top of page

Privacy Policy

The House of Yay / Escape and Create

Last updated: June 2026

This Privacy Policy explains how The House of Yay and Escape and Create ("we", "us", "our") collect, use, store and protect your personal information. It applies to our websites, booking platforms, WhatsApp communications, and any other services we provide.

We comply with the Protection of Personal Information Act 4 of 2013 ('POPIA') and all associated regulations. By using our services, you acknowledge that you have read and understood this policy.

 

1. Who We Are

The House of Yay is a creative studio based in Johannesburg, South Africa, offering paint-and-sip events, art workshops, and team-building experiences. Escape and Create is the registered business name operated by the same principals. Both entities operate from a physical studio and through online booking platforms.

Contact us at any time:

 

2. What Personal Information We Collect

We collect personal information as defined in POPIA — that is, information relating to an identifiable, living natural person (or, where applicable, an identifiable juristic person). This includes:

2.1 Information You Provide Directly

  • Your name and surname

  • Email address

  • Phone number (including WhatsApp)

  • Postal or residential address (where relevant)

  • Organisation or company name

  • Payment information (processed securely via third-party payment gateways — we do not store card details)

  • Any information you include in booking forms, survey responses, or messages to us

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address and browser type

  • Device and operating system information

  • Pages visited and time spent on site

  • Referring URLs and exit pages

  • Session and interaction data via cookies (see Section 5)

 

3. Why We Collect Your Information

We collect and process your personal information only for the following lawful purposes:

  • To process bookings and issue confirmations, invoices, and receipts

  • To communicate with you about your booking or event

  • To send you information about our upcoming events, promotions, or offers — where you have opted in to receive these

  • To manage our WhatsApp Channel communications and distribute exclusive discount codes

  • To respond to queries or complaints

  • To conduct customer satisfaction surveys or market research (participation is always optional)

  • To detect and prevent fraud or other unlawful activity

  • To comply with our legal obligations under South African law

  • To improve our website and services using aggregated, non-identifiable data

We will not use your information for any purpose other than those listed above without your prior consent.

 

4. Legal Basis for Processing

Under POPIA, we are permitted to process your personal information where:

  • You have given your consent (e.g. subscribing to our mailing list or WhatsApp Channel)

  • Processing is necessary to fulfil a contract with you (e.g. completing your booking)

  • Processing is required to comply with a legal obligation

  • Processing is in our legitimate business interests, provided these do not override your rights

 

5. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — and similar tracking technologies. When you first visit our site, we will ask for your consent to use non-essential cookies.

5.1 Types of Cookies We Use

  • Essential cookies: Required for the website to function correctly (e.g. session management, shopping cart). These cannot be disabled.

  • Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics). Used only with your consent.

  • Marketing/preference cookies: Remember your preferences and may be used to show relevant content or promotions. Used only with your consent.

5.2 Managing Your Cookie Preferences

You can withdraw consent for non-essential cookies at any time by adjusting your browser settings or by contacting us. Instructions for common browsers:

To opt out of Google Analytics tracking across all websites, visit:

Please note: disabling certain cookies may affect the functionality of our website.

 

6. How We Share Your Information

We do not sell your personal information. We may share it only in the following limited circumstances:

  • Service providers: Third parties who assist us in delivering our services (e.g. Wix.com for website hosting, Quicket for ticketing, payment processors). These parties are contractually obligated to handle your data securely and in compliance with POPIA.

  • Legal requirements: Where we are required to disclose information by law, court order, or regulatory authority.

  • Protection of rights: Where we believe disclosure is necessary to protect our legal rights or the safety of others.

All payment processing is handled by PCI-DSS compliant payment gateways. We do not store, process, or transmit credit or debit card details on our own servers.

Our website is hosted on Wix.com. Their privacy policy can be viewed at: https://www.wix.com/about/privacy

 

7. Cross-Border Transfers

Some of our service providers (including Wix.com) store or process data outside South Africa. Where this occurs, we ensure that appropriate safeguards are in place in accordance with Section 72 of POPIA, to provide a comparable level of protection to that afforded under South African law.

 

8. How Long We Keep Your Information

We retain your personal information only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. Booking records are generally retained for a minimum of five years for accounting and legal compliance purposes. Marketing consent records are retained until you withdraw consent.

 

9. Your Rights Under POPIA

You have the following rights in relation to your personal information:

  • Right of access: You may request a copy of the personal information we hold about you.

  • Right to correction or deletion: You may ask us to update, correct, or delete your personal information.

  • Right to object: You may object to the processing of your information for direct marketing purposes at any time.

  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing prior to withdrawal.

  • Right to lodge a complaint: If you are unhappy with how we handle your information, you may lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at hello@thehouseofyay.co.za. We will require verification of your identity (e.g. a copy of your ID document) before actioning requests relating to personal information.

 

10. Information Regulator

South Africa's supervisory authority for data protection matters is:

 

11. Children's Privacy

Our events and website are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe your child has provided us with personal information, please contact us immediately at hello@thehouseofyay.co.za and we will delete it promptly.

 

12. Information Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure. These measures are reviewed on an ongoing basis.

Where we engage third-party processors, we impose contractual obligations on them to maintain equivalent standards of security and confidentiality.

While we take every reasonable precaution, no method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we will notify you and the Information Regulator as required by POPIA in the event of a data breach that poses a risk to your rights.

 

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on our website and, where appropriate, notify you by email. The date at the top of this policy reflects when it was last revised.

We encourage you to review this policy periodically.

 

14. Contact Us

For any questions about this policy, to exercise your rights, or to raise a concern about how we handle your personal information, please contact our Information Officer:

  • Email: hello@thehouseofyay.co.za

  • Business: The House of Yay / Escape and Create

  • Location: Johannesburg, Gauteng, South Africa

bottom of page