Privacy Policy

The Sandi Mazibuko platform is operated by Fabrosanz Creation. For privacy matters, Fabrosanz Creation is the data controller responsible for the personal information collected through this website.

We collect the following categories of personal information:

• Account information: name, email address and password (or authentication details from Google sign-in).
• Purchase and booking records: courses you own, masterclasses you have booked, membership status and learning progress.
• Communication data: emails, support messages and your marketing preferences.
• Technical data: IP address, browser type, device information and usage analytics to keep the platform secure and improve the experience.

We use your personal information to:

• Create and manage your account.
• Provide access to courses, live masterclasses and membership resources.
• Process purchases, bookings, subscriptions and refunds.
• Send purchase confirmations, event reminders and membership renewal notices.
• Send marketing emails when you have opted in (you can unsubscribe at any time).
• Prevent fraud, secure the platform and comply with legal obligations.

We process your personal information on the basis of: (1) performance of a contract — to deliver what you purchased or booked; (2) legitimate interests — to run, secure and improve the platform; (3) consent — for marketing communications; and (4) legal obligation — where required by law.

We use Paddle as our Merchant of Record to process payments, manage subscriptions, handle tax compliance and issue invoices. Paddle collects and processes payment information (such as card details and billing address) on our behalf. Paddle is an independent data controller for the payment data it collects. You can read Paddle's privacy policy at paddle.com/legal/privacy.

We share personal information only with:

• Paddle, our Merchant of Record, for payment processing, subscription management, tax and invoicing.
• Service providers who help us host, secure and operate the platform (for example, cloud hosting, analytics and customer support tools).
• Professional advisers such as accountants or lawyers, when necessary.
• Authorities, when required by law or to protect our rights.

Account and learning records are kept while your account is active and for up to 30 days after a verified deletion request. Purchase, subscription, invoice and tax records are generally retained for seven years to meet legal, accounting and fraud prevention requirements. Support correspondence is retained for up to three years, and analytics data for up to 26 months. We may retain information longer where a law, dispute or enforcement matter requires it. After the applicable period, we delete or anonymise the information securely.

We use appropriate technical and organisational measures — including encryption, access controls and secure hosting — to protect your personal information.

We use essential cookies and similar technologies for sign-in, security and checkout. We may also use analytics or marketing cookies with your consent. You can manage non-essential cookies through the cookie controls provided on the website or your browser settings; disabling essential cookies may prevent parts of the service from working.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Withdraw consent for marketing communications at any time.
• Complain to South Africa's Information Regulator or another competent authority.

To exercise these rights, contact us using the details on the Contact page.