1. Introduction

VinePass ("we", "our", "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website (vinepass.co.za) and services.

This policy is in compliance with the Protection of Personal Information Act (POPIA) of South Africa. By using VinePass, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of personal information:

• Account Information: Name, email address, and password when you create an account.
• Purchase Information: Name, email, and ticket details when you purchase tickets.
• Event Organiser Information: Name, email, event details, and payment information for payouts.
• Usage Data: Browser type, IP address, pages visited, and access times collected automatically.
• Cookies: Authentication tokens stored in secure, HTTP-only cookies to maintain your session.

3. How We Use Your Information

We use your personal information to:

• Process ticket purchases and send confirmation emails.
• Manage your account and provide customer support.
• Communicate with you about events, updates, and promotions (with your consent).
• Enable event organisers to manage their events and track sales.
• Improve our website, services, and user experience.
• Comply with legal obligations and prevent fraud.

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Event Organisers: Your name and email may be shared with the organiser of events you purchase tickets for, solely for event management purposes.
• Payment Providers: PayFast and Stripe process your payment securely. We do not store full payment details.
• Email Service Providers: We use third-party email services to send you ticket confirmations and communications.
• Law Enforcement: We may disclose information if required by law or in response to valid legal requests.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encrypted password storage using industry-standard hashing algorithms.
• Secure, HTTP-only cookies for authentication.
• HTTPS encryption for all data transmission.
• Rate limiting to prevent abuse and unauthorised access attempts.
• Input validation and sanitisation to prevent injection attacks.
• Regular security monitoring and updates.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law, for legitimate business purposes, or to resolve disputes. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access your personal information held by us.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to the processing of your personal information.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at info@vinepass.co.za.

8. Cookies

VinePass uses essential cookies to maintain your authentication session. These cookies are necessary for the platform to function and cannot be opted out of. We do not use advertising or tracking cookies. Your cookie preferences are respected, and no third-party cookies are placed on your device through our platform.

9. Third-Party Links

Our website may contain links to third-party websites or services, such as payment providers and event organiser websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

VinePass is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of VinePass after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us: