Privacy & Data Protection

Your story is yours.

This policy explains how Tales of the Baobab handles the personal information entrusted to us through the website, festival communications and event-related services.

Last updated · 19 July 2026
01

Who We Are

Tales of the Baobab is an arts and cultural festival produced by Isulam Productions (Pty) Ltd.

For purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Isulam Productions (Pty) Ltd is the responsible party for personal information processed through the Tales of the Baobab website, mailing list, enquiries and related event communications.

Privacy contact details: isulam.productions@gmail.com · 067 253 0432

02

Scope of This Policy

This Privacy Policy explains how we collect, use, store, share and protect personal information when you:

  • visit the Tales of the Baobab website;
  • join our mailing list or submit a website form;
  • request information about the festival;
  • communicate with us by email, telephone or WhatsApp;
  • apply as a vendor, sponsor, partner, artist or service provider;
  • purchase or enquire about tickets, packages or event-related services; or
  • interact with content, links or embedded services made available through the website.
03

Personal Information We May Collect

Depending on how you interact with us, we may collect:

  • your name and surname;
  • email address;
  • telephone or WhatsApp number;
  • your selected areas of interest;
  • enquiry, application or correspondence details;
  • ticketing, booking or transaction information where applicable;
  • vendor, sponsor, partner, artist or supplier information;
  • communication preferences and marketing consent;
  • technical information such as your IP address, browser type, device type, referring page and website activity;
  • information collected through cookies, analytics tools or embedded third-party content; and
  • any other information you voluntarily provide to us.

Please do not submit personal information that is not reasonably necessary for your enquiry or participation.

04

How We Collect Personal Information

We may collect personal information:

  • directly from you through forms, email, telephone, WhatsApp or in-person communication;
  • through ticketing, accommodation, payment or event-service providers used in connection with the festival;
  • from authorised representatives acting on your behalf;
  • from publicly available sources where lawful and relevant; and
  • automatically when you use the website, through cookies, server logs, analytics tools and embedded content.
05

How We Use Personal Information

We may process personal information to:

  • respond to enquiries and provide requested information;
  • register you for festival updates;
  • send artist announcements, early-access information, festival news, sponsorship opportunities and vendor updates where you have requested or consented to receive them;
  • manage ticketing, bookings, packages, applications and event participation;
  • communicate operational information before, during and after the festival;
  • manage relationships with guests, artists, vendors, sponsors, partners, suppliers and venues;
  • administer competitions, promotions or special offers;
  • improve the website, communications and festival experience;
  • maintain the security and integrity of our systems;
  • prevent fraud, misuse or unlawful activity;
  • comply with legal, regulatory, accounting and reporting obligations; and
  • establish, exercise or defend legal rights.
06

Lawful Grounds for Processing

We process personal information where:

  • you have given consent;
  • processing is necessary to take steps at your request or to perform an agreement with you;
  • processing is necessary to comply with a legal obligation;
  • processing protects a legitimate interest of yours;
  • processing is necessary for our legitimate business interests or those of a third party, provided your rights and interests do not override those interests; or
  • another lawful ground permitted under POPIA applies.

You may withdraw consent at any time. Withdrawal will not affect processing that was lawful before consent was withdrawn.

07

Festival Updates and Direct Marketing

When you join the Tales of the Baobab mailing list or request updates, we may contact you by email, telephone or WhatsApp according to the preferences and details you provide.

You can opt out at any time by:

  • using the unsubscribe link in an email;
  • replying STOP to an applicable WhatsApp or direct message; or
  • contacting us at isulam.productions@gmail.com.

We may retain limited information necessary to record and respect your opt-out request.

08

Cookies, Analytics and Embedded Content

The website may use cookies and similar technologies to operate correctly, remember preferences, understand website activity and improve performance.

The website may also contain embedded content or links from third parties, including music, ticketing, accommodation, maps, social media, analytics or payment services. These third parties may collect information directly from your browser or device and process it under their own privacy policies.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

09

When We Share Personal Information

We may share personal information only where reasonably necessary with:

  • authorised employees, contractors and event personnel;
  • website hosting, cloud storage, email, communications and technology providers;
  • ticketing, booking, payment, accommodation and event-service providers;
  • the event venue and operational partners where required to provide a requested service;
  • professional advisers, insurers, auditors or legal representatives;
  • public authorities, regulators or law-enforcement bodies where required by law; and
  • a successor or purchaser in connection with a lawful restructuring, merger or transfer of the festival business.

We do not sell or rent personal information.

Service providers may process personal information only for agreed purposes and subject to appropriate confidentiality, security and data-protection obligations.

10

Cross-Border Processing

Some service providers may store or process personal information outside South Africa. Where this occurs, we will take reasonably practicable steps to ensure that the information receives an appropriate level of protection in accordance with POPIA.

11

Retention of Personal Information

We retain personal information only for as long as reasonably necessary to:

  • fulfil the purpose for which it was collected;
  • provide requested services or communications;
  • maintain appropriate operational and transaction records;
  • comply with legal, tax, accounting or regulatory requirements;
  • resolve disputes; or
  • establish, exercise or defend legal claims.

When personal information is no longer required, we will securely delete, destroy, de-identify or anonymise it, subject to lawful retention requirements.

12

Information Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, interference, alteration, disclosure or destruction.

These measures may include access controls, restricted permissions, secure service providers, staff confidentiality obligations, system monitoring and appropriate data-handling procedures.

No website, electronic transmission or storage system can be guaranteed to be completely secure. Where required by law, we will notify affected persons and the Information Regulator of a qualifying security compromise.

13

Your Rights

Subject to POPIA and any applicable limitations, you may:

  • ask whether we hold personal information about you;
  • request access to your personal information;
  • request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information;
  • object to certain processing;
  • withdraw consent;
  • request that we stop sending direct marketing;
  • request information about how your personal information has been used or shared; and
  • lodge a complaint with the Information Regulator.

We may need to verify your identity before acting on a request.

To exercise your rights, contact isulam.productions@gmail.com.

14

Children’s Personal Information

The festival may welcome guests of different ages, but our website mailing-list and enquiry forms are not intended to collect personal information directly from children without the involvement or consent of a competent person, such as a parent or legal guardian.

If you believe that a child has submitted personal information without appropriate authorisation, contact us so that we can assess and address the matter.

15

Third-Party Websites

The website may link to third-party websites or services. We do not control those third parties and are not responsible for their privacy practices, security or content. Review their privacy policies before submitting personal information.

16

Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations or information-handling practices change.

The current version will be published on the website with its latest revision date. Material changes may also be communicated through an appropriate channel.

17

Contact Us

Questions, requests or concerns about this Privacy Policy or our processing of personal information may be sent to Tales of the Baobab, produced by Isulam Productions (Pty) Ltd, at isulam.productions@gmail.com or 067 253 0432.

You may also lodge a POPIA complaint with the Information Regulator of South Africa at POPIAComplaints@inforegulator.org.za, 010 023 5200, or toll-free on 0800 017 160.

Questions about your information?

Contact the Tales of the Baobab team to request access, correction or deletion of your personal information, withdraw consent, or raise a privacy concern.