CONTACT US

Privacy Policy

Last updated: 29 September 2026

1. Introduction

Goliath & Goliath respects your privacy and takes the protection of your personal information seriously. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website, submit an enquiry, or book one of the entertainers, MCs or facilitators on our roster.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”). Where this Policy refers to “personal information”, “processing”, “data subject”, “responsible party” or “operator”, those terms carry the meanings given to them in POPIA.

By using this website you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the website or submit information to us.

2. Who We Are — The Responsible Party

The responsible party for the processing of your personal information is:

  • Registered name: [REGISTERED ENTITY NAME — e.g. Goliath & Goliath (Pty) Ltd]
  • Trading as: Goliath & Goliath
  • Company registration number: [COMPANY REGISTRATION NUMBER]
  • VAT number: [VAT NUMBER, IF REGISTERED]
  • Physical address: [STREET ADDRESS, SUBURB, CITY, POSTAL CODE, South Africa]
  • Postal address: [POSTAL ADDRESS]
  • Email: connectwithus@goliathandgoliath.com
  • Telephone: [TELEPHONE NUMBER]
  • Website: [https://www.goliathandgoliath.co.za]

3. Our Information Officer

As required by sections 55 and 56 of POPIA, we have designated an Information Officer who is responsible for ensuring that we comply with the Act, for dealing with requests made to us under POPIA and the Promotion of Access to Information Act 2 of 2000 (“PAIA”), and for working with the Information Regulator.

  • Information Officer: [FULL NAME OF INFORMATION OFFICER]
  • Designation: [JOB TITLE]
  • Email: [informationofficer@goliathandgoliath.com]
  • Telephone: [TELEPHONE NUMBER]

Our Information Officer is registered with the Information Regulator of South Africa. Please direct all privacy questions, access requests, objections and complaints to the Information Officer using the details above.

4. The Personal Information We Collect

4.1 Information you give us directly

Contact form. When you complete the form on our Contact Us page we collect your name, your email address and the content of your message.

Booking and talent enquiry form. When you complete the form on our Book Talent page we collect your name, your email address, the talent or entertainer you are enquiring about, and any details you provide about your event, brand or production.

Correspondence. If you email, telephone or message us on social media, we keep a record of that correspondence and any personal information it contains.

Contracting information. If an enquiry progresses to a confirmed booking, we collect the information needed to conclude and perform the agreement, which may include your company name, VAT number, billing address, the name and contact details of your representatives, event logistics and banking or payment details.

4.2 Information we collect automatically

When you browse the website, our hosting infrastructure and analytics tools automatically collect technical information, including:

  • your IP address, which may be truncated or anonymised by our analytics provider
  • your browser type, version and language, and your operating system and device type
  • the pages you view, the time you spend on them and the order in which you view them
  • the website or search engine that referred you to us
  • the approximate geographic region derived from your IP address

This information is collected in aggregate and pseudonymised form and is used to understand how the website performs. We do not use it to try to identify you personally.

4.3 Information from third parties

If you interact with our content on Facebook, Instagram, LinkedIn, X or TikTok, those platforms may provide us with aggregated, de-identified audience and engagement statistics. We receive these as reports about groups of people, not as profiles of individuals. Each platform’s own privacy policy governs the information it holds about you.

4.4 Special personal information and children’s information

We do not seek special personal information as defined in section 26 of POPIA — such as information about your religious beliefs, race, ethnic origin, trade union membership, political persuasion, health, sex life, biometrics or criminal behaviour. Please do not include such information in a form or message unless we have specifically asked for it and explained why we need it.

5. How We Use Your Personal Information

We use your personal information to:

  • respond to your enquiry and give you the information you asked for
  • match your brief to suitable talent on our roster and prepare quotations
  • conclude, administer and perform booking agreements, including invoicing and payment
  • communicate with you about a confirmed booking, including logistics and scheduling
  • keep records of our dealings with you as required by law
  • maintain, secure and improve the website and diagnose technical faults
  • measure which pages, campaigns and talent profiles our audience engages with
  • send you marketing communications, where you have consented or where the law otherwise permits it
  • comply with our legal, tax, accounting and regulatory obligations
  • establish, exercise or defend legal claims

We do not sell your personal information, and we do not make automated decisions about you that have legal consequences for you.

