[{"data":1,"prerenderedAt":8},["ShallowReactive",2],{"legal-privacy":3},{"versionId":4,"slug":5,"label":6,"html":7},"privacy-v2","privacy","Privacy Policy","\u003Ch1>Privacy Policy\u003C\u002Fh1>\n\u003Cp>\u003Cstrong>Version:\u003C\u002Fstrong> privacy-v2 · \u003Cstrong>Jurisdiction:\u003C\u002Fstrong> South Africa · \u003Cstrong>Locale:\u003C\u002Fstrong> en-ZA · \u003Cstrong>Last updated:\u003C\u002Fstrong> 22 August 2026 · \u003Cstrong>Effective:\u003C\u002Fstrong> 22 August 2026\u003C\u002Fp>\n\u003Cp>This Privacy Policy explains how WhatAnEvent collects, uses, shares, stores, and protects personal information when you use the WhatAnEvent website, organiser dashboard, participant application flows, ticket checkout, ticket delivery, and gate-scanning services (together, the \u003Cstrong>Platform\u003C\u002Fstrong>).\u003C\u002Fp>\n\u003Ch2>1. Who we are and when this policy applies\u003C\u002Fh2>\n\u003Cp>WhatAnEvent (Pty) Ltd ("WhatAnEvent", "we", "us", or "our") operates the Platform in South Africa.\u003C\u002Fp>\n\u003Cp>Event organisers use the Platform to run their own events. Depending on the activity, WhatAnEvent and an organiser may each determine why and how personal information is used, or WhatAnEvent may process information on an organiser's instructions. If your question concerns an organiser's own use of your information, we may refer you to that organiser.\u003C\u002Fp>\n\u003Cp>This policy applies to host users, organiser team members, participants and applicants, ticket buyers and holders, scanner users, website visitors, and people who contact us. It does not replace an organiser's event-specific notices, participation waiver, rules, or venue terms.\u003C\u002Fp>\n\u003Ch2>2. Personal information we collect\u003C\u002Fh2>\n\u003Cp>We collect information you provide directly, information generated through your use of the Platform, and limited technical information collected automatically.\u003C\u002Fp>\n\u003Ch3>2.1 Accounts and organiser operations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Name, email address, password credential in protected form, profile image where supplied, and email-verification details.\u003C\u002Fli>\n\u003Cli>Organisation name, team membership, role, invitations, and access permissions.\u003C\u002Fli>\n\u003Cli>Event details, venue information, ticket types, event content, programme or lineup information, tasks, comments, and operational notes.\u003C\u002Fli>\n\u003Cli>Payment-settlement identifiers supplied by organisers, such as a PayFast merchant identifier. We do not ask organisers to provide card details through the Platform.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>2.2 Participants and applicants\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Name, phone number, email address, social-media handle, and profile photograph where supplied.\u003C\u002Fli>\n\u003Cli>Application details and event- or activity-specific profile information, such as experience, affiliation, division, category, weight, or competition record where relevant to the event.\u003C\u002Fli>\n\u003Cli>Application status, review notes, lineup or manifest assignments, and communications about the application.\u003C\u002Fli>\n\u003Cli>Records showing which waiver, ruleset, communications notice, or promotional consent version was accepted, together with the date, IP address, and browser or device information used to record that acceptance.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Some event-specific information may be sensitive or special personal information under applicable law. Organisers must only request information reasonably needed to operate their event. Where the Platform asks for consent, you may withhold optional consent without losing access to unrelated services.\u003C\u002Fp>\n\u003Ch3>2.3 Ticket buyers, holders, and attendees\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Buyer name, phone number, email address, communication preference, order reference, ticket type, quantity, price, payment status, refund status, and ticket-delivery history.\u003C\u002Fli>\n\u003Cli>Payment-provider references and webhook records needed to reconcile a transaction. Payments are processed by PayFast; WhatAnEvent does not store your payment-card number or security code.\u003C\u002Fli>\n\u003Cli>QR-ticket identifiers and gate check-in records, including the event, scan result, time, and scanner user where applicable.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>2.4 Communications, support, and audit records\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WhatsApp and email destination details, delivery status, provider message identifiers, and operational message history.\u003C\u002Fli>\n\u003Cli>Information you provide when asking for support, reporting a problem, requesting a refund, or responding to an organiser.\u003C\u002Fli>\n\u003Cli>Security and audit records showing significant account, payment, messaging, permission, refund, override, and check-in actions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>2.5 Technical information\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>IP address, browser or device type, user agent, session identifiers, request identifiers, timestamps, pages or API routes requested, and diagnostic or error information.\u003C\u002Fli>\n\u003Cli>Authentication cookies and similar browser storage that are necessary to sign you in, maintain a secure session, remember essential preferences, and protect the Platform.