Privacy Policy

1. Introduction

A42 House, operated by the Institute for Creative Repair NPC ("A42", "we", "us", "our"), is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at a42.art and use our services, in compliance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.

2. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number when you create an account or sign up for membership.
• Booking Information: Check-in and check-out dates, number of guests, room preferences, and special requests.
• Payment Information: Payment details are processed securely through Paystack. We do not store your card details on our servers.
• Communications: Messages, enquiries, and feedback you send to us.
• Usage Data: Information about how you interact with our website, including pages visited and features used.

3. How We Use Your Information

• To process and manage bookings for stays and experiences
• To manage your membership account and points balance
• To send booking confirmations and updates
• To respond to your enquiries and provide customer support
• To send you information about events and experiences (with your consent)
• To improve our services and website
• To comply with legal obligations

4. Legal Basis for Processing

Under POPIA, we process your personal information based on: your consent, the performance of a contract (bookings and membership), compliance with legal obligations, and our legitimate interests in operating and improving our services.

5. Data Sharing

We may share your information with:

• Payment Processors: Paystack, for processing payments securely.
• Email Services: For sending transactional emails (booking confirmations, account notifications).
• Hosting Providers: Our website is hosted on secure cloud infrastructure.

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit, secure authentication, and access controls.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking records are retained for 5 years for accounting purposes. You may request deletion of your account at any time.

8. Your Rights

Under POPIA, you have the right to:

• Access your personal information held by us
• Correct or update inaccurate information
• Request deletion of your personal information
• Object to the processing of your information
• Withdraw consent at any time
• Lodge a complaint with the Information Regulator

9. Cookies

Our website uses essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies. By using our website, you consent to the use of essential cookies.

10. Contact Us

For any privacy-related enquiries or to exercise your rights, please contact us:

A42 House — Institute for Creative Repair
6A 8th Avenue, Parktown North, Johannesburg
Email: hello@a42.art
Phone: 082 304 6711