Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Account and identity details — name, surname, known-as name, username, email address, date of birth, gender, and where required for verification, identity document type and number.
• Contact details — email, phone number(s), WhatsApp number, social media handles, and an optional physical address (used, among other things, to show you item providers near you).
• Saved delivery addresses — optional addresses you save to your profile (label, street address, city, province, postal code, country, and a contact phone number) to reuse at merchandise checkout, to prefill a venue address when creating an event, and to book a provider call-out appointment at your address.
• Business details — company name, registration number, VAT registration status, and VAT number for providers and business leads. Your VAT status at the time of a sale is recorded on the resulting order and invoice.
• Financial details — banking details you provide for payouts, your platform account balances, and transaction records. Card details are captured and processed by our payment gateway; we never see or store your full card number. A PDF invoice or receipt is generated for a paid order or booking (your name, contact details, and order/booking details) and emailed to you; you can also download it again later from the order's page on the dashboard.
• Transaction and listing data — events, tickets, bookings, rentals, equipment listings, vendor stall bookings, policies, reviews and ratings, and related communications. For artist bookings this includes booking requests, quotes (fees, deposit terms, and payment deadlines), acceptance or rejection reasons, agreements, and payment and refund records.
• Artist profile content — stage name, bio, artist types, profile and background images, portfolio and media links, your booking agreement, and collaboration (split sheet) records including revenue split percentages.
• Verification documents — for example proof of venue ownership.
• Images — profile pictures, background images, event posters, and equipment photos.
• Technical data — login records, session cookies, and basic usage information needed to run and secure the platform.
• Bot-protection signals — when you log in, register, reset your password, or submit the demo-request form, Google reCAPTCHA analyses your device and interaction behaviour to produce a bot/human risk score. We only receive that score (and whether it passed our threshold), not your browsing history. See "Google reCAPTCHA" under section 3.

2. How We Use It

• To create and manage your account, roles, and profile.
• To operate the marketplace: publishing listings, processing ticket sales, bookings and rentals, allocating equipment, and managing returns, damage, and late-return charges.
• To process payments, calculate platform commission, manage provider balances, and make and record payouts (including proof of payment).
• To run the artist booking process: delivering booking requests and quotes between organizers and artists, enforcing response and payment deadlines, processing deposit and balance payments, and processing deposit refunds where the quoted refund terms allow.
• To display VAT-inclusive pricing and include your VAT number on invoices where you are VAT registered.
• To verify identity and ownership where the platform requires it (for example venue owners).
• To display provider information to customers — for example your username, company name, ratings, and policies on your listings.
• To show you relevant content, such as item providers near your provided address.
• To send you service communications: booking confirmations, payment results, meeting invitations, and important account or policy updates.
• To manage business leads you submit to us or that our team captures when you enquire about our services, including sending relevant updates or promotional messages about our services by email or WhatsApp — you may ask us to stop these at any time (see "Your Rights" below).
• To keep the platform secure, prevent fraud, and comply with legal obligations (including tax and financial record-keeping).

We process personal information on the lawful bases of performing our contract with you, compliance with legal obligations, our legitimate interests in running a safe marketplace, and your consent where POPIA requires it.

3. Who We Share It With

• Other users, as needed for a transaction — for example a renter sees a lessor's public profile and policies; a lessor sees the renter's name, contact details, and delivery address for a booking; a service provider sees your call-out address when you book an appointment at your own location instead of theirs.
• Payment gateway (Yoco) — to process card payments and refunds.
• Courier Guy — where an artist offers Courier Guy delivery, your delivery address and order details (weight/dimensions of what you bought) are sent to Courier Guy to get a live delivery quote at checkout.
• Google — if you sign in with Google, or where our team schedules meetings with you via Google Calendar/Meet (your email is used to invite you).
• Google reCAPTCHA — our login, registration, forgot-password, and demo-request forms are protected by Google reCAPTCHA, which processes device and interaction signals to tell human visitors from bots. This use is subject to Google's own Privacy Policy and Terms of Service.
• WhatsApp (Meta) — where you interact with the platform through WhatsApp, those messages are processed by Meta under their terms.
• Service providers — hosting and infrastructure providers who process data on our behalf under appropriate safeguards.
• Authorities — where the law requires it or to protect rights, safety, or property.

We do not sell your personal information.

4. What Is Public

Your public profile as a provider (username, profile image, company name where applicable, listings, ratings, and published policies) is visible to anyone browsing the platform. If you make your artist profile public, your stage name, bio, artist types, photos, portfolio links, completed-show count, and upcoming performances at published events are also publicly visible; you can switch the profile back to private at any time. Your legal name, contact details, addresses, identity numbers, VAT number (other than on invoices issued for your sales), and banking details are not shown publicly.

When you leave a review after a completed purchase or booking, your display name and any comment you write are shown publicly on that listing or provider's page alongside your star rating — this applies even if your own profile is otherwise private.

5. Security

We take reasonable, appropriate technical and organisational measures to protect personal information, including encrypted storage of sensitive tokens, hashed passwords, access controls on administrative functions, and encrypted connections (HTTPS). No system is perfectly secure; if a breach affecting your information occurs, we will notify you and the Information Regulator as POPIA requires.

If you enable optional two-factor authentication, your authenticator secret and one-time recovery codes are stored encrypted and are never shown again after setup (recovery codes are shown once, at the time they're generated). Root, Sire, Manager, and Admin accounts are required to have two-factor authentication enabled to access administrative functions.

6. Retention

We keep personal information for as long as your account is active and thereafter only as long as needed for the purposes above — in particular financial and transaction records, which we retain for the periods required by South African tax and company law. Deleted records are first deactivated (soft-deleted) before being purged in the ordinary course.

7. Your Rights

Under POPIA you may:

• ask what personal information we hold about you and request access to it;
• ask us to correct or complete inaccurate information (most details you can edit yourself under Profile → Contacts);
• ask us to delete information we are not required to keep;
• object to processing based on our legitimate interests, including opting out of promotional emails or WhatsApp messages by telling us at the contact details below;
• withdraw consent where processing is based on consent;
• complain to the Information Regulator (South Africa) — inforegulator.org.za.

8. Cookies

We use cookies that are necessary for the platform to work — session cookies that keep you signed in, security (CSRF) cookies, and Google reCAPTCHA cookies that protect our login, registration, password-reset, and demo-request forms from automated abuse — and Google Analytics cookies to understand how the platform is used. We do not use third-party advertising or retargeting cookies, and we do not sell data collected through cookies. See our Cookie Policy for details.

9. Children

The platform is not directed at children, and transacting requires you to be at least 18. We do not knowingly process children's personal information without a competent person's consent.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on the platform and the "Last updated" date above will change.