The small print
Privacy
What we collect, why, and what you can ask us to do with it. Written to comply with South Africa's Protection of Personal Information Act (POPIA).
Who is responsible
The Social-Lus is operated by The Social-Lus (legal entity to be confirmed), Knysna, Western Cape, South Africa. Contact: hello@sociallus.co.za.
Our Information Officer is Jaclyn Jordan. Send any privacy question or request to hello@sociallus.co.za.
What we collect
- When you buy tickets: your name, email address and mobile number, what you bought, and whether each ticket was used at the door.
- When you apply to become a member: your business name, your name, email, mobile number, town, and what you tell us about your business.
- If you are a member or staff member with a login: your name, email, a scrambled (hashed) copy of your password, and a record of sign-ins and changes you make.
- Member profiles: the business details, photos and links a member chooses to publish. These are public.
We do not collect card or bank details. Payments are made on PayFast's own page, and we only receive confirmation that you paid.
Why we use it
- To sell you tickets, send them to you, and let you in at the door.
- To review membership applications and run the member directory.
- To keep accounts secure and investigate misuse.
- To keep the financial records the law requires.
We do not sell your information, and we do not use it for marketing unless you have separately agreed to hear from us.
Who else sees it
- PayFast processes payments and receives your name and email with the order.
- Our hosting provider stores the website, its database and our email on servers in South Africa.
- Door staff at an event see the ticket type and whether it has been used. They do not see your contact details.
Cookies and your device
We do not use advertising or tracking cookies. Members and staff who log in get one cookie that keeps them signed in. Your tickets are saved in your own browser so they open without signal; clearing your browser data removes that copy, and the link in your confirmation email brings them back.
How long we keep it
- Paid and refunded orders: at least five years, as tax law requires.
- Checkouts that were never paid: deleted after 30 days.
- Declined membership applications: deleted after 12 months.
- Sign-in and activity records: deleted after two years.
How we protect it
The site is served over an encrypted connection. Passwords are stored hashed, never in readable form. Uploaded photos have location data removed. Access to orders and applications is limited to the Hub's own staff accounts.
Your rights
You can ask us what information we hold about you, ask us to correct or delete it, or object to how we use it. Email hello@sociallus.co.za and we will respond within a reasonable time. Some records must be kept by law even if you ask for deletion.
If you are not satisfied with our answer, you may complain to the Information Regulator of South Africa at inforegulator.org.za.
Children
Tickets must be bought by an adult. We do not knowingly collect information from children.
Last updated October 2026. See also: Privacy · Terms · Refunds