Privacy and data rights

Privacy policy

This policy explains what EventBookr collects, why we use it, the services that help us operate, and the choices available to you.

1. Who this policy covers

This policy applies to visitors, members, advertisers and people who contact a business through EventBookr in South Africa or the United States. EventBookr is responsible for the platform information described here. A listed business is separately responsible for how it uses information it receives to answer an enquiry or provide a service.

2. Information we collect

We collect account details such as name, email address, password credentials in protected form, market and security/session records. We also process listing content, business contact details, images, enquiries, messages, quotes, saved listings, support requests and account notifications. Billing records include the selected plan, amount, currency, provider references and payment status; EventBookr does not store complete payment-card numbers.

We collect limited technical and activity information needed to secure the service, diagnose problems, prevent duplicate activity and understand directory performance. This can include IP-derived request information, device or browser details, timestamps, page or listing interactions and error records.

3. Why we use information

We use personal information to create and secure accounts; publish and moderate listings; deliver enquiries, messages and quotes; provide support; process and reconcile subscriptions; prevent fraud or abuse; send service and billing notices; improve search and directory quality; comply with legal obligations; and establish or defend legal claims.

Depending on the activity and applicable law, we rely on performance of our agreement with you, consent, legitimate operational interests and legal obligations. You may withdraw optional consent at any time without affecting processing already carried out lawfully.

4. Services that process information for us

EventBookr uses carefully selected providers to operate V2: Vercel for website delivery, Heroku for the application API, MongoDB Atlas for application data, ImageKit for listing media, Resend for transactional email, Google Places for business-place lookup, Google Analytics for consent-based website measurement, Microsoft Clarity for consent-based usability analytics and session replay, PayFast for South African billing and Stripe for United States billing. These providers process only the information required for their role and may process it in countries other than yours under their contractual and security safeguards.

We may also disclose information when legally required, to protect people or the platform, or as part of a business reorganisation subject to appropriate confidentiality. EventBookr does not sell personal information or provide it to third parties for their independent direct marketing.

5. Retention

Active account, listing and communication records are kept while needed to provide the service. Security and diagnostic logs are normally kept for up to 90 days. Closed support and privacy-request records are normally kept for five years so decisions and communications can be evidenced. Transaction, tax, payment and related audit records may be retained for up to seven years, or longer when required by law or an active dispute. Deleted public media is removed from active use and queued for provider deletion; encrypted backups age out under the applicable provider backup cycle.

A deletion request does not erase information that EventBookr must keep for tax, payment, fraud-prevention, safety, dispute or legal reasons. We restrict retained information to those purposes and remove or de-identify it when the retention need ends.

6. Your choices and rights

You can correct profile and listing information in your account. Subject to applicable law, you may ask to access, export, correct or delete personal information; object to or restrict some processing; withdraw consent; or complain to the South African Information Regulator or the relevant United States authority. We verify identity before releasing or deleting account information and may ask for additional information if a request presents a security risk.

Members can start an export or deletion request in the account privacy centre. Anyone can contact us through EventBookr support.

7. Security and children

We use access controls, encrypted connections, protected credentials, signed market context, audit records and provider safeguards. No online service can promise absolute security, so please use a unique password and report suspicious activity promptly. EventBookr is not intended for children under 18 and we do not knowingly create accounts for them.

8. Contact and policy changes

Privacy questions may be sent to support@eventbookr.com or submitted through our support form. Material policy changes will be dated here and, when appropriate, communicated through the service.

Version: privacy-v2.2 · Effective 13 September 2026