GLAM-CONNECT PRIVACY POLICY

1. Introduction

GLAM-Connect (“Platform”), operated by Infinite Pursuit, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Protection of Personal Information Act (POPIA). By using the platform, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect:

• Full name
• Contact details (email address, phone number)
• Account information
• Booking and transaction details
• Location information (where applicable)
• Communications between users and the platform

3. How We Use Your Information

We use your information to:

• Facilitate bookings between clients and service providers
• Process payments and transactions
• Provide customer support
• Improve platform functionality and user experience
• Prevent fraud and enforce platform policies
• Comply with legal and regulatory obligations

4. Lawful Basis for Processing

We process personal information based on:

• Your consent when using the platform
• The necessity to perform a contract (e.g. bookings and payments)
• Compliance with legal obligations
• Legitimate business interests, including fraud prevention and platform improvement

5. Payment Information & Security

GLAM-Connect uses secure third-party payment providers, including PayFast, to process all transactions. We do not store full credit or debit card details on our systems. Payment information is entered directly on the secure payment gateway, which is compliant with industry security standards, including PCI-DSS.

GLAM-Connect may store limited payment-related information including:

• Tokenised payment references
• Masked card details (e.g. last 4 digits)
• Transaction history

This information is used solely for:

• Processing transactions
• Record-keeping
• Fraud prevention and dispute resolution

6. Data Minimisation

We only collect and process personal information that is necessary for the operation of the platform, in accordance with POPIA principles.

7. Sharing of Information

We may share your information with:

• Service providers (to fulfil bookings)
• Payment processors (to process transactions)
• Technical service providers supporting the platform

We do not sell or rent your personal information. All third-party providers are required to implement appropriate security safeguards.

8. Cross-Border Data Transfers

Some personal information may be processed or stored outside of South Africa by third-party service providers. We take reasonable steps to ensure that such providers maintain adequate data protection standards.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy and to comply with our legal, tax, and accounting obligations. The following schedules apply:

When personal information is no longer required, we securely delete or irreversibly anonymise it. You may request early erasure of your data by contacting us (see Section 16); requests are subject to our legal retention obligations above.

10. Your Rights

You have the right to:

• Access your personal information
• Request correction or deletion
• Object to processing
• Withdraw consent
• Lodge a complaint with the Information Regulator

Requests can be made using the contact details below.

11. Cookies & Tracking

We use cookies and similar technologies to:

• Improve user experience
• Analyse platform usage
• Enhance functionality

Users may manage cookie preferences through their browser settings.

12. Children’s Privacy

GLAM-Connect does not knowingly collect or process personal information from individuals under the age of 18 without appropriate consent.

13. Data Security

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, loss, or misuse.

14. Limitation of Security

While we take reasonable steps to protect your information, no system is completely secure. Users provide information at their own risk.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on the platform with the revised effective date.

16. Contact Information

You also have the right to lodge a complaint with the Information Regulator South Africa.