Who We Are
PartyLink (“PartyLink”, “we”, “us”, “our”) is the responsible party under POPIA for personal information processed through this Platform. PartyLink is operated from the Republic of South Africa and is currently run as an independent, unincorporated venture.
Our Information Officer is responsible for overseeing POPIA compliance. You may contact them at partylinknoreply@gmail.com.
What Personal Information We Collect
We collect personal information from you in the following ways:
How We Use Your Information
We process your personal information for the following purposes:
Account creation & management
Creating and maintaining your account, verifying your identity, and managing your preferences.
Bookings & transactions
Processing booking requests, confirming reservations, facilitating payments, and managing cancellations.
Communications
Sending booking confirmations, reminders, account notifications, and support responses.
Platform improvement
Analysing usage patterns (in anonymised form) to improve features, fix bugs, and enhance user experience.
Safety & fraud prevention
Detecting and preventing fraudulent, abusive, or unlawful activity.
Legal compliance
Meeting our obligations under POPIA, CPA, ECTA, and other applicable South African laws.
Dispute resolution
Reviewing evidence and facilitating resolution of booking disputes.
Marketing (with consent only)
Sending newsletters or promotional content about PartyLink services where you have opted in. You may unsubscribe at any time.
Legal Basis for Processing (POPIA)
Under POPIA, we rely on the following conditions for lawful processing:
Contractual necessity: Processing required to create your account, complete bookings, or deliver our service to you.
Legitimate interest: Analytics, fraud prevention, platform security, and service improvement — balanced against your privacy interests.
Consent: Marketing emails and optional analytics cookies. Consent may be withdrawn at any time.
Legal obligation: Retaining records as required by South African tax and record-keeping law, or by a court order.
Sharing & Disclosure
We may share your information in the following circumstances:
Between users: When a booking is confirmed, the Customer's event address and the Provider's service details are shared with the respective counterparty. Direct contact details (personal phone and email) remain masked.
Service providers: Third-party vendors who help us operate the Platform. We currently use Vercel (application hosting) and Supabase (database, authentication, and transactional email such as sign-up confirmations). Online card payments are not yet enabled; when they are, a secure third-party payment processor will be added here and this Policy updated before it goes live. All such processors are bound to protect your data and may only use it to provide their service to us.
Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users or the public.
Business transfers: In the event of a merger, acquisition, or sale of PartyLink, your information may be transferred. We will notify you before it becomes subject to a different privacy policy.
International Data Transfers
Some of our service providers may process data outside South Africa (e.g. cloud infrastructure in Europe or the United States). Where this occurs, we ensure appropriate safeguards are in place through:
- Standard contractual clauses approved by the Information Regulator
- Transfers only to countries with adequate data protection legislation
- Data processing agreements with all third-party processors
Your Rights Under POPIA
You have the following rights regarding your personal information. To exercise any right, email partylinknoreply@gmail.com or submit a Data Rights Request.
7.1Right of Access
You may request a copy of all personal information we hold about you. We will respond within 30 days.
7.2Right to Correction
If your information is inaccurate or incomplete, you may request correction at any time through your account or by contacting us.
7.3Right to Erasure
You may request deletion of your personal information. We will comply unless retention is required by law or for legitimate business purposes.
7.4Right to Object
You may object to the processing of your information for direct marketing at any time.
7.5Right to Portability
You may request your personal data in a structured, machine-readable format to transfer to another service.
7.6Right to Restriction
You may request that we restrict processing of your data in specific circumstances, such as when you contest its accuracy.
7.7Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
We will respond to all rights requests within 30 days. If we cannot fulfil a request, we will explain why.
Cookies & Tracking Technologies
We use a small number of cookies and similar browser storage technologies to operate and improve the Platform. Below is a complete list of what we store on your device:
| Name | Stored as | Type | Purpose | Consent? | Retention |
|---|---|---|---|---|---|
| sb-…-auth-token | Cookie | Essential | Keeps you signed in (Supabase Auth session token) | Essential | Until you sign out or the session expires |
| partylink-cookie-consent | Local storage | Essential | Remembers the cookie choice you made below | Essential | Until you clear it |
| partylink-theme | Local storage | Preference | Remembers your light/dark theme choice | Required | Until you clear it |
| _ga, _ga_* | Cookie | Analytics | Google Analytics — aggregate page views and feature usage. Only set if you accept analytics. | Required | Up to 2 years (Google default) |
_ga cookies are created. Essential items cannot be switched off because the Platform cannot function without them.The
sb-…-auth-token cookie name includes an identifier for our Supabase project. Items marked “Local storage” are held in your browser's local storage rather than as cookies; they never leave your device and are not transmitted to us.Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
Security Measures
We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, disclosure, and destruction. These include:
- TLS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Role-based access control for staff
- Regular security audits and penetration testing
- Secure session management with HttpOnly, Secure, SameSite cookies
- Input validation and injection prevention across all endpoints
Children's Privacy
The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.
If you believe a minor has registered on the Platform, please contact us at partylinknoreply@gmail.com.
Third-Party Links
The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to read the privacy policies of any third-party services you access through our Platform.
Data Breach Notification
In the event of a data breach that poses a risk to the rights of data subjects, PartyLink will:
- Notify affected users as soon as reasonably practicable
- Report the breach to the Information Regulator of South Africa within 72 hours
- Provide details of the breach, the likely consequences, and the measures taken or proposed to address it
Changes to This Policy
14.1 We may update this Privacy Policy from time to time. Material changes will be communicated by email to your registered address and/or by a prominent notice on the Platform at least 14 days before they take effect.
14.2 The “Last Updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.
Contact & Complaints
For any privacy-related queries, access requests, or complaints, contact our Information Officer:
PartyLink Information Officer
Information Regulator of South Africa
If we cannot resolve your complaint, you have the right to lodge it with the Information Regulator:
© 2026 PartyLink · South Africa · Terms & Conditions · Home