PRIVACY
POLICY

Our House is the responsible party for personal information processed through this website and our booking system, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA). Our physical address is Bridge Street, South End, Gqeberha, 6001, Eastern Cape, South Africa.

You can reach our Information Officer at hello@thisisourhouse.co.za. All POPIA-related queries and subject access requests must be directed to this address.

Information you give us directly

• Name, email address, and phone number when buying tickets or making a reservation
• Payment details processed securely via our payment provider — we do not store card numbers
• Marketing consent preference (explicit opt-in only)
• Name and email when you contact us via our website form

Information we collect automatically

• Browser type, device type, and operating system
• Pages visited and time spent on the site (analytics)
• IP address and approximate location (city-level)
• Referral source (how you found us)

Sensitive information

We do not intentionally collect special personal information (race, health, biometrics, religious beliefs, etc.) and ask that you do not submit any such information through our website.

We process your personal information only for the following specific, lawful purposes:

• Processing your order — to issue tickets, confirm reservations, and send booking confirmations
• Customer service — to respond to queries, cancellations, and disputes
• Marketing — to send event announcements and promotions, only if you have explicitly opted in
• Legal obligations — to comply with applicable South African law, including the ECT Act and Liquor Act
• Site analytics — to understand how our site is used and improve it (aggregated, not profiling)
• Fraud prevention and security

We will never sell, rent, or trade your personal information with third parties for their marketing purposes.

We share personal information only where necessary to deliver our services or where required by law. Recipients include:

• Payment processors — to authorise transactions (subject to their own PCI-DSS and privacy obligations)
• Email delivery providers — to send booking confirmations and marketing emails you have opted into
• Analytics providers — aggregate, anonymised usage data only
• Law enforcement or regulators — if required by a lawful court order or statutory obligation

All third-party service providers we use are required to keep your information confidential and may only use it for the purpose for which it was shared.

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Ticketing and reservation records — 36 months from the event date, after which name, email, and contact details are deleted and only anonymised aggregate data is kept
• Financial transaction records — 5 years, as required by the SA Revenue Service
• Marketing preferences — until you withdraw consent or unsubscribe, whichever comes first
• Contact form enquiries — 12 months, unless the matter requires longer retention

We take reasonable technical and organisational steps to protect your personal information against loss, damage, unauthorised access, or disclosure. These include encrypted data transmission (HTTPS), access controls, and use of reputable third-party payment processors.

No method of electronic storage or transmission is 100% secure. If we become aware of a data breach that is likely to affect you, we will notify you and the Information Regulator as required under POPIA.

Our website uses cookies — small text files stored on your device — for the following purposes:

• Strictly necessary — session management, security tokens, and checkout state. These cannot be disabled without breaking core functionality.
• Analytics — anonymised page-view data to understand how the site is used. No personal profiling.

You can control or delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site or buy tickets.

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to our legal retention obligations
• Objection — object to the processing of your personal information on reasonable grounds
• Withdraw consent — withdraw marketing consent at any time by clicking unsubscribe in any email or contacting us
• Complaint — lodge a complaint with the Information Regulator if you believe we have processed your information unlawfully

To exercise any of these rights, email hello@thisisourhouse.co.za with the subject line “POPIA Request”. We will respond within 30 days.

If you are not satisfied with how we handle your personal information or a POPIA request, you may lodge a complaint with the Information Regulator of South Africa:

We may update this policy from time to time to reflect changes in our services or legal obligations. The effective date at the top of this page will always show when the policy was last revised. Continued use of our website after a change constitutes acceptance of the updated policy.