Privacy Policy

Effective Date: 01 April 2026

This Privacy Policy explains how HeyCreativ ("we", "us", or "our") collects, uses, processes, stores, and protects personal information in accordance with the Protection of Personal Information Act.

By accessing or using the HeyCreativ platform, website, or services, you agree to the terms of this Privacy Policy.

1. Responsible Party

HeyCreativ is the Responsible Party as defined in POPIA and is responsible for determining the purpose and means of processing personal information.

2. Personal Information We Collect

We may collect and process the following categories of personal information:

2.1 Personal Details

  • Full name and surname
  • Identity number or passport number (where required)
  • Date of birth

2.2 Contact Information

  • Email address
  • Phone number
  • Physical or billing address

2.3 Account & Profile Information

  • Username and password
  • Profile details and portfolio content (images, videos, descriptions)
  • Business or service information (for creatives)

2.4 Transaction Information

  • Booking details
  • Invoices and billing records
  • Transaction history

2.5 Payment Information

We collect payment-related information necessary to process transactions, including:

  • Billing name and address
  • Transaction amounts and payment records
  • Payment method type (e.g., card, EFT)

Important: HeyCreativ does not store full card details, such as full card numbers, CVV, or PINs.

All payments are processed through secure third-party payment providers that comply with industry standards such as PCI-DSS.

2.6 Technical & Usage Information

  • IP address
  • Device type and browser information
  • Platform usage data and interaction history

3. How We Collect Information

We collect personal information in the following ways:

  • Directly from you when you register or use the platform
  • When you make or receive bookings
  • Through communication (email, messages, support queries)
  • Automatically via cookies and tracking technologies

4. Purpose of Processing

We process personal information for specific, lawful purposes, including:

  • Creating and managing user accounts
  • Facilitating bookings between customers and creatives
  • Processing payments and issuing invoices
  • Providing customer support and communication
  • Improving platform functionality and user experience
  • Ensuring platform safety and preventing fraud
  • Complying with legal and regulatory obligations

5. Legal Basis for Processing (POPIA Conditions)

We process personal information in accordance with POPIA based on:

  • Your consent
  • The necessity to perform a contract
  • Compliance with legal obligations
  • Our legitimate interests in operating and improving HeyCreativ

6. Sharing of Personal Information

We may share personal information with:

  • Customers and creatives to enable bookings
  • Third-party payment service providers for secure transactions
  • Service providers (hosting, analytics, communication tools)
  • Regulatory or law enforcement authorities where required

We do not sell personal information to third parties.

All third parties are required to process personal information securely and in compliance with POPIA.

7. International Data Transfers

Where personal information is transferred outside South Africa, we will ensure that:

  • the recipient is subject to adequate data protection laws, or
  • appropriate agreements are in place, or
  • you have provided consent

8. Data Security

We implement appropriate technical and organisational measures to safeguard personal information, including:

  • Encryption of sensitive data
  • Secure payment gateways
  • Access control and authentication systems
  • Regular monitoring and system updates

All transactions are processed via secure encrypted connections (SSL/TLS).

9. Payment Security & Liability

HeyCreativ takes reasonable steps to ensure secure payment processing. However:

  • Payments are handled by third-party providers, and HeyCreativ does not control their systems
  • Users are responsible for maintaining the security of their own devices and credentials
  • HeyCreativ will not be liable for unauthorised access resulting from user negligence or third-party system breaches, except where required by law

10. Data Retention

We retain personal information only for as long as necessary to:

  • fulfil the purposes outlined in this policy
  • comply with legal, tax, and regulatory requirements
  • resolve disputes and enforce agreements

11. Your Rights Under POPIA

In accordance with POPIA, you have the right to:

  • Access your personal information
  • Correct or update your information
  • Request deletion of your personal information
  • Object to processing of your information
  • Withdraw consent at any time
  • Lodge a complaint with the Information Regulator

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Improve user experience
  • Analyse platform performance
  • Store user preferences

You may manage or disable cookies through your browser settings.

13. Direct Marketing

We may send marketing communications where you have consented.

You may opt out at any time by:

  • Clicking the unsubscribe link in communications
  • Contacting us directly

14. Children's Personal Information

HeyCreativ does not knowingly collect personal information from individuals under 18 without parental or guardian consent.

15. Data Breach Notification

In the event of a data breach, HeyCreativ will:

  • Notify affected users as soon as reasonably possible
  • Report the breach to the Information Regulator where required

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on the platform and will take effect upon publication.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at hello@heycreativ.com