Privacy Policy

PNT is responsible for information used to administer CalCraft accounts, studio registrations, platform support, and platform operations.

Each studio is responsible for the client and team information it collects and uses to run its business. Where PNT processes that information on the studio’s behalf, PNT acts as its service provider, also called an operator under POPIA.

A studio may have its own privacy notice covering its services and how it uses information outside CalCraft.

Information is used to:

• Create accounts and keep users signed in.
• Review studio registrations and manage workspace access.
• Deliver enquiries and queue entries to the selected studio.
• Provide the studio’s client, scheduling, work, and financial-record features.
• Display information a studio chooses to publish.
• Respond to support requests and privacy enquiries.
• Protect the platform, investigate misuse, and meet legal obligations.

Depending on the activity, processing may be based on consent, steps needed to enter into or perform an agreement, a legal obligation, or a legitimate interest permitted by law.

Using CalCraft does not give a studio unrestricted permission to use your information for unrelated purposes.

Some information is needed for a feature to work. An account requires sign-in details, and a mobile service may require a service address. Without required information, the relevant feature or service may be unavailable.

Messages, pictures, and supporting details should be limited to what is needed for your request.

Device location is optional. You can search for studios without using “Near me”.

CalCraft uses a cookie named calcraft_session to keep you signed in. It lasts 14 days and is configured so that page scripts cannot read it.

Deleting or blocking this cookie may require you to sign in again or prevent access to authenticated features. The cookie’s expiry does not delete your account or studio records.

If you choose Google sign-in, Google handles its part of authentication under its own privacy policies.

Removing CalCraft’s connection through your Google account settings does not itself delete your CalCraft account, end an existing CalCraft session, or erase records held by a studio.

A studio may save an address and map pin. Its public page may display the street, apartment or unit, estate, and directions supplied by the studio. The saved map pin is not published on that page.

Public studio pages may also display the studio’s logo, service and product names, descriptions, and prices. Catalogue product pictures remain private in the current version.

Studio owners should check what they publish, particularly when operating from a home address.

When you select “Near me” and allow location access, your device location is used for that search.

CalCraft records payment amounts and methods entered by studios, including cash, card, EFT, or other.

CalCraft does not collect, hold, transfer, or refund this money and does not store payment-card numbers. Actual transactions are handled outside CalCraft by the studio and its chosen payment providers.

Do not include card numbers, passwords, PINs, or banking security credentials in notes, messages, or attachments.

CalCraft uses authentication, role-based permissions, studio-level access restrictions, and membership checks for private attachments.

Users must protect their sign-in details. Studio owners must manage team access and ensure that information is shared appropriately.

No online service can guarantee absolute security. If a security compromise occurs, PNT will take the steps and provide the notifications required by applicable law.

Information is retained for as long as necessary for its purpose or as otherwise permitted or required by law. Relevant considerations include operating an account or studio, completing work, resolving disputes, and meeting financial or legal recordkeeping requirements.

Declining or suspending a studio does not automatically delete its records. Account closure also does not automatically erase records a studio lawfully needs to retain.

There is currently no self-service studio deletion feature. Contact info@pntconsulting.co.za to request account closure or discuss deletion of information.

Where information is no longer lawfully needed, it must be deleted, destroyed, or de-identified as appropriate.

Depending on the infrastructure and services used, information may be processed outside South Africa.

International transfers must meet applicable POPIA requirements, including appropriate protection or another lawful basis for the transfer.

Contact info@pntconsulting.co.za for information about the processing locations relevant to your records.

Subject to applicable law, you may request access to your personal information, correction of inaccurate information, or deletion of information that is no longer lawfully retained.

You may also object to processing where the law allows and withdraw consent where processing relies on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.

For account or platform information, contact info@pntconsulting.co.za. For records collected by a studio, contact that studio. PNT can help identify the appropriate party.

We may need to verify your identity before releasing or changing information. If a request cannot be fulfilled, we will explain the reason, subject to applicable law.

You may lodge a complaint with South Africa’s Information Regulator at inforegulator.org.za.

Studios must only collect children’s information, or other sensitive information, when the law allows it and the information is needed for the service.