Privacy Policy (POPIA)

Last updated 24 October 2026

Draft for legal review. This text was prepared to fit how Chapters works, but it hasn't been checked by a South African attorney yet. Remove this notice once it has.

This policy explains how Chapters handles your personal information under the Protection of Personal Information Act, 2013 (POPIA). We only collect what we need to plan your wedding with you.

1. Responsible party and Information Officer

Chapters, a trading name of Duard Bateman (sole proprietor), 4A Seymour Street, Westdene, Johannesburg, Gauteng, 2092, South Africa. Information Officer: Duard Bateman, coach@chapters.coach.

2. What we collect

When you buy: your name, email, what you bought, the amount, and PayFast's payment reference. If it's a gift, we also keep the recipient's name, the recipient's email (if you give it) and your message. We record your checkout consents, with the date and IP address.
When you set up your plan: your names, wedding date, city or area, guest count, budget, the type of ceremony, whether lobola or an antenuptial contract applies, and what you've already booked. Your partner's name and email, if you add them.
When you use the plan: which tasks are done and who they're assigned to, your budget amounts and payments, and the dates you logged in.
When you email us: your message and our reply.
Marketing (only if you say yes): the source of your visit (UTM tags and referring page). If our Meta Pixel is switched on, Meta receives page-visit and purchase events.

Special personal information. Your answers about ceremony type and customs may reveal religious or cultural beliefs. POPIA treats that as special personal information. We only process it with your consent (given when you choose to answer) and only to tailor your plan. You can leave it out or change it at any time.

3. Why we use it

To deliver what you bought: your plan, dashboard, Guide, reminders and replies. This is necessary to perform our contract with you.
To take payment and keep tax and accounting records, as the law requires.
To send occasional news and offers, only if you ticked the marketing box. You can opt out at any time.
To see which adverts bring people to Chapters, using anonymous counts where possible.

We don't sell your information.

4. Who processes it for us (operators)

Afrihost (South Africa): hosting, database and email.
PayFast (South Africa): payments. They process your card under their own policy; we never see your card.
An AI provider, used to draft replies to your emails. We send it your message and a short summary of your plan, never payment details. This provider may be outside South Africa. We only use providers bound by data-protection terms that offer protection similar to POPIA (section 72).
Meta (outside South Africa), only if the Pixel is switched on. It receives browsing and purchase events from our website.

5. How long we keep it

Your plan, dashboard data and email conversations are deleted 90 days after your access ends. We keep order and payment records for 5 years because tax law requires it. Ask us and we'll delete your plan sooner.

6. Security

We use HTTPS throughout. Log-in links are single-use and stored only in scrambled (hashed) form. Access to admin tools is limited. If we ever have a breach that affects you, we'll tell you and the Information Regulator, as POPIA requires.

7. Your rights

You can ask what information we hold about you, ask us to correct or delete it, object to processing, and withdraw consent at any time. Email our Information Officer. If you're unhappy with how we handled your request, you can complain to the Information Regulator: inforegulator.org.za, POPIAComplaints@inforegulator.org.za.

8. Cookies

We use a session cookie and a “stay logged in” cookie on the dashboard. We also store a small first-party cookie for 30 days that remembers which advert or link brought you here, so we can attribute sales. If the Meta Pixel is on, Meta sets its own cookies.