Who We Are
PartyLink (Pty) Ltd (“PartyLink”, “we”, “us”, “our”) is the responsible party under POPIA for personal information processed through this Platform. We are registered in the Republic of South Africa.
Our Information Officer is responsible for overseeing POPIA compliance. You may contact them at privacy@partylink.co.za.
What Personal Information We Collect
We collect personal information from you in the following ways:
How We Use Your Information
We process your personal information for the following purposes:
Account creation & management
Creating and maintaining your account, verifying your identity, and managing your preferences.
Bookings & transactions
Processing booking requests, confirming reservations, facilitating payments, and managing cancellations.
Communications
Sending booking confirmations, reminders, account notifications, and support responses.
Platform improvement
Analysing usage patterns (in anonymised form) to improve features, fix bugs, and enhance user experience.
Safety & fraud prevention
Detecting and preventing fraudulent, abusive, or unlawful activity.
Legal compliance
Meeting our obligations under POPIA, CPA, ECTA, and other applicable South African laws.
Dispute resolution
Reviewing evidence and facilitating resolution of booking disputes.
Marketing (with consent only)
Sending newsletters or promotional content about PartyLink services where you have opted in. You may unsubscribe at any time.
Legal Basis for Processing (POPIA)
Under POPIA, we rely on the following conditions for lawful processing:
Contractual necessity: Processing required to create your account, complete bookings, or deliver our service to you.
Legitimate interest: Analytics, fraud prevention, platform security, and service improvement — balanced against your privacy interests.
Consent: Marketing emails and optional analytics cookies. Consent may be withdrawn at any time.
Legal obligation: Retaining records as required by SARS, the Companies Act, or court orders.
Sharing & Disclosure
We may share your information in the following circumstances:
Between users: When a booking is confirmed, the Customer's event address and the Provider's service details are shared with the respective counterparty. Direct contact details (personal phone and email) remain masked.
Service providers: Third-party vendors who help us operate the Platform: payment processors (e.g. Peach Payments, Ozow), cloud hosting (e.g. Vercel, Supabase), and email delivery (e.g. Resend). These processors are contractually bound to protect your data.
Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users or the public.
Business transfers: In the event of a merger, acquisition, or sale of PartyLink, your information may be transferred. We will notify you before it becomes subject to a different privacy policy.
International Data Transfers
Some of our service providers may process data outside South Africa (e.g. cloud infrastructure in Europe or the United States). Where this occurs, we ensure appropriate safeguards are in place through:
- Standard contractual clauses approved by the Information Regulator
- Transfers only to countries with adequate data protection legislation
- Data processing agreements with all third-party processors
Your Rights Under POPIA
You have the following rights regarding your personal information. To exercise any right, email privacy@partylink.co.za or submit a Data Rights Request.
7.1Right of Access
You may request a copy of all personal information we hold about you. We will respond within 30 days.
7.2Right to Correction
If your information is inaccurate or incomplete, you may request correction at any time through your account or by contacting us.
7.3Right to Erasure
You may request deletion of your personal information. We will comply unless retention is required by law or for legitimate business purposes.
7.4Right to Object
You may object to the processing of your information for direct marketing at any time.
7.5Right to Portability
You may request your personal data in a structured, machine-readable format to transfer to another service.
7.6Right to Restriction
You may request that we restrict processing of your data in specific circumstances, such as when you contest its accuracy.
7.7Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
We will respond to all rights requests within 30 days. If we cannot fulfil a request, we will explain why.
Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve the Platform. Below is a full list of cookies we use:
| Cookie Name | Type | Purpose | Consent? | Retention |
|---|---|---|---|---|
| partylink-session | Essential | Keeps you signed in | Essential | Session |
| partylink-theme | Preference | Remembers light/dark theme choice | Required | 12 months |
| partylink-cookie-consent | Essential | Stores your cookie preferences | Essential | 12 months |
| _pl_analytics | Analytics | Page views and feature usage (anon) | Required | 6 months |
| _pl_search | Preference | Remembers recent search filters | Required | 30 days |
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
Security Measures
We implement reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, disclosure, and destruction. These include:
- TLS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Role-based access control for staff
- Regular security audits and penetration testing
- Secure session management with HttpOnly, Secure, SameSite cookies
- Input validation and injection prevention across all endpoints
Children's Privacy
The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.
If you believe a minor has registered on the Platform, please contact us at privacy@partylink.co.za.
Third-Party Links
The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to read the privacy policies of any third-party services you access through our Platform.
Data Breach Notification
In the event of a data breach that poses a risk to the rights of data subjects, PartyLink will:
- Notify affected users as soon as reasonably practicable
- Report the breach to the Information Regulator of South Africa within 72 hours
- Provide details of the breach, the likely consequences, and the measures taken or proposed to address it
Changes to This Policy
14.1 We may update this Privacy Policy from time to time. Material changes will be communicated by email to your registered address and/or by a prominent notice on the Platform at least 14 days before they take effect.
14.2 The “Last Updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.
Contact & Complaints
For any privacy-related queries, access requests, or complaints, contact our Information Officer:
PartyLink Information Officer
Information Regulator of South Africa
If we cannot resolve your complaint, you have the right to lodge it with the Information Regulator:
Important Notice
This Privacy Policy has been drafted for informational purposes and should be reviewed by a qualified South African attorney and a POPIA-certified Information Officer before publication, to ensure full compliance with all applicable regulations.
© 2026 PartyLink (Pty) Ltd · South Africa · Terms & Conditions · Home