Privacy Policy
Last updated: 1 April 2026
1. Introduction
Dee Tracks Records (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Policy explains what data we collect, why we collect it, and how we protect it.
2. Information We Collect
- Account data: Name, email address, and artist name provided on registration.
- Purchase data: Transaction IDs, licence tier purchased, and payment provider references. We do not store card numbers.
- Demo submissions: Audio files, biography, social links, and song metadata submitted via the A&R portal.
- Usage data: Pages visited, download activity, and approximate location for currency detection.
- Cookies: Session authentication cookie and localStorage preferences including cart, currency, and theme.
3. How We Use Your Information
- To process purchases and deliver licensed files.
- To manage your account and Inner Circle membership.
- To review A&R demo submissions and communicate feedback.
- To send transactional emails via Resend.
- To detect your country for the correct checkout flow.
- To improve the platform through aggregated usage analytics.
4. Third-Party Services
We work with the following third parties who may process your data:
- Supabase: Database, file storage, and authentication.
- PayFast: ZAR payment processing for South African users.
- Paystack: International checkout and payment processing.
- Resend: Transactional email delivery.
- RouteNote: Music distribution partner.
- ipapi.co: Country detection with only a country code returned.
5. Data Retention
Purchase records and account data are retained for a minimum of 5 years in compliance with South African tax legislation. Demo submission files are retained for 12 months. You may request deletion of your account data at any time, subject to legal retention obligations.
6. Your Rights (POPIA)
Under POPIA, South African data subjects have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your data where legally permitted.
- Object to the processing of your data for direct marketing.
- Lodge a complaint with the Information Regulator of South Africa.
7. Security
We implement industry-standard security measures including TLS, Row Level Security, signed download URLs with short expiry, and segregated customer and admin access.
8. Contact Our Information Officer
For privacy requests or complaints, contact privacy@deetracks.co.za. We will respond within 10 business days as required by POPIA.