PRIVACY POLICY

CAMp (Clip Africa Market Place) is operated by Prime Lens Studios (Pty) Ltd, a company registered in South Africa. We run a managed clipping and UGC marketplace connecting brands and agencies with creators/clippers across Africa. Registration is currently open in South Africa, Nigeria and Ghana, with posted content reaching audiences across the continent.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, use our apps, or participate in any campaign. It applies to brands, agencies, creators/clippers, and visitors.

Information you provide directly: full name, email address, cellphone number, country, date of birth/age, gender, profile picture, postal/physical address, company or business details (registration number, VAT/tax ID, representative details), bank or payout details (bank name, account number, branch code, or mobile-money provider and number), KYC identity documents (ID front/back, proof of address, bank confirmation letter, company registration documents, director IDs), and any messages you send to support.

Information collected automatically: IP address, device type, browser, operating system, approximate location, pages viewed, referring URLs, and usage data via cookies and similar technologies (see the Cookies section below).

Campaign information: campaign briefs, budgets, hashtags, source video URLs, platform post links (TikTok, Instagram Reels, YouTube Shorts, Facebook Reels), clip submissions, and view/view-log data used to verify performance.

To register and administer your account, verify your identity (KYC), and decide whether to grant or restrict access to the platform.

To operate campaigns: brief matching, clip review workflows, view verification, payout calculations, and escrow handling of campaign budgets.

To process payments and payouts through our payment partner PayFast, including refunds, chargebacks, and reconciliation.

To communicate with you about your account, campaigns, payouts, security, and policy changes, and to respond to support requests.

To measure and improve platform performance, debug issues, and conduct analytics.

To show you relevant advertising on Google and Meta platforms, including personalised ads where you have consented to marketing cookies.

To detect, prevent, and investigate fraud, fake views, and abuse, and to comply with our legal and regulatory obligations under POPIA (South Africa) and the NDPA (Nigeria).

We use cookies, local storage, and similar technologies for the purposes below. You can manage your preferences at any time from the cookie consent banner; your choice is stored on your device.

Essential cookies: required for the site to function (authentication, session, security, load balancing). These cannot be turned off.

Analytics cookies (Google Analytics): help us understand how visitors use the platform so we can improve it. Google collects aggregated, pseudonymous usage data. See how Google uses data at policies.google.com.

Advertising cookies (Google Ads & Meta/Facebook Pixel): allow us and our partners (Google and Meta) to measure ad performance, attribute campaign outcomes, and show you relevant ads on Google services and Meta platforms (Facebook, Instagram, Messenger). Meta and Google may use this data to build audience profiles and measure conversions.

Google Consent Mode v2: we implement Google Consent Mode v2, so analytics and ad storage default to denied until you consent. If you reject marketing cookies, ad-related signals are not stored and personalised ads are not served based on your activity on this site.

Third-party cookies are governed by the respective providers’ policies: Google Privacy Policy (policies.google.com/privacy) and Meta Privacy Policy (facebook.com/privacy).

Under POPIA, we process personal information with your consent, to perform a contract with you (running campaigns and payouts), to comply with a legal obligation (KYC/AML, tax, fraud prevention), and for our legitimate interests in operating a safe and reliable marketplace.

You may withdraw consent for non-essential processing (such as analytics and marketing cookies) at any time without affecting the lawfulness of processing before withdrawal.

We share personal information only as necessary to operate the platform and as described here, and never sell your personal information.

Payment processing: PayFast (and any successor payment provider) receives the data needed to process payments and payouts, subject to their privacy policy and PCI-DSS requirements.

Advertising partners: Google Ireland/Google LLC and Meta Platforms Ireland/Inc. receive limited data (e.g. conversion events, hashed identifiers) only when you have consented to marketing cookies, for ad measurement and personalisation on their platforms.

KYC and verification: identity document data is reviewed by authorised CAMp administrators and may be shared with verification or fraud-prevention providers where required.

Service providers: cloud hosting, analytics, email delivery, and support tooling vendors who process data on our behalf under written agreements.

Legal compliance: where required by law, court order, or to protect the rights, property, or safety of CAMp, our users, or the public.

Your information may be processed and stored in South Africa, Nigeria, and other countries where our infrastructure and partners operate (including the EU, US, and Ireland for Google and Meta). We rely on appropriate safeguards and the lawful bases above to ensure your data is protected during transfer.

We keep personal information only as long as needed for the purposes described here or to meet legal, accounting, KYC/AML, and tax requirements. KYC documents are retained for the period required by applicable anti-money-laundering law. Campaign and transaction records are retained for up to seven years for audit and tax purposes. You can request deletion of your data where retention is no longer required (see Your rights).

Under South Africa's Protection of Personal Information Act, 2013 (POPIA) and Nigeria's Nigeria Data Protection Act, 2023 (NDPA), you have the right to: (a) be informed that your personal information is being processed; (b) access and request a copy of your personal information; (c) rectify or correct inaccurate information; (d) request deletion ("erasure") of your personal information where retention is no longer required; (e) restrict or object to processing, including objection to processing for direct marketing; (f) data portability (to receive your personal information in a structured, commonly used format, under the NDPA); and (g) withdraw consent for non-essential processing such as analytics and marketing cookies, at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right not to be subject to automated decision-making that produces legal or similarly significant effects concerning you, and to be informed of the logic involved where such processing takes place.

Our Information Officer can be contacted through the support channels on the platform. We respond to rights requests within a reasonable period (generally 30 days) and may verify your identity before acting on a request.

Complaints: South African residents may lodge a complaint with the Information Regulator (inforeg@justice.gov.za · www.inforegulator.org.za). Nigerian residents may lodge a complaint with the Nigeria Data Protection Commission (complaints@ndpc.gov.ng · www.ndpc.gov.ng). You may contact us before approaching a regulator, and you retain the right to do so at any time.

The platform is not directed to children under 13. Creators/Clippers must be at least 13 years old to register, and minors require parental/guardian consent. We do not knowingly collect personal information from children under 13; if you believe we have, please contact us and we will delete it.

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews. KYC documents are stored in private storage with restricted access. No method of transmission or storage is fully secure, but we work to protect your information to the extent reasonably possible.

We may update this Privacy Policy to reflect changes in our practices, the law, or Google and Meta requirements. We will post the updated version on this page with a new "Last Updated" date. Material changes will be highlighted on the platform or communicated to you where appropriate.