Legal

Privacy Policy

Last updated: 1 January 2025POPIA compliantGDPR-aligned

Your privacy matters to us. This policy explains what personal information we collect, why we collect it, and how we use, store, and protect it — in plain language.

1. Who we are

Ticksit (Pty) Ltd ("Ticksit", "we", "us", "our") operates the platform available at ticksit.co.za. We are a company registered in the Republic of South Africa and are subject to the Protection of Personal Information Act, 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act, 25 of 2002 (ECTA).

As your Information Officer under POPIA, our registered representative can be contacted at legal@ticksit.co.za. We are committed to treating your personal information with respect and transparency.

2. What information we collect

Account information: When you create an account we collect your name, email address, and a securely hashed password. Business details such as your company name, trading name, and contact number may also be collected.

Usage data: We collect information about how you interact with the platform — pages visited, features used, actions taken, and session duration. This data is aggregated and used to improve the product experience.

Event and contact data: Attendee lists, email marketing contacts, and social account handles you upload or generate within the platform remain your data at all times. We act as an operator processing this data on your behalf.

Payment information: Payment card details are processed exclusively by our PCI DSS-compliant payment providers (PayFast and Peach Payments) and are never stored on Ticksit servers.

Device and technical data: IP addresses, browser type, operating system, and device identifiers may be collected for security and diagnostic purposes.

3. How we use your information

To provide, maintain, and improve the Ticksit platform and its five modules (Events, Mail, Social, Pulse, Flow).

To communicate with you about your account, product updates, billing, and support requests.

To send transactional emails (receipts, event confirmations, booking alerts). Marketing emails are only sent with your explicit consent and can be withdrawn at any time.

To detect and prevent fraud, abuse, and security incidents.

To comply with our legal obligations under South African law, including POPIA, ECTA, and the Consumer Protection Act 68 of 2008.

We do not sell your personal information to third parties. We do not use your data to train AI models or for advertising purposes beyond what is described in this policy.

4. Data storage and security

Your data is stored on AWS infrastructure in the Africa (Cape Town) region (af-south-1). We keep your data within South Africa by default and do not transfer personal information outside the Republic without your explicit consent or a lawful basis under section 72 of POPIA.

We apply industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ encryption in transit, role-based access controls, and regular security reviews.

Where we engage sub-processors (cloud hosting, payment processing, analytics), each is bound by a data processing agreement requiring equivalent levels of protection.

5. Your rights under POPIA

Under POPIA you have the right to: (a) request access to your personal information; (b) request correction of inaccurate information; (c) request deletion of your personal information where no lawful basis exists for retention; (d) object to the processing of your information; and (e) withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.

To exercise any of these rights, email us at legal@ticksit.co.za. We will acknowledge your request within 3 business days and respond substantively within 30 days as required by POPIA.

GDPR note: If you access Ticksit from the European Economic Area, we extend equivalent GDPR-aligned rights including data portability and the right to erasure under Article 17 of the GDPR.

6. Cookies

We use essential cookies to keep you authenticated and remember your preferences, and analytics cookies to understand platform usage. We use Plausible Analytics, a cookieless, privacy-first tool that does not track individuals across sites.

See our full Cookie Policy for a breakdown of each cookie category.

7. Changes to this policy

We may update this policy to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes via email and an in-app notice at least 14 days before they take effect.

The version date at the top of this page indicates when it was last updated. Archived versions are available on request.

Questions about this policy?

Email our Information Officer at legal@ticksit.co.za. You may also contact the Information Regulator of South Africa at justice.gov.za/inforeg. Ticksit (Pty) Ltd is a company registered in South Africa.