Privacy Policy

This policy explains how Studio Prime Radio collects, uses, shares and protects your personal information when you use this website, our online radio stream, our store and our other services (together, the “Service”). It is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Promotion of Access to Information Act 2 of 2000 (PAIA). By using the Service you acknowledge this policy; where the law requires it, we ask for your consent separately.

1. Who we are

Studio Prime Radio (operated by [registered name and registration number]) is the “Responsible Party” for the personal information described here. We are a South African online radio station streaming electronic music 24/7, with a supporting website, store and listener account system.

2. Our Information Officer

Our Information Officer is responsible for compliance with POPIA and PAIA. You can reach them, and send any privacy request or complaint, at info@studioprime.co.za (subject line: “Information Officer”). We aim to respond within a reasonable time and, for formal requests, within the periods set by POPIA/PAIA.

3. The personal information we collect

Account: your name, email address and a securely hashed password; your account role and status; the dates you registered and last signed in.
Orders & delivery: the delivery name, phone number, street address, city and postal code you enter at checkout; what you ordered, the amount, and the fulfilment/payment status. You may choose to save a delivery address to your profile.
Payments: card and banking details are entered on PayFast’s secure pages, not ours. We receive only a payment reference and confirmation of whether a payment succeeded – we never see or store your card number.
Messages & newsletter: the content of messages you send us through the in-account inbox or the contact form, and your email address if you subscribe to the newsletter.
Technical & usage data: your IP address, browser and device type, the pages you view and roughly when, and – via our streaming provider – anonymous listening statistics such as how many people are tuned in and for how long.
Approximate location: only if you actively opt in to the listener map, your browser shares an approximate location with us. You can decline, and revoke it later in your browser settings.
Push notifications: if you enable notifications, we store the subscription “endpoint” your browser generates so we can deliver alerts. You can turn this off at any time from your profile.
Cookies & local storage: small amounts of data stored on your device – see our Cookie Policy.

4. Why we process it, and our lawful basis

POPIA (section 11) requires a lawful basis for every use. Ours are:

To perform a contract with you – creating and running your account, processing and delivering orders, unlocking digital downloads you have paid for, and providing support.
With your consent – sending the newsletter, sending push notifications, showing you on the listener map, and setting non-essential cookies. You can withdraw any of these at any time.
Our legitimate interests – keeping the Service secure, preventing fraud and abuse, understanding audience size, and improving the site – balanced against your rights and expectations.
Legal obligation – keeping transaction and tax records as required by South African law.

If you do not provide information we need to run your account or fulfil an order, we may not be able to provide that part of the Service.

5. Who we share it with

We do not sell, rent or trade your personal information. We share it only with operators who process it on our instructions and under a written agreement, including:

PayFast – to take payment for orders and tickets.
Our hosting and email providers – to run the website, store data and send account, order and newsletter email.
Our streaming provider (Airtune) – to deliver the live audio stream and compile anonymous listener statistics.
hCaptcha (Intuition Machines, Inc.) – on the contact form only, to tell humans from bots.
Browser push services (for example Google, Mozilla or Apple) – only if you enable notifications, to deliver them to your device.
Courier / delivery partners – to ship physical merch to the address you provide.

We may also disclose information if required by law, court order or a lawful request from a public authority, or to protect our rights, safety or property.

6. Sending information outside South Africa

Some of the providers above (for example hCaptcha, browser push services, content-delivery networks and web font services) are located outside South Africa. Where personal information is transferred across a border, we rely on section 72 of POPIA – the recipient is bound by laws or agreements that provide a comparable level of protection, the transfer is necessary to perform our contract with you, or you have consented.

7. How long we keep it

Account data – for as long as your account is active, and for a reasonable period afterwards in case you return or a dispute arises.
Order, payment and tax records – for the period required by South African law (generally at least five years).
Support messages – while they are useful for handling your query and our records, then deleted or de-identified.
Newsletter subscription – until you unsubscribe.
Technical logs – for a short period for security and troubleshooting.

When information is no longer needed for a lawful purpose we delete or de-identify it, unless the law requires us to keep it.

8. How we protect it

In line with section 19 of POPIA we take reasonable technical and organisational steps to safeguard your information – passwords are stored only as a salted hash, the site is served over HTTPS, access to personal data is limited to staff who need it, purchased master audio files are stored outside the public web root and released only through a signed download link, and payment card data never touches our servers. No system is perfectly secure; if a breach affects your personal information and poses a real risk of harm, we will notify you and the Information Regulator as POPIA requires.

9. Your rights

Under POPIA you have the right to:

ask what personal information we hold about you and request a copy;
ask us to correct or update information that is inaccurate, misleading or out of date;
ask us to delete or destroy information we no longer have a lawful reason to keep;
object, on reasonable grounds, to processing based on our legitimate interests;
withdraw consent where consent is the basis for processing (this does not affect processing already done);
object at any time to the use of your information for direct marketing; and
complain to the Information Regulator (see section 12).

To exercise any of these, email info@studioprime.co.za. We may ask you to verify your identity first. Most of this you can also do yourself from your profile (update your details, manage notifications) or by using the unsubscribe link in any newsletter.

10. Direct marketing

In line with section 69 of POPIA, we only send marketing email (news, show updates, store promotions) to people who have subscribed or who are existing customers and have not opted out. Every marketing message includes a way to unsubscribe, and you can also email us to stop. Push notifications and marketing are only sent if you have switched them on.

11. Children

The Service is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

12. Access to information (PAIA)

You may request access to records we hold under the Promotion of Access to Information Act. A PAIA manual describing the records we keep and how to request them is available free of charge on request from info@studioprime.co.za. Requests must be made on the prescribed form; the prescribed request and access fees may apply, except for a request by you for your own personal information. We will deal with requests within the timeframes set by PAIA. If we refuse a request, we will give reasons and explain your remedies.

13. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information or an access request, you may complain to the Information Regulator (South Africa):

Website: inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
PAIA complaints: PAIAComplaints@inforegulator.org.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

14. Automated decisions

We do not make decisions about you that have a legal or similarly significant effect purely by automated means.

15. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed; where changes are significant we will bring them to your attention. Please check back periodically.