Privacy Policy

1. Information Officer

Our Information Officer can be reached at pinktagsummit@gmail.com. All POPIA-related requests should be directed there in writing.

2. What we collect

• Account & registration data: name, email, phone, password hash, role, organisation.
• Ticket data: ticket tier, order details, badge code, attendee names for group purchases.
• Payment data: processed by Paystack — we do not store your full card number; we receive only a tokenised reference and last four digits.
• Application data: for speakers, sponsors, exhibitors, founders, media — bios, photos, decks, talk titles, links, and any optional fields you submit.
• On-site data: badge scans for entry and session check-in.
• Imagery: event photography and video may capture you as an attendee (see Section 8).
• Technical data: IP address, browser, device, language, referrer, pages viewed, error logs.

3. Lawful basis and purpose

We process personal information on the following lawful grounds under POPIA:

• Contract: to issue tickets, process payments, deliver the summit, and provide the PWA.
• Consent: where you opt in (e.g. analytics cookies, marketing emails, peer-directory visibility).
• Legitimate interest: security, fraud prevention, service improvement, internal analytics.
• Legal obligation: compliance with tax, accounting, and regulatory requirements.

4. Sharing your information

We share personal information with the following categories of operators only as necessary:

• Paystack — payment processing.
• Lovable Cloud — hosting, database, file storage.
• Google — Sign-in with Google (optional), web fonts.
• Transactional email provider — order confirmations, password resets, event communications.
• Professional advisers — auditors, lawyers, accountants, where required.
• Authorities — when required by law or to protect rights, safety, or property.

We do not sell your personal information.

5. International transfer

Some operators (notably Lovable Cloud, Google, and our email provider) may process data outside South Africa. We ensure such transfers are subject to adequate contractual safeguards as required by Section 72 of POPIA.

6. Retention

We retain personal information only as long as necessary for the purposes for which it was collected, plus any period required by law. Account data is retained while your account is active and for 5 years thereafter for tax and audit purposes. Failed application data is deleted within 12 months unless you request earlier deletion.

7. Your rights under POPIA

You have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of inaccurate or unlawfully held data.
• Object to processing on legitimate-interest grounds.
• Withdraw consent for any processing based on consent.
• Lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

8. Photography, video, and recording

By attending PinkTag, you acknowledge that the event is photographed and recorded. PinkTag retains the right to use your likeness in event recordings and marketing materials. If you do not wish to be photographed, please notify a steward at the venue and avoid front-of-stage and on-camera areas. Press and attendee photography in shared areas is the responsibility of the photographer.

9. Children

The service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

10. Security

We use industry-standard measures including TLS in transit, role-based access control, server-side authorisation, hashed passwords, and audit logs. No system is perfectly secure; you use the service at your own risk.

11. Changes

We may update this Policy. The "Last updated" date will reflect the most recent version. Material changes will be notified via email or in-app notice where reasonable.

12. Contact

Information Officer: pinktagsummit@gmail.com.