Privacy & Cookie Policy

Last updated: May 4, 2025

1. Introduction

Meta Bliss 369 (“we”, “us”, “our”) operates the Bliss 369 platform (“Service”). This Privacy & Cookie Policy explains what data we collect, how we use and protect it, your rights under applicable laws, and how we use cookies and similar technologies.

2. Information We Collect

Personal Data: Information you provide directly, such as name, email address, billing information, profile details, and communication preferences.

Usage Data: Automatically collected data about how you access and use the Service, including IP address, browser type, pages visited, device identifiers, and Firebase audit logs.

3. How We Use Your Information

• Provide, maintain, and improve our Service.
• Process transactions and send related information (booking confirmations, invoices).
• Communicate with you (newsletters, notices, support messages).
• Personalize and optimize your experience.
• Detect, prevent, and address technical issues and security threats.

4. Cookies & Tracking Technologies

We and our service providers use cookies, web beacons, and similar technologies to collect usage data and improve user experience. You can control cookies through your browser settings. Disabling cookies may impact functionality.

• Essential Cookies: Core functionality (login, security).
• Performance & Analytics: Site usage and performance (e.g., Google Analytics).
• Functional Cookies: Enhanced features (language, currency).
• Advertising & Targeting: Relevant ads and campaign measurement.

5. Data Retention & Deletion

We retain your personal data only as long as necessary to fulfill the purposes described in this Privacy & Cookie Policy or as required by law.

• Booking/payment logs, audit trails, and webhook payloads are retained for 5 years.
• After retention periods expire, data is securely deleted or anonymized.

6. Data Protection & Compliance

We comply with the EU General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA). We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Your Data-Subject Rights: You may, subject to applicable law:

• Access the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Request deletion of your personal data.
• Request portability of your data in a machine-readable format.

To exercise these rights, contact us using the details below.

7. Security Standards

We adhere to PCI DSS requirements for payment processing: we never store raw card data on our servers, and instead use hosted payment fields or tokenization via PayFast and PayPal. All sensitive data (including personal and financial information) is encrypted both at rest and in transit using industry-standard protocols (e.g., AES-256 at rest, TLS 1.2+ in transit).

8. Third-Party Services

We may share data with third-party service providers (e.g., payment processors, analytics tools). They are only permitted to use your data in connection with the services they perform for us.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or limit the use of your personal data. To exercise these rights, contact us using the details below.

10. Children’s Privacy

Our Service is not directed to individuals under 16. We do not knowingly collect personal information from children under this age. If you believe we have collected data from a child, please contact us for deletion.

11. Changes to This Policy

We may update this Privacy & Cookie Policy to reflect changes in practices, technology, or legal requirements. We will post the new policy here with an updated “Last updated” date.

12. Contact Us

If you have any questions or wish to exercise your rights, contact us at info@bliss369.com .