6. Our Lawful Basis for Processing

Section 11 of POPIA requires a lawful justification for every processing activity. We rely on the following:

  • Consent — for marketing communications, and for analytics and marketing cookies that are not strictly necessary. You may withdraw your consent at any time.
  • Performance of a contract — where processing is necessary to conclude or carry out a booking agreement with you or with the organisation you represent.
  • Legal obligation — where a law requires us to process or retain information, for example tax and company records.
  • Legitimate interests — for the ordinary operation, security and improvement of our business and this website, where those interests do not override your rights.
  • Protection of a legitimate interest of the data subject — where processing protects your own interests, for example confirming event arrangements.

Where we rely on consent, refusing or withdrawing it will not affect any processing we carried out lawfully before you withdrew it, and will not prevent us from responding to an enquiry you have already sent us.

7. Cookies and Similar Technologies

A cookie is a small text file placed on your device by a website. We also use similar technologies such as pixels, tags and local storage. Together these help the website function, remember your preferences and tell us how our content performs.

7.1 The categories of cookies we use

Strictly necessary cookies. Required for the website to work. They keep your session alive, remember your cookie choices, support the contact and booking forms, and protect against form abuse. These are set by WordPress and Elementor. Because the site cannot function without them, they are placed without consent, as POPIA permits.

Analytics and performance cookies. Set by Google Analytics 4 to tell us how many people visit, which pages and talent profiles they view, how they found us and where they leave. The data is aggregated and pseudonymised. We enable IP anonymisation. Requires your consent.

Marketing and advertising cookies. Set by the Meta Pixel (Facebook and Instagram), the TikTok Pixel and the LinkedIn Insight Tag to measure whether our campaigns lead to enquiries, and to build audiences so that we can show relevant advertising to people who have shown interest in our work. These cookies can be used to build a profile of your interests across websites. Requires your consent.

Functional and preference cookies. Remember choices you make, such as an embedded video player’s settings. Requires your consent.

7.2 Third-party content embedded in our pages

Some pages embed content hosted by other companies — for example showreels served from YouTube, or social media feeds. When that content loads, the provider may set its own cookies and receive your IP address. We do not control those cookies. Please refer to the provider’s own privacy policy.

7.3 How to control cookies

  • On our website. Use the cookie banner or preference link to accept or decline each non-essential category. You can change your choice at any time.
  • In your browser. Every major browser lets you block or delete cookies. Blocking strictly necessary cookies will stop parts of this website from working, including the contact and booking forms.
  • Opting out of analytics. Google provides a browser add-on that prevents Google Analytics from collecting your data, available at tools.google.com/dlpage/gaoptout.
  • Opting out of social advertising. You can adjust advertising preferences in your Facebook, Instagram, TikTok and LinkedIn account settings.

8. Who We Share Your Information With

We share personal information only where it is necessary, and only with parties who are bound to protect it. Where a third party processes information on our behalf, POPIA treats it as our operator, and we require a written undertaking to process only on our instruction and to keep the information confidential and secure.

  • Talent on our roster. When you enquire about a specific entertainer, MC or facilitator, we share the details of your brief with them so that they can confirm availability and suitability.
  • Website hosting and infrastructure providers. They store the website and the information submitted through it.
  • Email and communication providers. They deliver and store our correspondence with you.
  • Analytics and advertising platforms. Google, Meta, TikTok and LinkedIn, as set out in section 7.
  • Professional advisers. Our accountants, auditors, insurers and attorneys, where they need the information to advise us.
  • Payment and banking providers. To process payments relating to a booking.
  • Authorities and regulators. Where we are required by law to disclose information, or where disclosure is necessary to establish or defend a legal claim.

We do not sell, rent or trade your personal information, and we do not share it with third parties for their own independent marketing.

9. Sending Information Outside South Africa

Some of the service providers listed above — in particular our analytics, advertising and email providers — store and process information on servers outside South Africa, most commonly in the European Union and the United States.

Section 72 of POPIA permits such a transfer only in defined circumstances. We transfer personal information across borders only where at least one of the following applies: the recipient is subject to a law, binding corporate rules or a binding agreement that gives effect to principles of lawful processing substantially similar to POPIA; you have consented to the transfer; the transfer is necessary to perform a contract with you; or the transfer benefits you and it is not reasonably practicable to obtain your consent.

10. How Long We Keep Your Information

We keep personal information only for as long as we have a lawful reason to, and then delete or de-identify it.

  • Enquiries that do not lead to a booking — up to 24 months from your last contact with us, so that we can pick up the conversation if you come back to us.
  • Booking and contract records — at least five years after the end of the financial year in which the booking took place, as required by the Companies Act and tax legislation.
  • Marketing consent records — for as long as you remain subscribed, and for a reasonable period afterwards to prove that you consented and later opted out.
  • Website analytics — in line with our analytics provider’s retention setting, ordinarily 14 months.
  • Correspondence — for as long as needed for the matter it relates to, and any applicable prescription period thereafter.

