Privacy Policy

1. Introduction

KwaZwai Entertainment ("we", "us", "our") respects your privacy and is committed to protecting the personal information of all users, event attendees, venue partners, and client promoters ("Data Subjects"). This policy outlines how we collect, store, process, and safeguard your data in compliance with South Africa's Protection of Personal Information Act (POPIA).

2. Personal Information We Collect

Depending on your interaction with our site (such as requesting an RSVP, purchasing event tickets, booking talent, or submitting an inquiry), we may collect the following information:

• Identity & Contact Data: Full name, preferred name for ticket display, company/promoter name, email address, phone number, and physical venue address.
• RSVP & Ticket Data: Event selection, RSVP status, ticket code and check-in status for RSVP and admission management.
• Transaction & Booking Data: Event dates, ticket quantity, performance package selections, technical rider specifications, and invoicing records.
• Payment Data: Payment status and references generated through PayFast. Note: We do not store full credit card numbers or banking PINs on our servers.
• Technical & Analytics Data: IP addresses, browser types, and cookie session metrics gathered to improve site performance.

3. Purpose & Lawful Basis of Processing

We process your personal information strictly for legitimate business functions, including:

• Executing artist booking contracts and issuing event performance schedules.
• Processing deposit transactions and sending invoice confirmations.
• Confirming RSVPs, issuing admission tickets, and preventing a ticket code from being used more than once (e.g., Sdumane's House).
• Complying with South African legal, tax, and accounting requirements.

4. Third-Party Sharing

We do not sell, rent, or trade your personal information. We only share data with trusted third-party operators (Data Processors) bound by contract to uphold POPIA compliance:

• PayFast (Netcash Group): Payment processing engine for secure checkout.
• Vercel Inc.: Cloud hosting infrastructure and serverless execution.
• Google Firebase / Cloud Firestore: Restricted server-side storage of RSVP, ticket, and payment-status records.
• Resend: Delivery of RSVP confirmations and ticket emails.
• Legal & Regulatory Authorities: When required by South African law or legal process.

5. Data Security & Retention

We use HTTPS, deny direct browser access to Firestore records, and restrict operational access to authorized KwaZwai personnel. Ticket check-in changes a valid ticket to used so it cannot be admitted a second time. Personal data is retained only as long as needed for event operations and applicable legal or accounting requirements, after which it is securely deleted.

6. Your Rights Under POPIA

As a Data Subject, you hold the following statutory rights:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction or updating of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when processing is no longer authorized.
• Right to Object: Object to direct marketing communications at any time.

7. Contacting Our Information Officer

To exercise any of your data rights or for inquiries regarding our privacy standards, please reach out to our desk: