Privacy Policy

1. Who we are

Tikiberry (tikiberry.co.za) is a peer-to-peer ticket resale marketplace operated by Poke Digital (Pty) Ltd, a company registered in South Africa. We are the “responsible party” for your personal information under the Protection of Personal Information Act, 2013 (POPIA).

This policy explains, in plain language, what we collect, why, who we share it with and what you can ask us to do with it.

2. What we collect

Your account. Your name, email address and password (stored only as a secure hash by our authentication provider). If you sign in with Google, Google shares your name and email address with us; we don't get your Google password.

Your profile and interests. If you give them to us: your WhatsApp number, home city, the kinds of events you like, how often you go out, and whether you want marketing emails.

Payout bank details. To pay you when you sell, and to refund you if a purchase falls through, we store your bank name, account holder name, account number, branch code and account type in our database and pass them to TradeSafe, our escrow and payments partner.

Card payments. When you pay, you pay on TradeSafe's secure checkout. We never see or store your card number.

Listings and deals. The tickets you list (event, price, seat details, the platform the ticket is from, and any photo you upload), the deals you take part in, the email or number a ticket should be transferred to, messages and evidence you send us in a dispute, and the status of each payment.

“Notify me” requests. The email address you give us when you ask to be told about tickets for an event.

Searches. We log the words typed into the homepage search, with the time. These logs contain nothing about who searched; we use them only to see which events are popular.

Technical information. Our hosting provider keeps standard server logs (such as IP address, browser and the pages requested) for security and to fix problems.

3. Why we use it, and on what basis

• To run your account and your deals: escrow, payment, payouts, refunds, ticket transfer and dispute resolution. This is necessary to provide the service you asked for (POPIA section 11(1)(b)).
• To keep Tikiberry safe: preventing fraud, enforcing our Terms and protecting other members. This is in our and our members' legitimate interests (section 11(1)(f)).
• To meet legal and financial obligations, such as keeping transaction records (section 11(1)(c)).
• To tell you about your deals by email and, if you opted in, WhatsApp.
• To personalise the homepage (“Picked for you”) using the interests and city you chose, and to rank popular events using anonymous search counts.
• To send you marketing, only if you opted in (section 11(1)(a)). You can switch this off in your profile at any time.

We do not sell your personal information.

4. What other members see

Your first name (or the name on your profile) appears on your listings and seller profile, along with how many sales you've completed. When you're in a deal, the other person sees what they need to complete it, such as the transfer email the buyer gave. We never show your bank details or WhatsApp number publicly.

5. Who we share it with

We use these service providers (“operators”), each only for the purpose listed:

• TradeSafe: escrow, card payments, payouts and refunds. We share your name, email, mobile number, and bank details when you're paid or refunded.
• Supabase: our database, file storage and sign-in (including Google sign-in).
• Vercel: hosts the website.
• Resend: sends our emails.
• Twilio: sends WhatsApp messages, only if you gave us your number and opted in.
• Google: only if you choose to sign in with Google.

Event listings (names, dates, venues and artwork) are imported from public sources such as the Ticketmaster and Quicket event APIs and public event pages. We use an automated AI service to categorise these public event details; no personal information is sent to it.

We may also share information where the law requires it, or with the other party to a deal and TradeSafe when we resolve a dispute.

6. Information stored outside South Africa

Some of our providers (including Supabase, Vercel, Resend, Twilio and Google) may store or process information on servers outside South Africa. We only use providers that are bound by data protection laws or agreements giving a level of protection similar to POPIA, as section 72 requires.

7. How long we keep it

• Account and profile: while your account is open. If you ask us to delete your account, we delete or anonymise your profile, interests, WhatsApp number and bank details.
• Deals and payment records: 5 years after the deal, for legal, tax and dispute purposes, even if you close your account.
• “Notify me” emails: until you ask us to remove them.
• Search logs: these are anonymous; only recent searches are used for ranking.

8. Security

We use encrypted connections (HTTPS), secure authentication and row-level security on our database to limit who can read private information. Only the people who need it to run deals and payouts can see bank details. No system is perfectly secure; if a breach affects you, we'll tell you and the Information Regulator as POPIA requires.

9. Your rights under POPIA

You have the right to:

• Ask whether we hold personal information about you and get a copy of it.
• Ask us to correct or update it. You can edit most of it yourself in your profile.
• Ask us to delete it, subject to the records we must keep (section 7).
• Object to us using it, including for marketing. You can turn marketing off in your profile, and reply STOP to any WhatsApp message to stop WhatsApp updates.
• Withdraw consent you gave us, at any time.

To make a request, email info@tikiberry.co.za from the email address on your account. We'll reply within 30 days and may ask you to confirm your identity first.

10. Information Officer

Our Information Officer handles privacy requests and complaints. You can reach our Information Officer at info@tikiberry.co.za.

11. Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Regulator of South Africa: inforegulator.org.za.

12. Cookies

Tikiberry uses only the cookies needed to keep you signed in. We do not use tracking or advertising cookies.

13. Changes and contact

If we change this policy we'll update the date at the top, and tell you by email if the change is significant. Privacy questions: info@tikiberry.co.za. Anything else: info@tikiberry.co.za.