Privacy policy

EventU is operated by VDM Digital (Pty) Ltd ("we", "us"). We process your personal information in line with South Africa's Protection of Personal Information Act, 2013 ("POPIA").

What we collect

• Account details: name, email, phone, city.
• Ticket orders: attendee name, email, phone, payment references from Paystack, and order history.
• Marketing preferences and communications you've opted into.
• Device and usage data: IP address, browser, scan activity.
• Photos uploaded at events (gallery feature).

Why we process it

• Selling and delivering tickets.
• Operating event-day check-in and the gallery.
• Legal, tax, and fraud-prevention obligations.
• Marketing — only when you opt in.

Lawful basis

We rely on contract (ticket purchase), legitimate interest (fraud prevention, platform security), legal obligation (tax, POPIA), and consent (marketing).

How long we keep it

Transactional data is retained for seven years (SARS tax rules). Marketing preferences stay until you withdraw them. Uploaded photos can be removed on request via the gallery removal flow.

Your rights under POPIA

• Access — download a copy of your data.
• Correction — update inaccurate information via your account page.
• Deletion — request erasure. We anonymise transaction records we are legally required to keep.
• Objection — withdraw marketing consent anytime.

Manage access and erasure requests on your privacy dashboard.

Who we share with

• Paystack (payment processing — see their own privacy policy).
• Supabase (hosted database, EU region).
• The event organiser for events you attend (attendee manifest for check-in only).

Information Officer

Email privacy@eventu.co.za to reach our Information Officer. Complaints can also be lodged with the Information Regulator of South Africa.