Privacy Policy & POPIA Compliance

1. Introduction & Responsible Party

SA Media Marketplace ("we", "our", or "the Platform"), a subsidiary of VB Dynamics Holding, respects your privacy and is committed to protecting your personal information. This Privacy Notice outlines how we collect, process, store, and safeguard personal information obtained through our marketplace website in strict accordance with South Africa's Protection of Personal Information Act (POPIA).

2. Information We Collect

We collect information directly from you when you register, post job briefs, create provider profiles, submit quotes, or contact support:

• Account Details: Full name, verified email address, contact telephone number, and secure hashed password credentials.
• Provider Business Profiles: Registered business name, trade name, portfolio visuals, location/service coverage areas, pricing, and VAT/registration numbers.
• Job Briefs & Quotes: Project specifications, creative requirements, budgetary guidelines, delivery timelines, and quote messages.
• Payment & Billing Data: Transaction references, billing address, and subscription statuses. Note: Payment card details and instant EFT credentials are encrypted and processed directly by our PCI-DSS Level 1 certified gateway partner (PayFast), and are never stored on our servers.
• Technical & Log Data: IP address, browser type, session identifiers, and security audit logs to protect against fraudulent activity and unauthorized access.

3. Purpose of Processing Personal Information

In compliance with Section 13 of POPIA, information is collected solely for explicit, specific, and legitimate purposes:

• To facilitate matching between South African businesses and vetted media providers.
• To enable quotation workflows, project messaging, and verified client review submissions.
• To authenticate users, safeguard accounts against brute-force attacks, and issue transactional notices.
• To comply with regulatory tax, accounting, and legal requirements under South African law.

4. Information Sharing & Third Parties

We do not sell, rent, or trade your personal data. We only share information with third parties where strictly necessary:

• Payment Gateways: PayFast (Pty) Ltd for secure payment processing.
• Transactional Communications: Encrypted email delivery services for account verification and order notifications.
• Regulatory Authorities: Where legally mandated by a competent South African court or law enforcement agency.

5. Data Security Measures

We implement rigorous technical, operational, and organizational security controls:

• All web communication is encrypted using 256-bit SSL/TLS encryption.
• Passwords are irreversibly hashed using industry-standard bcrypt with high cost factors.
• Automated login throttling, CSRF tokens on every form, and SQL parameter binding prevent malicious injection attacks.
• Direct access to sensitive directories, environment keys, and storage files is blocked at the web server level.

6. Your Rights Under POPIA

As a data subject, you hold statutory rights under POPIA:

• Right to Access: Request confirmation of what personal information we hold about you.
• Right to Rectification: Request correction or updating of outdated or inaccurate information via your dashboard.
• Right to Erasure (De-registration): Request deletion of your profile and data, subject to statutory retention obligations.
• Right to Object: Object to processing on reasonable grounds by contacting our Information Officer.

7. Information Officer Contact

If you have questions, data access requests, or privacy concerns, please contact our designated Information Officer: