Privacy
Policy.

Who We Are

Ragazzi is a private members listening bar located in Pretoria East, South Africa. For the purposes of POPIA, Ragazzi is the Responsible Party in respect of any personal information collected through this website or through membership applications.

References to "we", "us" or "our" in this policy refer to Ragazzi. References to "you" refer to any person who submits personal information to us, whether through this website, by email, or in person.

Key Definitions

The following terms are used throughout this policy. They carry the same meaning as defined in POPIA.

• Personal information Any information that identifies you or can be used to identify you — including your name, email address, phone number, and any correspondence you send us.
• Processing Any operation performed on personal information, including collection, storage, use, sharing, deletion, or any other handling.
• Responsible Party The entity that determines the purpose and means of processing personal information. That is Ragazzi.
• Data Subject The person to whom the personal information relates. That is you.
• POPIA The Protection of Personal Information Act 4 of 2013, as amended, which governs the lawful processing of personal information in South Africa.
• Information Regulator The independent body established under POPIA to oversee compliance and handle complaints in South Africa.

What We Collect

We collect only the personal information that is necessary for the purposes described in this policy. We do not collect special personal information as defined in POPIA (such as race, health information, or biometric data).

The categories of personal information we collect include:

• Full name
• Email address
• Phone number (where provided voluntarily)
• Any information you include in a membership application or enquiry message
• Basic technical information such as your IP address and browser type, collected automatically when you visit the website

We do not collect your payment details. All financial transactions, if applicable in future, will be processed through compliant third-party payment processors.

Why We Collect It

POPIA requires that personal information is only collected for a specific, explicitly defined and legitimate purpose. We collect your personal information for the following purposes only:

• To process and review membership applications for The Room
• To send members notifications about upcoming drops, events and exclusive releases
• To respond to general enquiries sent to us by email or through the site
• To maintain a record of members and their access permissions
• To improve the functionality and performance of this website
• To comply with any applicable legal obligations

We will not use your personal information for any purpose other than those listed above without first obtaining your consent or unless we are required to do so by law.

Legal Basis for Processing

Under POPIA, we are only permitted to process your personal information if we have a lawful basis for doing so. We process your personal information on the following grounds:

• Your consent — when you submit a membership application or enquiry, you consent to us processing your information for that purpose.
• Contractual necessity — where processing is necessary to manage your membership or fulfil a commitment we have made to you.
• Legitimate interest — where we have a genuine business reason to process your information, such as improving site security or responding to your communications, provided this does not override your rights.
• Legal obligation — where we are required by South African law to retain or disclose certain information.

How We Use Your Information

Your personal information is used internally by Ragazzi staff only. We do not sell, rent or trade your personal information to any third party for commercial purposes.

We may share your information with trusted third parties only in the following limited circumstances:

• With email service providers used to deliver member communications, subject to appropriate data processing agreements
• With our website hosting provider (Afrihost), who may have incidental access to data stored on their infrastructure
• With law enforcement, regulatory authorities or courts where we are legally required to do so
• With professional advisors such as lawyers or auditors, where strictly necessary and subject to confidentiality obligations

Any third party with whom we share your personal information is required to handle it in accordance with POPIA and to use it only for the specific purpose for which it was shared.

How Long We Keep It

We retain your personal information only for as long as is necessary for the purpose for which it was collected, or as required by law.

• Membership records are retained for the duration of your membership and for a period of three years thereafter.
• General enquiry correspondence is retained for twelve months from the date of the last communication.
• Website technical data (such as server logs) is retained for a maximum of ninety days.

When your personal information is no longer required, we will delete or anonymise it in a secure and irreversible manner.

Your Rights

POPIA grants you the following rights in relation to your personal information. You may exercise any of these rights at any time by contacting us at members@www.ragazzi.co.za.

We will respond to all rights requests within a reasonable time and, where required by POPIA, within 30 days of receipt.

How We Protect Your Information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS encryption for all data transmitted through this website
• Access controls limiting who within Ragazzi can access personal information
• Use of reputable hosting infrastructure with its own security protocols
• Regular review of our data handling practices

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights, we will notify both you and the Information Regulator as required by POPIA.

Cookies and Site Data

This website uses minimal browser storage for functional purposes only. Specifically:

• sessionStorage — used to remember whether you have seen the opening intro sequence and whether you have unlocked The Room during your current browser session. This data is never transmitted to us and is deleted automatically when you close your browser tab.

We do not use tracking cookies, advertising cookies, or any third-party analytics tools that collect personally identifiable information. We do not currently use Google Analytics or any equivalent service.

Children's Privacy

Ragazzi is an adults-only venue. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information to us, please contact us immediately at members@www.ragazzi.co.za and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. When we make changes, we will update the effective date at the top of this page. If changes are material, we will notify members by email.

Your continued use of this website or your continued membership after any changes constitutes acceptance of the updated policy.

Complaints and the Information Regulator

If you have a concern about how we handle your personal information, please contact us first. We take all complaints seriously and will respond within 10 business days.

If you are not satisfied with our response, you have the right to lodge a complaint directly with the Information Regulator of South Africa: