Updated 3 November 2026
Privacy policy
How Creator One handles personal information under POPIA.
Draft for legal review. Some company details are still to be confirmed.
Who is responsible
Creator One is the responsible party for creator accounts and for running the platform. For a creator’s fans, the creator is the responsible party and we process information for them as their operator.
Information Officer
Our Information Officer is Information Officer (to be confirmed). Contact them at privacy@creatorone.co.za with any privacy question, request or complaint.
What we collect
For creators: name, phone, email, handle, bank and identity details for payouts, and what you publish. For fans: name, WhatsApp number and/or email, what you bought, and the choices you made at checkout. For visitors: page views without names, phone numbers, cookies or IP addresses, grouped by province and device.
Why, and on what basis
Receipts and delivery. Part of the purchase. No tick needed, and opting out of marketing never stops these.
Marketing on WhatsApp. Opt-in tick, unticked by default.
Marketing by email. Opt-in tick, unticked by default.
Advertising pixels and cookies. Asked on the creator’s page only when they add a pixel. Creator One’s own page stats set no cookies.
Who we share it with
Payment partners to take payments, Meta to deliver WhatsApp messages, our SMS and email providers, identity and bank verification providers for payouts, and Cloudflare to host the service. Each is bound by an operator agreement. We don’t sell personal information.
Where it is stored
Our hosting provider may store information outside South Africa. We only use providers in countries with adequate protection or under binding agreements, as section 72 of POPIA requires.
How long we keep it
Account information while your account is open. Orders and financial records for 5 years, as tax law requires. Messages for 2 years. Raw visit analytics for 13 months. Consent records for as long as we market to you and 3 years after.
Your rights
You can ask what we hold about you, ask us to correct or delete it, and object to direct marketing at any time. You can complain to the Information Regulator at inforegulator.org.za.
Security
We encrypt information in transit, hash passwords, limit staff access and keep an audit trail. If there is a breach that affects you, we tell you and the Information Regulator as POPIA requires.