Privacy Policy

Last updated: 20 June 2026

PlayPlan ("we", "us", "our") respects your privacy and is committed to protecting your personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

From Parents

  • Account details: name, email, mobile number, password (hashed).
  • Party brief details: child's age, party date, area, services, budget, theme, notes.
  • Communications with Suppliers sent through the Platform.

From Suppliers

  • Business details: business name, contact person, mobile, email, areas served, categories, pricing range.
  • Profile content: logo, gallery images, descriptions.
  • Billing and credit-transaction records (handled by Paystack — we do not store card data).

Automatically collected

  • Device and browser information, IP address, approximate location.
  • Usage data such as pages viewed, briefs created, leads unlocked.
  • Cookies and similar technologies — see our Cookie Policy.

2. How we use your information

  • To operate the Platform: create your account, match briefs to Suppliers, deliver messages and notifications.
  • To process credit-pack purchases and maintain transaction records.
  • To improve and secure the Platform, prevent fraud and abuse, and respond to support requests.
  • To send service emails (e.g. new matches, quote received, account alerts) and, with your consent, marketing emails.
  • To comply with legal obligations.

3. Legal basis for processing

We process personal information on the basis of: your consent (where required), performance of our agreement with you, our legitimate interests in running and improving the Platform, and compliance with applicable law.

4. Who we share information with

  • Other users: A Parent's brief is shown to matching Suppliers (with limited contact details until the Supplier unlocks the lead). Supplier profiles are visible to matched Parents.
  • Service providers (operators under POPIA): hosting, database and email infrastructure, payment processing (Paystack), analytics, customer support tooling.
  • Authorities: where we are legally required to disclose information.
  • We do not sell your personal information.

5. International transfers

Some of our service providers may process data outside South Africa. Where this happens we ensure that transfers are protected by appropriate safeguards as required by POPIA.

6. How long we keep your information

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting and dispute-resolution obligations. You can request deletion at any time (subject to those obligations) by contacting us.

7. Security

We use industry-standard technical and organisational measures — including encryption in transit, access controls, hashed passwords and row-level security on our database — to protect your information. No internet service is 100% secure, but we work to keep your data safe.

8. Your rights under POPIA

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your information (subject to legal limits).
  • Object to processing for direct marketing at any time.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the Information Regulator (South Africa) — inforegulator.org.za.

9. Children

PlayPlan is intended for adults (parents, guardians and supplier businesses). We do not knowingly collect personal information directly from children. Information about a child included in a party brief is provided by a parent or guardian.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Platform and, where the changes are material, notify you by email.

11. Contact us

To exercise your rights or ask a privacy question, contact our Information Officer at privacy@playplan.co.za.