Privacy statement

Last updated: 13 July 2026.

Who is responsible

Primedia Proprietary Limited (“Primedia”) ("we", "us") is the responsible party under the Protection of Personal Information Act, 2013 (POPIA) and the data controller under the UK/EU General Data Protection Regulation (GDPR) for the personal information described here.

• Registered address: 15 Fredman Drive, Sandown, Sandton, 2196
  +27 11 475 1419

What we collect

We do not require an account to browse this site, and we do not sell personal information or use it for advertising.

Collected automatically when you visit:

• Analytics data via Google Analytics 4: the page you viewed, the page title, the full page URL, and the identifiers Google Analytics assigns through its own cookies. This tells us which pages are read, not who read them.
• Standard server logs kept by our hosting provider, which include your IP address and browser user-agent.
• Your IP address, held briefly in memory to rate-limit the press sign-in endpoint against abuse. It is not written to a database and does not survive a restart.

Collected only if you apply for, or hold, media accreditation:

• Your name, email address, organisation, accreditation role, and any notes our media team records about your accreditation.
• If you use the press sign-in, a sign-in link sent to your email address and a session cookie confirming you used it.

Cookies

Cookies are small files stored by your browser. This site sets two kinds.

• Analytics cookies, set by Google Analytics when you arrive, used to measure how the site is used. You can block them in your browser settings or by using a tracking blocker, and the site will continue to work normally.

We do not use advertising cookies, social-media tracking pixels, or cross-site profiling.

Why we may process it

• To operate and secure the site, including rate limiting — our legitimate interest in keeping the service available, and a legitimate POPIA justification.
• To administer media accreditation — necessary to take steps at your request and to perform our obligations to accredited media.
• To understand how the site is used, so we can improve it — our legitimate interest, and, where consent is required for analytics cookies, your consent.

Who else processes it

We use the following service providers. Each processes personal information only on our instructions.

• Microsoft Azure — website hosting and server logs.
• Google Analytics — website usage measurement.
• Sanity — the content management system that stores site content, including media accreditation records.

Where your information goes

These providers operate servers outside South Africa, including in the European Union and the United States. Where personal information is transferred across borders, we rely on the providers’ contractual safeguards, which are designed to give your information a level of protection comparable to that required by POPIA and the GDPR. [CONFIRM THE TRANSFER MECHANISM WITH LEGAL COUNSEL BEFORE PUBLISHING.]

How long we keep it

• Analytics data: for the retention period configured in Google Analytics, after which it is deleted by Google.
• Server logs: for the period our hosting provider retains them.
• Rate-limiting IP data: minutes, in memory only.
• Press sign-in sessions: seven days, or until you sign out.
• Media accreditation records: for the tournament and a reasonable period afterwards for accreditation history and audit, then deleted.

Your rights

Subject to the conditions in the applicable law, you may ask us to confirm what personal information we hold about you, to correct or delete it, to object to processing, or to restrict it. Where processing rests on consent, you may withdraw that consent at any time without affecting processing already carried out.

If you are not satisfied with our response, you may complain to the Information Regulator of South Africa at inforegulator.org.za. If you are in the EU or UK, you may instead complain to the supervisory authority where you live or work.

Security

The site is served only over HTTPS. A Content Security Policy restricts what the page may load and where it may send data. The press sign-in uses short-lived, single-use links rather than passwords, and its session cookie cannot be read by JavaScript. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the Information Regulator of a breach affecting your personal information where the law requires it.

Children

This site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes

We may update this statement as the site changes. The date at the top shows when it was last revised. Material changes will be highlighted on this page.