally, general lifestyle factors that can affect hair and scalp condition (for example stress, hormonal changes, diet, or whether you are taking medication or undergoing chemotherapy). Answers relating to medication, chemotherapy or similar lifestyle factors may constitute "special personal information" concerning health under section 26 of POPIA. We only process this information where you voluntarily choose to provide it, for the purpose of tailoring product recommendations, and we treat it with the same protections POPIA requires for special personal information. The quiz does not diagnose any medical condition and does not constitute medical advice; if you have a medical concern about your hair or scalp, please consult a qualified healthcare professional. The quiz is provided to us via our service provider, Tangent AI (see section 10).

9. How we disclose personal information

We may share personal information with:

Our e-commerce platform provider, Shopify, which hosts the Site and processes orders, payments and related data on our behalf. Shopify's own privacy practices are described at shopify.com/legal/privacy.
Our quiz provider, Tangent AI, which powers the Medi Quiz and processes quiz responses and, where provided, your email address, to generate personalised recommendations.
Our email/SMS marketing provider, Mailchimp, where you have opted in to receive marketing communications.
Payment processors used at checkout, to process your payment securely.
Couriers and delivery partners, to fulfil and deliver your order.
Advertising and analytics platforms such as Google (Google Ads / Analytics) and, where we activate this in future, Meta (Facebook/Instagram), for advertising, remarketing and measuring the performance of our marketing, in each case only to the extent permitted by law and, where required, with your consent.
Our professional advisors, auditors and regulators, and law enforcement or other authorities where required or permitted by law.
A prospective purchaser or successor of our business, in the event of a sale, merger or restructuring, subject to appropriate confidentiality protections.

We do not sell your personal information.

10. Third-party processors used by Mediceuticals South Africa

We currently make use of the following categories of third-party service providers, each of which acts as an operator (processor) or, in some cases, a separate responsible party, in relation to personal information collected through the Site:

Shopify (e-commerce platform, hosting and payments infrastructure)
Tangent AI (quiz and personalisation engine)
Mailchimp (email and SMS marketing)
Payment gateway provider(s) integrated with our Shopify checkout
Courier and delivery service providers
Google (Google Ads, Analytics, and Google & YouTube sales channel)
Meta (Facebook/Instagram), where and if activated for advertising

We require our service providers to protect personal information in accordance with POPIA, to apply appropriate security safeguards, and to use personal information only for the purposes we authorise.

11. International transfers

Some of our service providers (including Shopify, Tangent AI, Mailchimp, Google and Meta) may store or process personal information on servers located outside South Africa. Where we transfer personal information outside South Africa, we take reasonable steps to ensure the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection substantially similar to POPIA, in accordance with section 72 of POPIA.

12. Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Notice, including to comply with legal, accounting, tax and customs record-keeping obligations, resolve disputes, and enforce our agreements. Order and financial records are generally retained for the periods required by South African tax and companies legislation. Quiz responses and marketing data are retained only for as long as reasonably necessary for the purpose for which they were collected, or until you withdraw your consent or unsubscribe, whichever is earlier.

13. Your rights

Subject to POPIA, you have the right to:

Be notified that we hold your personal information;
Request access to the personal information we hold about you;
Request correction or updating of inaccurate, incomplete, misleading or outdated personal information;
Request deletion or destruction of personal information that we are no longer authorised to retain;
Object to the processing of your personal information, including for direct marketing purposes;
Withdraw any consent you have given, at any time (without affecting the lawfulness of processing before withdrawal);
Not be subject to a decision based solely on automated processing (including profiling) that affects you legally or similarly significantly, without appropriate safeguards; and
Submit a complaint to us and/or to the Information Regulator (see section 14).

To exercise any of these rights, contact us at:
Infinity Professional Group (Pty) Ltd t/a Mediceuticals South Africa
Attention: Information Officer, Dinette Wessels
82 Montagu Street, Mossel Bay, Western Cape, 6500
Telephone: 082 876 9992
Email: info@infinitycollection.co.za

We may need to verify your identity before actioning a request. Formal requests for access to records may also be made under our PAIA Manual.

14. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
33 Hoofd Street, Forum III, 3rd Floor, Braampark, Braamfontein, 2001
P.O. Box 31533, Braamfontein, 2017
Complaints email: complaints.IR@justice.gov.za
General enquiries: enquiries@inforegulator.org.za
Website: www.inforegulator.org.za

15. Security

We implement reasonable technical and organisational measures, and require our service providers to do the same, to protect personal information against loss, unauthorised access, interference, modification or disclosure, as required by section 19 of POPIA. No system can be guaranteed 100% secure, and you share information with us at your own risk.

16. Data breaches

If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and, where required, affected data subjects, as soon as reasonably possible, in accordance with section 22 of POPIA.

17. Children

Our Site and Services are intended for use by adults. We do not knowingly collect personal information from children without the consent of a competent person (such as a parent or guardian), as required by POPIA. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can address it.

18. Relationship to PAIA

Our PAIA Manual, published in terms of the Promotion of Access to Information Act 2 of 2000, explains how you may formally request access to records we hold, including your personal information.

19. Changes to this Notice

We may update this Notice from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page shows when it was last revised. We encourage you to review this Notice periodically.

20. Contact us

Infinity Professional Group (Pty) Ltd t/a Mediceuticals South Africa
82 Montagu Street, Mossel Bay, Western Cape, 6500, South Africa
Telephone: 082 876 9992
Email: info@infinitycollection.co.za

Advertising and analytics (Meta / Facebook and Instagram)

Infinity Professional Group (Pty) Ltd, trading as Mediceuticals South Africa ("we", "us"), uses the Meta Pixel and Meta's Conversions API on mediceuticals.co.za. These tools are provided by Meta Platforms, Inc. and its affiliates ("Meta").

What is collected. When you visit our website, we may share information about your activity with Meta. This includes pages and products you view, items you add to your cart, when you start checkout, and purchases you make. It also includes technical information such as your IP address, browser and device details, and cookie identifiers. If you provide an email address, phone number or delivery details, these may be shared with Meta in a secured (hashed) form so that Meta can match your activity to a Meta account.

Why we do this. We use this information to measure how our advertising performs, to show relevant ads to people on Facebook and Instagram, and to understand how visitors use our website.

Your choices. Where required, we only collect this information after you accept cookies through our cookie banner, and you can change your choice at any time. You can also control how Meta uses your data through your Facebook and Instagram settings, including "Off-Facebook activity" and "Ad preferences".

Transfers outside South Africa. Meta may process this information on servers outside South Africa. Meta handles this information under its own privacy policy.

Contact us. To ask about your information or to object to this processing, contact us at info@infinitycollection.co.za.