Privacy Policy
The short version
- We collect only what you give us on the pre-registration form, to send you first access to Spring Fiesta 2027 tickets and tables.
- We only contact you because you ticked the consent box, and every message lets you opt out.
- We never sell or rent your information.
- You can ask to see, correct or delete your information at any time.
1. Who we are
Spring Fiesta is organised by Soul Candi Live (“we”, “us”), the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).
WOM Agency builds and runs this pre-registration website for us and acts as our operator: it processes your information only on our instructions and under a written agreement that requires it to keep your information secure and confidential.
Privacy questions and requests: privacy@sf2027.co.za
2. What we collect
| Information | Why we need it |
|---|---|
| First name and surname (surname optional) | To address you properly and personalise your confirmation. |
| Email address | To send you pre-sale access and Spring Fiesta updates, and to recognise you if you attended a previous Spring Fiesta (see section 4). |
| WhatsApp number (optional) | To send you pre-sale access and updates on WhatsApp. |
| City (optional) and ticket interest (GA, VIP, VVIP or VVIP Table) | To plan the right ticket and table release, and to make sure the right offers reach the right people. |
| How you found us (the link you arrived on) and a personal referral code | To see which channels work and to count friends who pre-register through your link. |
| Date and time of your pre-registration and your consent | To keep a record of your consent, as POPIA requires. |
We do not ask for your ID number, banking details, or any special personal information.
3. How we use your information
- To give you first access to Spring Fiesta 2027 tickets and VVIP tables before public sale.
- To send you Spring Fiesta news, pre-sale access and offers by email and WhatsApp (direct marketing). We do this only with your consent, which you give by ticking the box on the form.
- To show you how many friends have pre-registered through your personal link.
- To understand demand (for example, how many people want VVIP tables) so we can plan the event.
Our lawful basis is your consent (POPIA section 11(1)(a)) and, for direct marketing, section 69. You can withdraw your consent at any time (see section 8). Withdrawing does not affect anything we did lawfully before you withdrew.
4. Recognising past Spring Fiesta guests
If you bought or held a ticket to Spring Fiesta 2024, 2025 or 2026, we welcome you back when you pre-register. To do this, we keep a list of past ticket-holder email addresses in a scrambled, one-way coded form (a cryptographic hash), together with the years you attended and the highest ticket type you held. When you pre-register, we code the email you enter the same way and check whether it matches.
This list contains no names, phone numbers or readable email addresses, cannot be reversed back into a contact list, is not visible on this website, and is never used to send anyone marketing. It is used only for the welcome-back message and to understand how many past guests return.
5. Who we share it with
We do not sell, rent or trade your personal information. We share it only with service providers who help us run the pre-registration, each bound to protect it:
- WOM Agency: builds and manages the pre-registration and communications on our behalf.
- Supabase: secure database hosting, where your pre-registration is stored.
- Netlify: website hosting.
- Google Workspace: a private, access-controlled spreadsheet our team uses to manage pre-registrations and plan ticket and table releases.
- Google Fonts: loads the typeface on this page. Google receives your device’s IP address when the font loads, as with any website using Google Fonts.
- Our ticketing partner and messaging providers, when we send pre-sale access to you.
We may also disclose information where the law requires it.
6. Information stored outside South Africa
Our database (Supabase) is hosted in the United Kingdom, our website host (Netlify) serves this site from data centres worldwide, and our team spreadsheet is held in Google Workspace, which stores data in data centres outside South Africa. This means your personal information is transferred outside South Africa. We only use providers who are subject to data-protection laws or binding agreements that give a level of protection substantially similar to POPIA, as section 72 requires. By pre-registering, you also consent to this transfer.
7. How we keep it safe
- All traffic to this site is encrypted (HTTPS).
- The public website can only submit a pre-registration. It cannot read, change or list anyone’s information.
- Access to pre-registration data is restricted to a small number of authorised people and protected by a password.
- Past-guest emails are stored only as one-way codes (see section 4).
If we ever have reason to believe your information has been accessed by an unauthorised person, we will notify you and the Information Regulator as POPIA section 22 requires.
8. Your rights
Under POPIA you have the right to:
- Know whether we hold your personal information and get a copy of it.
- Correct information that is wrong or out of date.
- Delete your information.
- Object to us using it, and withdraw your consent to marketing at any time.
- Complain to the Information Regulator.
To unsubscribe, use the opt-out link in any email, reply STOP to any WhatsApp message, or email privacy@sf2027.co.za. For any other request, email us from the address you pre-registered with so we can confirm it’s you. We will respond within a reasonable time and in any event within 30 days.
9. How long we keep it
We keep your pre-registration until 31 December 2027 so we can run Spring Fiesta 2027 pre-sales and event communication, unless you ask us to delete it sooner or withdraw your consent, in which case we remove it from our marketing lists straight away. After that we delete it or anonymise it so it can no longer identify you. A record of your opt-out may be kept so we don’t contact you again.
10. Your device
We don’t use advertising or tracking cookies on this page. Your browser stores a small amount of information on your own device (your first name, your personal referral code and whether you attended before) so it can show your crew link when you come back. You can clear this at any time by clearing your browser’s site data. If we add analytics or advertising tools in future, we will update this policy first.
11. Age
Spring Fiesta is an 18+ event. This pre-registration is intended only for people aged 18 and over, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has pre-registered, contact us and we will delete their information.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top always shows the current version. If we make a significant change to how we use your information, we will tell you before it takes effect.
13. Contact and complaints
Spring Fiesta privacy: privacy@sf2027.co.za
If you are not satisfied with how we handle your information, you may complain to the Information Regulator (South Africa):
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Tel: 010 023 5200
Email: enquiries@inforegulator.org.za
Website: inforegulator.org.za