Legal

Privacy Policy

Last updated: July 2026

Template - pending legal review. This POPIA-aligned draft must be reviewed and finalised by a qualified South African attorney, and the Information Officer details completed, before EventHub Pro is offered commercially.

1. Scope

This policy explains how Jozi Blocks (Pty) Ltd ("we") handles personal information in EventHub Pro, in line with the Protection of Personal Information Act, 2013 (POPIA). It covers two roles: we are the responsible party for organiser account data, and the operator (processor) for the attendee data organisers collect through the platform.

2. Information we process

  • Organiser accounts: name, email, role, organisation details, billing information.
  • Attendees (on behalf of organisers): name, email, ticket/registration details, custom form responses, check-in records.
  • Payments: processed by third-party gateways (PayFast, Paystack); we store order/invoice metadata, not full card details.
  • Technical: logs, IP address and usage data needed to operate and secure the Service.

3. How we use it

To provide the Service (registration, ticketing, check-in, badges, invoicing, notifications), to bill organisers, to secure the platform and prevent abuse, and to comply with legal obligations. Tenant data is isolated per organisation; we do not use one organiser's attendee data for another.

4. Sharing

We share personal information only with sub-processors needed to run the Service (hosting, email delivery, payment gateways), each bound to protect it, and where required by law. We do not sell personal information.

5. Security

We apply technical and organisational safeguards: strict per-tenant data isolation enforced in code and CI, encryption of sensitive secrets at rest, signed/expiring links for attendee actions, rate limiting on public endpoints, and an audit trail of sensitive actions.

6. Retention

We keep personal information for as long as the organiser's account is active and as needed for legal, accounting and audit purposes. On account deletion, data is exported (if requested), then deleted or anonymised.

7. Your rights under POPIA

You may request access to, correction of, or deletion of your personal information, and object to certain processing. Organiser administrators can export and delete their tenant's data directly in Settings → Data Privacy. Attendees should contact the organiser who collected their data; we assist organisers in fulfilling those requests.

8. Information Officer and complaints

Information Officer: [to be completed]. You may lodge a complaint with the Information Regulator (South Africa) if you believe your rights have been infringed.

9. Contact

Questions about this policy: contact us.