POPIA Privacy Policy
Protection of Personal Information Act Compliance
Last Updated: May 27, 2026 | This page is our Privacy Policy for the My Gig Guide website and mobile app (including Google Play). It complies with South Africa's Protection of Personal Information Act (POPIA), 2013.
1 Introduction
My Gig Guide ("we," "our," or "us") is committed to protecting your personal information in accordance with South Africa's Protection of Personal Information Act (POPIA), 2013. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.mygigguide.co.za), our mobile apps, and related services.
By using our website or apps, you consent to the collection and use of your personal information as described in this policy. If you do not agree, please do not use our services.
2 Information We Collect
2.1 Personal Information
- Account information: Name, username, email address, and password (stored in hashed form). Phone number or profile picture only if you provide them.
- Event and listing information: Events you post or edit, favourites, ratings and reviews, and related preferences.
- Artist / venue / organiser pages: Business or stage details and claim requests when you manage a page on the platform.
- Communications: Messages you send via our contact form or support channels.
2.2 Website technical information
- IP address, browser type, device information, and operating system
- Website usage data, including pages visited and general interaction patterns
- Cookies and similar technologies (see section 9)
2.3 Mobile app information
When you use the My Gig Guide or white-label apps (e.g. Rogues on Radio), we may also collect:
- Sign-in data: Your account credentials or secure API token so the app can load your profile, favourites, and events you post.
- Location (optional): If you enable location permission, we use it for features such as “Gigs near me” and map distance. You can deny or revoke this in your device settings.
- Photos you choose: Poster and gallery images when you add an event, stored on our servers and shown on public event listings.
- Poster “Read image” (optional): If you tap Read image, the poster (and any description text you typed) is sent to our servers. We process it with automated tools (including a third-party AI service) to suggest event fields. Do not use this feature on images containing personal data you do not want processed.
- Device / app data: App version, flavour (brand), and standard diagnostic data needed to run the app and API.
- Push notifications (when enabled): Device tokens via Google Firebase Cloud Messaging / related services.
2.4 Information we do not require
We do not require date of birth to use the platform. We do not sell tickets or process card payments through the app today; if paid features are added later, this policy will be updated.
3 How We Use Your Information
- Service provision: To run the event discovery platform, mobile apps, and API (listings, search, maps, favourites, posting gigs)
- Personalisation: To remember preferences (e.g. filters, saved events) and improve your experience
- Communication: To respond to enquiries and send important service notices
- Automated poster assistance: To suggest event fields when you choose Read image in the app
- Security and abuse prevention: To protect accounts and platform integrity
- Legal compliance: To comply with applicable laws and lawful requests
4 Legal Basis for Processing (POPIA Compliance)
Under POPIA, we process your personal information based on the following lawful grounds:
- Consent: When you explicitly agree to the processing of your personal information
- Contract Performance: To fulfill our contractual obligations to provide services
- Legitimate Interest: To improve our services, prevent fraud, and maintain platform security
- Legal Obligation: To comply with applicable South African laws and regulations
- Vital Interest: To protect your life, health, or physical integrity in emergency situations
5 Information Sharing and Disclosure
We may share your personal information in the following circumstances:
- Event organisers and page owners: When you post or claim listings, relevant details appear on public event, artist, or venue pages
- Service providers: Hosting, email delivery, maps (Google), authentication and push messaging (Google Firebase), and automated poster processing (Groq via our secure server). These providers process data only to perform services for us.
- Legal requirements: When required by law, court order, or to protect rights and safety
- Business transfers: In connection with a merger, acquisition, or asset sale (with notice where required)
- With your consent: For any other purpose you explicitly agree to
Note: We never sell your personal information to third parties for marketing purposes.
6 Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- SSL encryption for data transmission
- Secure servers and databases with access controls
- Regular security audits and vulnerability assessments
- Staff training on data protection and privacy
- Incident response procedures for data breaches
7 Your Rights Under POPIA
You have the following rights regarding your personal information:
Access & Portability
Request access to your personal information and receive it in a portable format
Correction
Request correction of inaccurate or incomplete personal information
Deletion
Request deletion of your personal information in certain circumstances
Objection
Object to processing based on legitimate interests or for marketing purposes
To exercise your rights: Email privacy@mygigguide.co.za or contact us.
8 Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Account information: Until you delete your account or request deletion
- Event listings and uploads: While the listing is published and for a reasonable period afterward for backups and legal compliance
- Poster processing: Temporary processing of images for Read image; not kept longer than needed to return suggested fields
- Support and contact records: As long as needed to resolve your enquiry
9 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for basic website functionality and security
Analytics Cookies
Help us understand how you use our website
Preference Cookies
Remember your settings and preferences
You can manage cookie preferences through your browser settings or our cookie consent banner.
10 Children's Privacy
Our services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
12 Contact Information
Privacy contact
Email: privacy@mygigguide.co.za
General support: dave@mygigguide.co.za
Contact form: www.mygigguide.co.za/contact
Operator
My Gig Guide — operated with Kayise IT
Website: www.mygigguide.co.za
Response time: We aim to respond to privacy enquiries within 48 hours.
Complaints: If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za or visit www.justice.gov.za/inforeg/