Privacy Notice

Last updated: 11 June 2026

This Privacy Notice explains how Creative Expression Art Classes ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our website, enquire about classes, or make a booking. We are committed to protecting your privacy in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).

1. Who we are (Responsible Party)

For the purposes of POPIA, the Responsible Party is:

• Creative Expression Art Classes
• 70 Van Ryneveld Ave, Pierre van Ryneveld Park, Centurion, 0045, South Africa
• Email: hello@creativeexpressionartclasses.co.za
• Phone: 082 617 0907

2. The personal information we collect

We only collect information we need to provide our classes and respond to you. This includes:

• Identity & contact details — your name, email address and phone number.
• Booking details — the class and session you book, number of seats, and any notes you choose to share.
• Payment information — payments are processed securely by our payment provider (Yoco). We do not store your card details; we only receive confirmation of whether a payment succeeded.
• Technical information — basic information your browser sends (such as your IP address) and security signals used to protect our site from bots.

3. How and why we use your information

We process your personal information to:

• Take and manage your booking and reserve your seat;
• Send you booking confirmations and important information about your class;
• Process your payment and keep a record of it;
• Respond to your enquiries;
• Keep our website secure and prevent fraud or abuse;
• Comply with our legal and accounting obligations.

Our lawful basis for processing is generally that it is necessary to perform our agreement with you (your booking), to comply with the law, or based on your consent where you have provided it.

4. Who we share it with

We do not sell your personal information. We share it only with trusted service providers ("Operators") who help us run our business, and only as needed:

These providers are bound to protect your information and may only use it to provide their services to us.

5. Cross-border processing

Some of our service providers (such as Google) may store or process information on servers located outside South Africa. Where this happens, we take reasonable steps to ensure your information continues to be protected at a level comparable to POPIA, as permitted by section 72 of the Act.

6. How long we keep your information

We keep your booking and payment records for as long as needed to provide our services and to meet our legal, tax and accounting obligations, after which we securely delete or anonymise them. You may ask us to delete your information sooner where we are not legally required to keep it.

7. How we protect your information

We use reputable, secured cloud services, encrypted connections (HTTPS), access controls and bot protection to keep your information safe. While no system is ever completely secure, we take reasonable and appropriate measures to guard against loss, unauthorised access and misuse.

8. Children's information

Some of our classes are for children. Where a class is booked for a child, we expect the booking to be made by a parent or legal guardian who consents to us processing the necessary information to provide the class. If you believe we have collected a child's information without appropriate consent, please contact us and we will address it.

9. Cookies & similar technologies

Our website uses a small amount of technology necessary for it to work and to keep it secure (including Google reCAPTCHA, which helps us tell real visitors from bots). We do not use advertising trackers.

10. Your rights under POPIA

Subject to the Act, you have the right to:

• Ask what personal information we hold about you and request access to it;
• Ask us to correct or update information that is inaccurate or incomplete;
• Ask us to delete information where we are not required to keep it;
• Object to the processing of your information in certain circumstances;
• Withdraw any consent you have given (this will not affect processing already carried out).

To exercise any of these rights, email us at hello@creativeexpressionartclasses.co.za. We may need to verify your identity before acting on your request.

11. Complaints

If you have a concern about how we handle your personal information, please contact us first and we'll do our best to resolve it. You also have the right to lodge a complaint with the Information Regulator of South Africa:

• Information Regulator (South Africa)
• Email (complaints): POPIAComplaints@inforegulator.org.za
• Website: inforegulator.org.za

12. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be available on this page, with the "Last updated" date shown at the top.