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We do not currently use third-party advertising cookies or sell personal information for advertising.\u003C\u002Fp>\n\u003Ch2>3. How we collect information\u003C\u002Fh2>\n\u003Cp>We collect personal information when you create an account, join an organisation, create or manage an event, apply to participate, buy or receive a ticket, scan a ticket, upload content, communicate through the Platform, or contact support.\u003C\u002Fp>\n\u003Cp>We also receive information from organisers and authorised team members, payment and messaging providers, email-delivery providers, storage and hosting providers, and security or error-monitoring services when they support a Platform transaction or operation.\u003C\u002Fp>\n\u003Cp>If you provide another person's information, for example when inviting a team member or buying a ticket for someone else, you must be authorised to do so and must give them any notice required by law.\u003C\u002Fp>\n\u003Ch2>4. Why we use personal information\u003C\u002Fh2>\n\u003Cp>We use personal information to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create and secure accounts, verify identity or email ownership, and manage roles and permissions.\u003C\u002Fli>\n\u003Cli>Let organisers create, publish, and operate events.\u003C\u002Fli>\n\u003Cli>Receive, review, and administer participant applications, waivers, rulesets, and lineups.\u003C\u002Fli>\n\u003Cli>Create orders, process and reconcile payments, issue QR tickets, deliver tickets and event updates, manage refunds, and prevent duplicate or fraudulent transactions.\u003C\u002Fli>\n\u003Cli>Validate tickets and keep an auditable gate check-in record.\u003C\u002Fli>\n\u003Cli>Provide support, investigate errors, recover failed deliveries, resolve disputes, and enforce Platform rules.\u003C\u002Fli>\n\u003Cli>Maintain security, monitor reliability, keep audit logs, prevent abuse, and improve Platform performance and usability.\u003C\u002Fli>\n\u003Cli>Meet legal, accounting, tax, regulatory, and law-enforcement obligations.\u003C\u002Fli>\n\u003Cli>Send promotional communications or make profiles publicly discoverable only where the relevant person has given the required optional consent or another lawful justification applies.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Under the Protection of Personal Information Act 4 of 2013 (\u003Cstrong>POPIA\u003C\u002Fstrong>), our justification for processing will depend on the context. It may include your consent, performance of a contract, compliance with a legal obligation, protection of a legitimate interest, or our legitimate interest in safely operating and improving the Platform. You may withdraw consent for future processing where consent is the justification, although this does not affect processing that was already lawful or information we must retain.\u003C\u002Fp>\n\u003Ch2>5. When we share personal information\u003C\u002Fh2>\n\u003Cp>We share personal information only where reasonably necessary for the purposes described above, including with:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>The relevant event organiser and authorised team members\u003C\u002Fstrong>, so they can administer their event, applications, ticket orders, refunds, communications, and entry controls.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PayFast and related payment participants\u003C\u002Fstrong>, to initiate, verify, reconcile, or refund payments and respond to disputes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Twilio and email-delivery providers\u003C\u002Fstrong>, to send WhatsApp messages, ticket links, verification messages, password resets, and operational emails.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cloud hosting, database, and object-storage providers\u003C\u002Fstrong>, to run the Platform and store records and uploaded files.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security, diagnostics, mapping, and reliability providers\u003C\u002Fstrong>, where configured and needed to protect, troubleshoot, or operate the Platform.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Professional advisers, insurers, auditors, regulators, courts, and law-enforcement authorities\u003C\u002Fstrong>, where reasonably necessary or required by law.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>A successor or prospective purchaser\u003C\u002Fstrong>, if all or part of the Platform business is reorganised, merged, financed, or sold, subject to appropriate confidentiality and data-protection safeguards.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our service providers may only process information for the services they provide to us or as otherwise permitted by law. We do not sell or rent personal information to third parties for their own marketing.\u003C\u002Fp>\n\u003Cp>Public event pages may display event information and, where the relevant settings and permissions allow it, participant names, profile photographs, attributes, or lineup information. Contact details are not intended to appear on public participant profiles.\u003C\u002Fp>\n\u003Ch2>6. Cross-border processing\u003C\u002Fh2>\n\u003Cp>Some service providers may store or process personal information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use providers and arrangements that support appropriate protection in accordance with applicable law. The destination country's laws may differ from South African law.\u003C\u002Fp>\n\u003Ch2>7. Retention and deletion\u003C\u002Fh2>\n\u003Cp>We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to provide the Platform, to preserve consent and audit evidence, to resolve disputes, and to meet legal, accounting, tax, fraud-prevention, and regulatory obligations.\u003C\u002Fp>\n\u003Cp>Retention varies by record. Account and organisation records are generally kept while the account or organisation is active. Event, order, payment, refund, consent, communication, audit, and check-in records may need to be kept after an event or account closes. Temporary verification and session records expire or are removed according to their operational purpose. Uploaded files are deleted or made inaccessible when no longer required, subject to backups and lawful retention needs.\u003C\u002Fp>\n\u003Cp>When information is no longer required, we delete, de-identify, or securely isolate it. Backup copies may remain for a limited period before being overwritten through normal backup cycles.\u003C\u002Fp>\n\u003Ch2>8. Security\u003C\u002Fh2>\n\u003Cp>We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration, or disclosure. These include access controls, protected credentials, encrypted network connections, scoped roles, audit logging for important actions, and restricted ticket tokens.\u003C\u002Fp>\n\u003Cp>No internet service is completely secure. You are responsible for using a strong, unique password, protecting your device and account, and notifying us promptly if you suspect unauthorised access.\u003C\u002Fp>\n\u003Ch2>9. Your choices and rights\u003C\u002Fh2>\n\u003Cp>Subject to POPIA and other applicable law, you may ask us to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Confirm whether we hold personal information about you and provide access to it.\u003C\u002Fli>\n\u003Cli>Correct or update inaccurate or incomplete information.\u003C\u002Fli>\n\u003Cli>Delete or destroy information that we are no longer authorised or required to keep.\u003C\u002Fli>\n\u003Cli>Object to certain processing or request that processing be restricted where the law allows.\u003C\u002Fli>\n\u003Cli>Withdraw consent for future processing where we rely on consent.\u003C\u002Fli>\n\u003Cli>Stop direct marketing. Operational messages needed for an application, order, ticket, security, or event change are not direct marketing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To make a request, contact \u003Ca href=\"mailto:privacy@whatanevent.app\" class=\"legal-link\">privacy@whatanevent.app\u003C\u002Fa>. We may need to verify your identity and may ask the relevant organiser to assist where the request concerns information that organiser controls. Some rights are subject to lawful exceptions.\u003C\u002Fp>\n\u003Cp>You may also lodge a complaint with the Information Regulator (South Africa). Current complaint channels and forms are available at \u003Ca href=\"https:\u002F\u002Finforegulator.org.za\u002F\" class=\"legal-link\">inforegulator.org.za\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch2>10. Children\u003C\u002Fh2>\n\u003Cp>Host accounts and ticket purchases are intended for people who can lawfully enter into the relevant agreement. Events may permit participants or attendees under 18, but only where the organiser's rules and applicable law allow it.\u003C\u002Fp>\n\u003Cp>Where personal information about a child is submitted, the organiser and the person submitting it are responsible for obtaining consent from a competent person or establishing another lawful basis where required. WhatAnEvent may require guardian involvement, restrict processing, or remove information if appropriate consent or authority cannot be shown.\u003C\u002Fp>\n\u003Ch2>11. Communications\u003C\u002Fh2>\n\u003Cp>We use the contact details you provide to deliver account notices, application decisions, tickets, payment or refund updates, security messages, and material event changes. WhatsApp and email delivery may involve the relevant communication provider processing your contact details and message metadata.\u003C\u002Fp>\n\u003Cp>Optional promotional communications and broader promotional use are governed by the consent presented when you opt in. You may withdraw an optional messaging consent using the method stated in the message or by contacting us. Withdrawing optional consent does not prevent essential service messages that are permitted by law and necessary to complete an existing transaction or protect your account.\u003C\u002Fp>\n\u003Ch2>12. Third-party services and links\u003C\u002Fh2>\n\u003Cp>The Platform may link to payment providers, wallet providers, maps, organiser sites, venue information, social networks, or other third-party services. Their privacy practices are governed by their own notices. We are not responsible for third-party sites or services that we do not control.\u003C\u002Fp>\n\u003Ch2>13. Changes to this policy\u003C\u002Fh2>\n\u003Cp>We may update this Privacy Policy when the Platform, our providers, or applicable requirements change. We will publish the updated version and effective date. If a change is material, we will take reasonable steps to bring it to the attention of affected users and request fresh acknowledgement or consent where required.\u003C\u002Fp>\n\u003Ch2>14. Contact us\u003C\u002Fh2>\n\u003Cp>For privacy questions, requests, or concerns, contact our Information Officer at \u003Ca href=\"mailto:privacy@whatanevent.app\" class=\"legal-link\">privacy@whatanevent.app\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For ticket, refund, or general support, contact \u003Ca href=\"mailto:support@whatanevent.app\" class=\"legal-link\">support@whatanevent.app\u003C\u002Fa>.\u003C\u002Fp>",1791468694693]