Privacy notice

Volkswagen Group South Africa is the responsible party for the personal information collected through this booking system. One-eyed Jack operates the activation on their behalf, and Lumanaire operates this platform on One-eyed Jack's behalf. Both act only on documented instruction.

To make a booking we collect your first name, last name, email address and mobile number, together with the session you choose. We use these to hold your place, send your confirmation and QR code, contact you if anything about your session changes, and check you in on the day.

When you sign the track indemnity we also record the name you typed as your signature, the date and time, the version of the wording that was on screen, and the IP address and browser the signature came from. That record is what shows what was agreed to, and by whom. If an adult signs for a guest under 18, we record that adult's name too.

We do not collect your identity number, driver's licence number or date of birth, and we never ask for a copy of your licence.

Your name, email address and mobile number are required. Without them we cannot hold a place for you or get your confirmation to you.

Marketing consent is entirely optional and your booking is confirmed either way. If you leave that box unticked, nothing about your booking changes.

We process your booking information because it is necessary to perform the booking you asked us for, and for the legitimate interest of running a safe, capacity-managed track activity. This does not rely on your consent.

We only send you marketing if you tick the optional box, which is consent under section 69 of POPIA. You can withdraw it at any time using the unsubscribe link in any message, or by contacting us.

Volkswagen Group South Africa receives the booking and attendance record. One-eyed Jack and Lumanaire process it to run the event. Our service providers, Supabase for database hosting, Vercel for application hosting and Resend for email delivery, process it on our instruction. Some of these operate outside South Africa, and are bound by agreements requiring a level of protection comparable to POPIA.

Booking and attendance records are anonymised 90 days after the event, keeping only non-identifying information for reporting. Where you have given marketing consent, your details are handed to Volkswagen Group South Africa and deleted from One-eyed Jack and Lumanaire systems within 30 days of that handover.

You may ask what we hold about you, correct it, download it, or ask us to delete it, and you may object to processing. Email hello@lumanaire.co.za and we will respond within 30 days.

You also have the right to complain to the Information Regulator of South Africa at complaints.IR@justice.gov.za.

No decision about you is made by automated means. Access to your information is restricted to named staff, every access is logged, exports require a recorded reason, and your details never appear in a web address.