POPIA Policy

Candibean Entertainment (“Candibean”, “we”, “our”, “us”) respects your right to privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act (POPIA). This policy explains how we collect, use, store, share, and protect your personal information.

1. Purpose

The purpose of this policy is to:

  • Explain how Candibean processes personal information.
  • Ensure compliance with POPIA.
  • Inform users of their rights and how they can exercise them.

2. Scope

This policy applies to all users, subscribers, and visitors using the Candibean website, mobile app, and WhatsApp service. It covers all personal information processed by Candibean and its authorised service providers.

3. Personal Information We Collect

We collect and process personal information needed to deliver our services effectively, including:

  • Full name, contact number, and email address.
  • Payment details for subscription management.
  • Subscription plan and ticket claim history.
  • Communication records through WhatsApp and support channels.
  • Technical information such as device type, IP address, and app usage.

4. Purpose of Collection

We collect and process personal information to:

  • Register and manage user subscriptions.
  • Deliver tickets and related services.
  • Communicate with users regarding their accounts or events.
  • Improve our products and user experience.
  • Meet legal and regulatory obligations.

5. Consent

By using Candibean services, you consent to the collection and processing of your personal information as outlined in this policy. You may withdraw your consent at any time by contacting support@candibean.co.za, subject to legal and contractual restrictions.

6. Protection of Personal Information

Candibean applies security measures to safeguard personal data, including:

  • Secure databases and encrypted data storage.
  • Access controls for employees and service providers.
  • Regular monitoring and updates to protect against breaches.

7. Sharing of Information

We do not sell your personal information. We share information only with:

  • Payment processors for billing purposes.
  • Ticket vendors and event partners to fulfill claims.
  • Legal authorities when required by law.
  • Our staff or contractors who need access to perform their duties.

8. Retention of Information

We retain personal information only for as long as necessary for business, legal, or regulatory reasons. Once retention periods expire, data is securely deleted or anonymised.

9. Your Rights Under POPIA

You have the right to:

  • Request access to the personal information we hold about you.
  • Ask for corrections or updates to your information.
  • Object to the processing of your personal information.
  • Request the deletion of personal information when lawful and practical.
  • Withdraw consent for marketing communications.
  • Lodge a complaint with the Information Regulator.

Information Regulator (South Africa)
Website: https://www.justice.gov.za/inforeg/
Email: complaints.IR@justice.gov.za

10. Data Breaches

If a data breach occurs, Candibean will:

  • Notify affected users as soon as possible.
  • Inform the Information Regulator as required by POPIA.
  • Take immediate steps to contain and investigate the breach.

11. Policy Updates

We may update this POPIA Policy periodically to reflect changes in the law or our practices. Updates will be published on our website with a new effective date.

12. Contact Us

For POPIA-related queries or requests, contact: