CONTENT SLOTS

Privacy Policy

Effective 2 October 2026. Version 1.1.

The short version

  • We collect only what we need to run your bookings, pay providers, keep the Platform safe and meet the law.
  • We never sell your personal information.
  • Card details are handled by Paystack. We never see or store your full card number.
  • We send marketing only if you opt in, and you can opt out at any time.
  • You can ask to see, correct or delete your information by emailing hello@contentslots.com.

About this policy

This Privacy Policy explains how Content Slots (Pty) Ltd ("Content Slots", "we", "us") collects and uses personal information when you use contentslots.com, the Content Slots app and related services (the "Platform"). We are the responsible party for this information under the Protection of Personal Information Act 4 of 2013 ("POPIA").

Content Slots (Pty) Ltd
Registration number 2026/735484/07

75 Century Boulevard, Riversands Outlet Park, Midrand, 1682

Email: hello@contentslots.com
Website: contentslots.com

Our Information Officer

Content Slots has an appointed Information Officer. You can contact our Information Officer about anything in this policy at hello@contentslots.com with the subject line "Privacy".

What we collect

TypeExamplesFrom
Account detailsName, email address, mobile number, password (stored encrypted), profile photo, business nameYou
Booking detailsServices booked, dates, times, number of guests, extras, what you are creating, messages with providersYou and providers
Payment recordsAmounts, payment status, transaction references and the last four digits of a card. Full card details stay with PaystackYou and Paystack
Provider verificationIdentity document, company registration documents, proof of bank account, tax and VAT numbers, portfolio, premises photographsProviders
Reviews and supportRatings, reviews, complaints, emails and call notesYou
Technical informationDevice type, browser, IP address, app version, pages viewed, crash reportsYour device

We do not ask for special personal information, such as health, religious or biometric information. Please do not include it in messages or reviews.

How we use it and why

PurposeLawful basis under POPIA
Creating your account, taking bookings, sending confirmations and day before remindersNeeded to perform our contract with you
Processing payments, refunds and provider payoutsContract and legal obligation
Verifying providers and preventing fraud, abuse and unsafe conductOur legitimate interest and yours in a safe marketplace
Handling complaints and disputesContract and legitimate interest
Keeping tax and accounting recordsLegal obligation
Improving the Platform and fixing problemsLegitimate interest
Sending news, offers and recommendationsYour consent, which you may withdraw at any time

Who we share it with

We share personal information only where needed, and only with parties bound to protect it:

  • The other side of your booking. Providers see your name, booking details and contact details for the booking. Clients see a provider's business name, profile, address for the booking and contact route.
  • Paystack, our payment processor, to process payments and refunds and to pay providers their share of each booking.
  • Our banks, to make provider payouts and refunds.
  • Service providers who host and run the Platform, including Supabase (database and authentication), Cloudflare (website hosting and security) and Google (email).
  • Professional advisers, such as our accountants, auditors and attorneys.
  • Authorities, such as the South African Revenue Service, the Financial Intelligence Centre or the police, where the law requires it or to protect someone's safety.
  • A buyer or investor, if Content Slots is sold or restructured, under the same privacy protections.

We never sell or rent personal information.

Information stored outside South Africa

Some of our service providers store information outside South Africa. Our database is hosted in the European Union, which has data protection law at least as strong as POPIA. Where information is processed in other countries, we rely on the provider's binding contractual commitments to protect it, as permitted by section 72 of POPIA.

How long we keep it

  • Account and booking information: while your account is active and for five years after it closes.
  • Payment and accounting records: five years, as tax law requires.
  • Provider verification documents: five years after the provider leaves the Platform.
  • Marketing preferences: until you opt out, after which we keep only a record of your opt out.
  • Technical logs: up to 12 months.

After these periods we delete or anonymise the information.

How we protect it

We use encryption in transit, encrypted password storage, access controls limited to people who need the information, and reputable hosting partners. If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as POPIA requires.

Marketing

We send marketing only if you have opted in, or if you are an existing client and we are telling you about similar services, in line with section 69 of POPIA. Every marketing message has an unsubscribe link, and you may also opt out by emailing us. Booking confirmations, reminders and receipts are not marketing and will still be sent.

Cookies

We use essential cookies and similar technology to keep you signed in, remember your preferences and keep the Platform secure. If we use analytics cookies, we will ask for your consent first and you can change your choice at any time.

Your rights

Under POPIA you may:

  • ask whether we hold your personal information and request a copy;
  • ask us to correct or delete information that is inaccurate, out of date or no longer needed;
  • object to processing based on our legitimate interests, and withdraw consent at any time;
  • object to direct marketing;
  • complain to the Information Regulator.

Email hello@contentslots.com with the subject line "Privacy". We will respond within 30 days and may ask you to confirm your identity first. We may keep information we are legally required to keep.

Children

The Platform is for people aged 18 and over. We do not knowingly collect information from children. Where a parent or guardian books a service for a child, the parent or guardian provides and is responsible for the child's information.

The Information Regulator

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You may also complain to the Information Regulator of South Africa at inforegulator.org.za.

Changes to this policy

We will publish any update on this page with a new effective date and notify you of material changes by email or in the app.