Privacy Policy.

01 Who we are

Matchpoint Talent Network (Pty) Ltd ("Matchpoint", "we", "us" or "our") operates the website located at matchpoint.co.za and associated sub-domains (the "Platform"). Matchpoint is the responsible party for your personal information as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA").

02 What this policy covers

This Privacy Policy applies to all personal information processed by Matchpoint through the Platform, including information provided when you:

• Browse or use the Platform as a visitor;
• Register or apply to join the Matchpoint talent network;
• Register as a brand, agency or production company;
• Submit an enquiry, brief or application via any contact form;
• Subscribe to our newsletter or marketing communications;
• Communicate with us by email, phone, WhatsApp or any other channel; or
• Enter into a booking, campaign or service agreement with us.

This policy does not apply to third-party websites linked from our Platform. We encourage you to read the privacy policies of any external sites you visit.

03 Information we collect

We collect personal information in the following categories:

3.1 Information you give us directly

• Identity data: full name, stage name, date of birth, gender, nationality and photographs or videos you upload to your profile.
• Contact data: email address, phone number, WhatsApp number and physical address.
• Professional data: talent category, skills, portfolio assets, social media handles, follower counts, rate card and availability.
• Financial data: banking details and tax reference number (collected securely for payment processing purposes).
• Communications: messages, enquiries and feedback you send us.

3.2 Information collected automatically

• Usage data: pages visited, time spent, clicks, search terms and feature interactions.
• Technical data: IP address, browser type, operating system, device identifiers and referrer URLs.
• Cookie data: see Section 11 for full details.

3.3 Information from third parties

• Social media platforms (if you connect an account or sign in via a social login).
• Payment processors for transaction confirmation.
• Publicly available sources for verification purposes.

04 How we use your information

We use your personal information for the following purposes:

05 Legal basis for processing

Under POPIA, we process personal information only where we have a valid lawful ground to do so. The grounds we rely on include:

• Consent: where you have given clear consent — for example, subscribing to our newsletter or providing special personal information.
• Contractual necessity: where processing is necessary to perform a contract with you or to take steps at your request before entering a contract (e.g. processing your talent profile or booking).
• Legal obligation: where we are required to process information to comply with applicable South African law.
• Legitimate interest: where processing is necessary for our legitimate interests (e.g. Platform security, fraud prevention, internal analytics), provided those interests do not override your rights.

06 Sharing your information

We do not sell your personal information. We may share it with:

• Brands, agencies and production companies registered on the Platform — but only to the extent necessary to facilitate a booking or opportunity you have agreed to pursue;
• Payment processors (e.g. Peach Payments, PayFast or similar) to process financial transactions securely;
• Cloud and hosting providers who store data on our behalf under contractual data-processing agreements;
• Analytics and marketing tools (on an aggregated or pseudonymous basis where possible);
• Legal and professional advisers bound by confidentiality obligations; and
• Law enforcement or regulatory authorities where required by law, court order or to protect the rights of Matchpoint or others.

All third parties are required to process your information in accordance with POPIA and to implement appropriate security measures.

07 International transfers

Some of our service providers (such as cloud infrastructure and analytics platforms) may be located outside South Africa. Where personal information is transferred to a country that does not provide an adequate level of protection equivalent to POPIA, we ensure that appropriate safeguards are in place — such as contractual clauses that bind the recipient to equivalent data-protection standards — before any transfer occurs.

08 Data retention

We retain personal information only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Our general retention periods are:

• Active account data: retained for the duration of your relationship with Matchpoint, plus a further three (3) years after account closure.
• Financial records: retained for five (5) years as required by South African tax legislation.
• Marketing data: retained until you withdraw consent or opt out.
• Enquiry and communication records: retained for two (2) years from the date of the last interaction.
• Log and technical data: retained for twelve (12) months.

When retention periods expire, information is securely deleted or anonymised so that it can no longer be linked to you.

09 Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These include:

• Encryption of data in transit using TLS (HTTPS);
• Access controls limiting staff access to personal information to those with a legitimate need;
• Regular security assessments and penetration testing;
• Secure, access-controlled data storage with reputable cloud providers; and
• Staff training on data-protection obligations.

Despite these measures, no system is completely secure. If you suspect that your account has been compromised, please contact us immediately at privacy@matchpoint.co.za.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator and, where required by POPIA, notify affected data subjects as soon as reasonably practicable.

10 Your rights under POPIA

As a data subject under POPIA, you have the following rights:

To exercise any of these rights, please contact us at privacy@matchpoint.co.za. We will respond within 30 days. We may need to verify your identity before processing your request.

11 Cookies

Our Platform uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit our site. We use:

• Strictly necessary cookies: essential for the Platform to function (e.g. session management). These cannot be disabled.
• Performance cookies: collect anonymous data about how visitors use the Platform, helping us improve performance and user experience.
• Functional cookies: remember your preferences (e.g. language or login state) to personalise your experience.
• Marketing cookies: used to track visits and help us deliver relevant advertising. These are only set with your consent.

You can manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality. Most browsers allow you to refuse cookies; consult your browser's help documentation for guidance.

12 Children's privacy

The Matchpoint Platform is intended for users aged 18 and over. We do not knowingly collect personal information from children under the age of 18.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us at privacy@matchpoint.co.za and we will take steps to delete that information promptly.

Where talent aged 16 or 17 participates with the verifiable consent of a competent person (parent or legal guardian) as contemplated by POPIA, such consent must be provided in writing before any account is created or booking confirmed.

13 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices. When we make material changes, we will:

• Update the "Last updated" date at the top of this page;
• Notify registered users by email or via an in-Platform notification; and
• Where required by law, seek renewed consent.

We encourage you to review this policy periodically. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

14 Contact & complaints

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal information, please contact our Information Officer:

We take all complaints seriously and aim to resolve them within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the Information Regulator (see Section 10 for contact details).