Cazual Privacy Policy

1. Information We Collect

• Account Information – Name, email address, profile details, plan selection, and authentication credentials.
• Profile Content – Custom URLs, biographies, media, links, and products or services you publish.
• Transactional Information – Payment history, subscription records, PayFast credentials (encrypted), and invoices.
• Analytics and Usage Data – IP address, device information, referrers, engagement metrics, and aggregated statistics captured when you or visitors interact with a profile.
• Support & Communications – Messages, form submissions, audit logs, and issue reports created when you contact support or submit feedback.

We do not knowingly collect information from persons under 18. If you believe a minor has provided personal data, please contact privacy@cazual.co.za.

2. How We Use Personal Information

We process personal information to:

1. Create, secure, and maintain your account.
2. Deliver profile pages, analytics dashboards, and commerce or subscription features.
3. Process payments and fulfil transactions via PayFast or other local payment partners.
4. Provide customer support, respond to tickets, and monitor service quality.
5. Send transactional emails or required notices (e.g., password reset, billing, security alerts).
6. Analyse product performance, detect abuse or fraud, and maintain audit logs.
7. Comply with legal obligations, enforce our Terms, and protect the rights, property, or safety of users and the public.

We rely on lawful bases permitted under POPIA, including consent, contractual necessity, legal compliance, and legitimate interests.

3. How We Share Information

• Service Providers – Hosting (Vercel, Supabase), analytics, email, monitoring, and payment infrastructure providers under contract and subject to appropriate safeguards.
• Business Partners – PayFast or other regional payment integrations solely to process transactions initiated by you or your customers.
• Legal Requirements – Regulators, law enforcement, courts, or other third parties when required to comply with applicable law or to protect Cazual and its users.
• Corporate Events – In connection with a merger, sale, or acquisition, where permitted by law, and with notice to affected users.

We do not sell personal information or publish private account data without consent.

4. International Data Transfers

Although Cazual focuses on South African creators, some third-party providers process data in the EU or United States. Where required, we implement contractual safeguards (such as the EU Standard Contractual Clauses) and ensure service providers maintain adequate data protection standards.

5. Data Security

• TLS encryption for data in transit.
• Row-level security rules and least-privilege access controls.
• Encrypted storage for sensitive credentials (PayFast details, API keys).
• Rate limiting, audit logging, and continuous monitoring of suspicious activity.

No system is completely secure. Notify us immediately at security@cazual.co.za if you believe your account has been compromised.

6. Data Retention

We retain personal information for as long as necessary to provide the Platform, comply with legal requirements (including tax retention rules), resolve disputes, and enforce agreements. You may request deletion of your account; residual data (e.g., audit logs or aggregated analytics) may persist where legally permissible.

7. Your POPIA Rights

You may exercise the following rights, subject to verification:

• Access your personal information.
• Request corrections or updates.
• Object to certain processing activities.
• Request deletion where legally permissible.
• Withdraw consent at any time.

Submit requests to privacy@cazual.co.za. We may require proof of identity before processing a request.

8. Cookies & Tracking

We use cookies and similar technologies for session management, security, analytics, and feature personalisation. You can adjust browser settings to block cookies, but certain features may malfunction.

9. Third-Party Links

Profiles published on Cazual may contain third-party links, embedded content, or external commerce providers. Cazual is not responsible for the privacy practices of external websites. Review third-party privacy notices before interacting with them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the dashboard or email. Continued use after the effective date constitutes acceptance of the revised Policy.

11. Contact

Questions or complaints can be sent to:

Attn: Data Protection Officer
Cazual (Pty) Ltd
Email: privacy@cazual.co.za

If you believe we have not addressed your concern, you may lodge a complaint with the Information Regulator (South Africa) at complaints.IR@justice.gov.za.