Privacy Policy & POPIA Notice

Who is responsible for your information

Experio is the responsible party for the personal information collected through this site. Our Information Officer can be reached at privacy@experio.co.za, and general queries go to hello@experio.co.za.

What we collect

• When you book: your name, email address, phone number, the address or area where the experience takes place, guest numbers, dates and any notes you add.
• When you claim a seat or joining fee: your name, email, phone number and the number of seats.
• When you host: your first name, age range, a short bio, interests, a photo and your contact details.
• When you create an account: your email address and a password, which is stored encrypted and never visible to us.
• Automatically: basic technical information such as your device type, browser and pages viewed, so we can keep the site working.

What we never collect

We do not see or store your card number, CVV or banking login. Payments are handled entirely by PayFast on their own secure systems.

Why we need it

• To take your booking, confirm it, and let the person delivering the experience find you.
• To tell you when a group outing is confirmed or cancelled, and to process refunds.
• To let hosts and confirmed guests contact each other about an outing they are both part of.
• To keep records we are legally required to keep, such as tax and payment records.
• To improve the experiences we offer and, if you agree to it, to tell you about new ones.

Who sees your information

We do not sell your personal information, and we do not share it for anyone else's advertising.

• The partner, venue or host delivering the experience you booked — only what they need to deliver it.
• Other guests on a meetup: only first names, and only once the group is confirmed. Full contact details are shared between a host and their paid guests, not with the public.
• PayFast, to process your payment.
• Our hosting, database and email providers, who process information on our instructions only.
• A court or regulator, where the law requires it.

Where it is stored

Your information is stored on secure cloud servers which may be located outside South Africa. Where that happens, we only use providers that offer a level of protection comparable to POPIA and that are contractually bound to keep your information confidential.

How long we keep it

• Booking and payment records: seven years, as required by South African tax and financial law.
• Account, host profile and review information: while your account is open, and deleted on request afterwards.
• Marketing contact details: until you unsubscribe.

How we protect it

Access to our database is restricted by row-level security rules, host and guest contact details are hidden from public pages, host photos are stored privately and shared only through short-lived links, and all traffic to the site is encrypted.

Your rights under POPIA

To exercise any of these, email privacy@experio.co.za. We will respond within a reasonable time and may ask you to confirm your identity first.

• Ask what personal information we hold about you, and get a copy.
• Ask us to correct or delete information that is wrong, out of date or no longer needed.
• Object to us using your information for marketing, and unsubscribe at any time.
• Withdraw consent where we relied on it, understanding that we may then be unable to deliver a booking.
• Complain to the Information Regulator of South Africa if you believe we have mishandled your information.

Children

Experio is for adults. Children can of course be guests at a family experience, but only an adult may book, host or hold an account. We do not knowingly collect information directly from children.

Cookies

We use only the cookies and local storage needed to keep you signed in and to remember your progress through a booking. We do not use advertising trackers.

Changes

If we change how we handle personal information, we will update this page and the date above. Significant changes affecting existing bookings will be communicated by email.