Skip to content
Headliner

Legal

Privacy Policy

How Headliner collects, uses, protects and shares personal information, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated 3 November 2026

Draft pending legal review

This policy describes how the platform works today and is being reviewed by South African counsel before launch. Details marked “to be confirmed” will be completed once the operating company is registered.

1. Who is responsible

The responsible party is [Headliner operating company: to be confirmed], [registered address: to be confirmed]. Our Information Officer is [Information Officer name: to be confirmed], reachable at [privacy email address: to be confirmed] or through our contact form (choose “Privacy and my data”).

2. What we collect

Everyone

  • Account details: name or display name, email address, password (stored only as a secure hash), phone if you add it.
  • Settings and consents: language, time zone, policy acceptances and marketing choices.
  • Security records: sign-in sessions, device type and two-step verification status.

Customers and venues

  • Booking details: event date, broad location, guest numbers and notes you give the performer.
  • Age confirmation result from our verification partner (not your ID document).
  • Payment records from our payment partner. We never receive full card numbers.

Performers

  • Verification references and the result of age and identity checks, kept separately from your public profile.
  • Profile content you publish: stage name, city and region, services, prices and approved media.
  • Payout details, stored encrypted and visible only to authorised finance staff.

Agencies and venues

  • Business registration and representative verification details, team members and their roles.

3. Why we use it (lawful basis)

  • To provide the service you asked for: accounts, bookings, payments, messaging and memberships.
  • To meet legal obligations: age verification, tax and accounting records, responding to lawful requests.
  • For legitimate interests: keeping the platform safe, preventing fraud and abuse, and improving our service.
  • With your consent: marketing messages and optional features such as “recently viewed”. You can withdraw consent at any time.

4. Who we share it with

  • The other party to your booking, limited to what they need (for example a display name, not your email address).
  • An agency, only for performers who have accepted that agency’s representation terms.
  • Service providers acting for us under written agreements: identity verification, payments, email, hosting and storage.
  • Authorities, where the law requires it or to protect someone’s safety.

We do not sell personal information.

5. What is public

Public performer profiles show a stage name, city or region, services, prices, approved media and reviews. Legal names, exact addresses, identity documents, phone numbers and email addresses are never published.

6. Cross-border transfers

Some providers may store or process information outside South Africa. We only use providers in countries with adequate protection or under agreements that give protection substantially similar to POPIA (section 72).

7. How we protect it

  • Encryption in transit and at rest, with sensitive fields such as payout details encrypted separately.
  • Staff access is limited to what each role needs, requires two-step verification and is logged.
  • Private media is stored privately and shown only through short-lived links after an access check.
  • We will notify you and the Information Regulator if a security compromise affects your information.

8. How long we keep it

We keep information only as long as needed for the purposes above or as the law requires. For example, financial records are kept for at least five years under tax law, while closed accounts are anonymised once those obligations end. Verification documents are held by our verification partner, not by us.

9. Your rights

Under POPIA you may:

  • ask what personal information we hold about you and get a copy;
  • ask us to correct or delete it;
  • object to processing based on legitimate interests, and to direct marketing at any time;
  • withdraw consent you have given;
  • lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za.

Make a request through our contact form. Formal access requests can also be made under our PAIA manual.

10. Children

Headliner is for adults only. We do not knowingly collect information from anyone under 18 and delete it if we find it.

11. Cookies

See our Cookie policy.

12. Changes

We will tell you about material changes to this policy before they take effect.

Privacy Policy | Headliner