Privacy Policy

• Account: your email address, and the one-time sign-in codes we send to it, which expire after 10 minutes.
• Sign-in sessions: a session cookie, plus the IP address and browser type of each session, to keep you signed in and spot misuse.
• Your preferences: the categories, areas, music and budget you pick, events you save, venues you follow, and your WhatsApp number if you choose to give it.
• Payments: Cape Summer receives a record of what you bought, the amount, the date, whether it succeeded and a payment reference. Your card details are entered on our payment provider's secure page; we never see or store them.
• Venues: if you register a venue, the business name, contact name, email, phone and social links you give us.
• Security: short-lived technical records used to protect accounts from misuse.

The event listings themselves come from businesses' public posts and websites. We do not collect personal information about the public from social media, and we do not use your information to train AI.

• To create your account, sign you in and keep it secure.
• To give pass holders the full calendar and personalise My Summer.
• To process and confirm payments, issue refunds and keep the records the law requires.
• To answer you when you contact us, and to send messages about your account or pass.
• To send alerts, if and when you switch them on. We will not send marketing without your consent, and every message will let you opt out.

We rely on performing our contract with you, our legitimate interest in running a secure service, our legal obligations, and your consent where we ask for it.

We do not sell your information. We share only what a service provider needs to do its job for us:

• a registered South African payment provider, to process card payments
• hosting, database and email providers that run the site and send your sign-in codes

Some of these providers store information outside South Africa. We only use providers bound by agreements and data protection laws that give your information protection comparable to POPIA. We may also disclose information where the law requires it.

• Account and preferences: while your account is open, then deleted within 30 days of you closing it.
• Payment records: 5 years, as tax law requires.
• Sign-in codes: 10 minutes. Security records: kept briefly, then overwritten.
• Venue registrations: while the venue is listed, or 12 months after a declined application.

We use industry-standard safeguards, including encrypted connections and restricted access, to protect your information. No system is perfectly secure. If a breach puts your information at risk, we will tell you and the Information Regulator as POPIA requires.

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies. Your browser may also remember small conveniences, such as your last filter, on your device only.

You can ask us to:

• tell you what information we hold about you and give you a copy
• correct or update it
• delete it, or close your account
• stop using it for a particular purpose, or withdraw consent you gave

Email connectme@data-inc.co.za and we will respond within 30 days. If you are not satisfied, you may complain to the Information Regulator (South Africa) at inforeg.org.za.

Our Information Officer handles privacy requests and complaints. Contact them at connectme@data-inc.co.za, marked "Privacy", or at the physical address below.

Cape Summer accounts are for adults. We do not knowingly collect information from anyone under 18; parents and guardians can use their own account to plan family outings.

We will update this policy when what we do changes. The date at the top shows the latest version, and we will email account holders about significant changes.