The Lighting Studio | Mask Holdings Pty Ltd Revision 01 – Effective 15 June 2026
1. Who We Are
The Lighting Studio is an online retail store operated by Mask Holdings Pty Ltd, registration number 2021/145197/07, VAT number 4290304395, with its principal place of business at 31 Bradford Close, Parklands, Cape Town, 7441, South Africa.
We are the Responsible Party as defined in the Protection of Personal Information Act 4 of 2013 (“POPIA”) in respect of all personal information collected through this website and in the course of our business.
Contact: hello@thelightingstudio.co.za
2. Our Commitment
We are committed to protecting your privacy and processing your personal information lawfully, fairly, and transparently, in accordance with POPIA and all applicable South African law. We will only collect and use your personal information for the purposes set out in this policy and will not sell, rent, or trade your personal information to any third party.
3. What Personal Information We Collect
When you interact with The Lighting Studio, we may collect the following categories of personal information:
Account and order information
- Full name
- Email address
- Physical delivery address
- Telephone number
- Order history and purchase records
Payment information
- We do not store credit card details on our servers. All payment processing is handled by Yoco or Payfast, which are independently PCI-DSS compliant payment processors. Please refer to their respective privacy policies for details of how they handle your payment data.
Technical information
- IP address
- Browser type and version
- Pages visited and time spent on site
- Referring website
- Device type
Communications
- Any correspondence you send us by email or via our contact form
- Customer service records
4. Why We Collect Your Personal Information
We collect and process your personal information for the following purposes:
- To process and fulfil your orders, including arranging delivery
- To communicate with you regarding your order status
- To process returns, refunds, or exchanges
- To respond to your enquiries or complaints
- To send you marketing communications, where you have opted in to receive them
- To improve our website and product offering
- To comply with our legal obligations
- To detect and prevent fraud or abuse
We will not process your personal information for any purpose not listed above without first notifying you and, where required, obtaining your consent.
5. Legal Basis for Processing
We process your personal information on the following grounds:
- Contract: Processing is necessary to fulfil your order and deliver goods to you
- Legal obligation: Processing is required to comply with applicable South African law, including consumer protection and tax legislation
- Legitimate interest: Processing is necessary for our legitimate business interests, including fraud prevention and improving our services
- Consent: Where you have provided consent, for example to receive marketing emails
6. How We Share Your Personal Information
We may share your personal information with the following categories of third parties, solely to the extent necessary to fulfil the purposes described in this policy:
Courier and logistics providers We share your name and delivery address with The Courier Guy and/or MDS Collivery to arrange delivery of your order.
Payment processors Your payment is processed by Yoco or Payfast. We share only the information required to process your transaction.
Email marketing Where you have opted in, we use Mailchimp to send marketing communications. Mailchimp processes your email address on our behalf. You may unsubscribe at any time.
Google We use Google for WooCommerce to list our products on Google Shopping. This involves sharing product and order data with Google in accordance with their privacy policy.
Hosting and infrastructure Our website is hosted on servers managed by Domains.co.za. Your data is stored on servers located in South Africa.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
7. International Transfers
Some of the third parties listed above (including Mailchimp and Google) may process your personal information outside of South Africa. Where this occurs, we take reasonable steps to ensure that adequate protection is in place, consistent with the requirements of POPIA.
8. How Long We Keep Your Information
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In general:
- Order records: 5 years (for tax and legal compliance)
- Customer account information: for the duration of your account, plus 2 years after last activity
- Marketing preferences: until you unsubscribe or request deletion
- Technical logs: 12 months
9. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that inaccurate or incomplete information be corrected
- Deletion: Request that your personal information be deleted, subject to our legal obligations to retain certain records
- Objection: Object to the processing of your personal information for direct marketing purposes
- Complaint: Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact us in writing at:
Email: hello@thelightingstudio.co.za Post: Mask Holdings Pty Ltd, 31 Bradford Close, Parklands, Cape Town, 7441
We will respond to all requests within a reasonable time and no later than 30 days.
10. Information Regulator
If you are not satisfied with how we handle your personal information or your request, you have the right to lodge a complaint with the Information Regulator of South Africa:
The Information Regulator (South Africa) Website: www.justice.gov.za/inforeg Email: inforeg@justice.gov.za Tel: 010 023 5207
11. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Our website uses SSL encryption (HTTPS) for all data transmitted between your browser and our servers. Access to personal information is restricted to authorised personnel only.
Despite these measures, no internet transmission is completely secure. We cannot guarantee the absolute security of information transmitted to or from our website.
12. Children
Our website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
13. Changes to This Policy
We may update this policy from time to time. The revision date at the top of this document will reflect the most recent update. We encourage you to review this policy periodically.
14. Contact Us
For any questions, requests, or complaints relating to this policy or our handling of your personal information:
Email: hello@thelightingstudio.co.za
Post: Mask Holdings Pty Ltd, 31 Bradford Close, Parklands, Cape Town, 7441
VAT: 4290304395
Mask Holdings Pty Ltd registration number: 2021/145197/07