Privacy Policy

Effective date: 14 September 2026

This Privacy Policy explains how Content Slots (Pty) Ltd (registration number 2026/735484/07) ("Content Slots", "we", "us") collects, uses, shares and protects personal information when you use the Content Slots app or website. We are the Responsible Party under the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Information we collect

Depending on how you use the Platform, we collect:

• Account details: name, email address, mobile number, password (stored in encrypted form), and profile photo.
• Provider details: business name, description, category, location or address, photographs, pricing, availability, and bank account details for payouts.
• Booking details: what you booked, dates, times, amounts paid, messages exchanged with the other party, and reviews.
• Payment information: PayFast processes card and payment details. We receive confirmation of payment, the amount, and a transaction reference. We do not receive or store full card numbers.
• Device and usage data: device type, operating system, app version, IP address, crash reports and how you move through the app.
• Location: only if you allow the app to use your location, to show nearby spaces and providers.
• Communications: emails and messages you send to hello@contentslots.com or through the Platform.

2. How we use it

We use personal information to:

• Create and manage your account and verify your identity.
• Show listings, check availability, process bookings and payments, and pay Providers.
• Send booking confirmations, reminders, receipts and service messages by email, SMS or push notification.
• Enable Clients and Providers to communicate about a booking and to leave reviews.
• Generate a credit block naming the Providers on a completed booking.
• Detect fraud, enforce our Terms, and resolve disputes.
• Improve the Platform, fix errors, and understand how it is used.
• Send marketing about Content Slots, where you have agreed to receive it. You can opt out at any time.
• Comply with legal obligations, including tax and record keeping.

3. Legal basis

Under POPIA we process personal information because it is necessary to perform our contract with you, because we have a legitimate interest in running and protecting the Platform, because the law requires it, or because you have consented (for example, to location access or marketing).

4. Who we share it with

• The other party to a booking: a Provider sees the Client's name, contact details and booking details; a Client sees the Provider's business details and location.
• Service providers that run the Platform for us: Supabase (database and authentication, hosted in the European Union), Resend (email delivery), PayFast (payments), Expo and Apple or Google (app distribution and push notifications), and Cloudflare (domain and security).
• Professional advisers, auditors and insurers where needed.
• Law enforcement, regulators or courts where required by law.
• A buyer or successor if Content Slots is sold or restructured, subject to this policy.

We do not sell personal information.

5. Transfers outside South Africa

Some of our service providers store data outside South Africa, mainly in the European Union and the United States. Where this happens we rely on the provider's contractual commitments to protect the data to a standard at least equal to POPIA, as required by section 72 of POPIA.

6. How long we keep it

We keep account information for as long as your account is open and for up to 12 months after closure. Booking and payment records are kept for 5 years to meet tax and legal requirements. Messages and reviews are kept while the related listing or account exists. Usage data is kept in aggregated form.

7. Security

We protect personal information with encryption in transit and at rest, access controls, and secure authentication. Only staff and contractors who need access to do their job have it. No system is completely secure, and we will notify you and the Information Regulator of any breach that is likely to cause harm, as POPIA requires.

8. Your rights

You have the right to:

• Ask what personal information we hold about you and receive a copy.
• Ask us to correct or delete information that is inaccurate, out of date or no longer needed.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent where processing is based on consent.
• Complain to the Information Regulator of South Africa (inforeg.org.za, complaints.IR@justice.gov.za).

To exercise these rights email hello@contentslots.com. We will respond within 30 days. You can also delete your account from within the app; some records will be retained as described in section 6.

9. Children

The Platform is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

10. Cookies and analytics

Our website uses essential cookies to keep the site working and, with your consent, analytics cookies to understand traffic. The app uses crash reporting and usage analytics. You can control these through your device or browser settings.

11. Changes to this policy

We may update this policy. We will notify registered users of material changes by email or in the app before they take effect.

12. Contact and Information Officer

Our Information Officer is Ratile Mabitsela, Director. Contact: hello@contentslots.com. Registered address: 75 Century Boulevard, Riversands Outlet Park, Knopjeslaagte, Johannesburg, Gauteng, 2156.