Where a law requires a longer retention period, or where the information is needed for pending or contemplated legal proceedings, we keep it for that longer period.

11. How We Keep Your Information Safe

Section 19 of POPIA requires us to secure the integrity and confidentiality of personal information through appropriate, reasonable technical and organisational measures. Ours include:

  • encryption of traffic between your browser and our website using HTTPS/TLS
  • access to personal information restricted to staff who need it to do their work
  • individual accounts with strong authentication for everyone who can access our systems
  • keeping WordPress, Elementor, plugins and server software patched and up to date
  • regular backups, stored securely and tested for restoration
  • written undertakings from our operators that they will protect the information
  • an internal process for identifying, containing and reporting security compromises

No system is completely secure. If a security compromise affects your personal information, we will notify you and the Information Regulator as soon as reasonably possible after discovering it, as section 22 of POPIA requires.

12. Your Rights as a Data Subject

POPIA gives you the following rights. Exercising them is free, except that we may charge a prescribed fee for providing a copy of the information we hold.

  • The right to be told what we hold about you — you may ask us to confirm, free of charge, whether we hold personal information about you, and to give you a description of it and of the third parties who have had access to it (sections 23 and 24).
  • The right to have it corrected or deleted — you may ask us to correct information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, or to delete or destroy it where we no longer have authority to keep it (section 24).
  • The right to object to processing — where we rely on legitimate interests or on the protection of your own interests, you may object on reasonable grounds, and we must then stop processing unless a law requires us to continue (section 11(3)).
  • The right to withdraw your consent — at any time, for anything we do on the basis of your consent.
  • The right to stop receiving direct marketing — at any time, and without giving a reason (section 69).
  • The right not to be subject to a decision based solely on automated processing where that decision has legal consequences for you (section 71). We do not make such decisions.
  • The right to complain — to us, and to the Information Regulator (section 74).

How to exercise your rights

Email our Information Officer at [informationofficer@goliathandgoliath.com] with your name, contact details and a clear description of what you are asking for. A request for access to, or correction of, your information must be made on the form prescribed by the Regulations Relating to the Protection of Personal Information, 2018 — Form 2 for a request for correction or deletion. Our Information Officer will send you the current form on request and help you complete it.

We may ask you for proof of identity before acting on a request, so that we do not disclose your information to someone else. We will respond within a reasonable time and in any event within 30 days, and will tell you if we need longer and why.

13. Direct Marketing

We will only send you marketing about our talent, services and events by email, SMS or automated call where you have given us your consent, or where you are an existing customer and we are marketing similar services to you, as section 69 of POPIA and section 45 of ECTA allow.

Every marketing message we send will identify us as the sender, will give a valid address to reply to, and will include a clear way to unsubscribe. You can opt out by using the unsubscribe link in any message, or by emailing connectwithus@goliathandgoliath.com. We will action the request without charge.

If you have not dealt with us before and you ask us not to contact you again, we will record that objection and honour it.

14. Children’s Personal Information

This website is not directed at children, and we do not knowingly collect the personal information of a child under the age of 18 without the prior consent of a competent person, as sections 34 and 35 of POPIA require.

If you are under 18, please ask a parent or guardian to contact us on your behalf. If we learn that we hold a child’s personal information without the necessary consent, we will delete it. If you believe we hold information about your child, please contact our Information Officer and we will address it promptly.

15. Lodging a Complaint with the Information Regulator

Please raise any concern with our Information Officer first — we would like the chance to put it right. If you are not satisfied with our response, you have the right to lodge a complaint with the regulator.

The Information Regulator (South Africa)

  • Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
  • Postal address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
  • Telephone: 010 023 5200
  • General enquiries: enquiries@inforegulator.org.za
  • POPIA complaints: POPIAComplaints@inforegulator.org.za
  • PAIA complaints: PAIAComplaints@inforegulator.org.za
  • Website: inforegulator.org.za

16. Changes to This Policy

We may update this Policy when our practices, our technology or the law changes. The “last updated” date at the top of the page always reflects the current version. Where a change materially affects how we handle your personal information, we will tell you directly or place a prominent notice on the website before it takes effect. Please check back from time to time.

17. Contact Us

Questions about this Policy, or about how we handle your personal information:

  • Information Officer: [FULL NAME] — [informationofficer@goliathandgoliath.com]
  • General enquiries: connectwithus@goliathandgoliath.com
  • Telephone: [TELEPHONE NUMBER]
  • Address: [FULL PHYSICAL ADDRESS]