Privacy Policy
Jurisdiction: ZA · aligned to the Protection of Personal Information Act (POPIA)
Lusty is a marketing and advertising platform — nothing more.
- Lusty is a marketing company: it markets and advertises the listings that independent, self-employed companions and venues publish themselves.
- Lusty is not an agency. It is not a party to any booking, arrangement or transaction between members and companions, and it employs, manages, represents and directs no one.
- Lusty takes no commission on arrangements. Wallet and membership fees pay for advertising, listing and membership services only.
- Booking and messaging tools are scheduling and communication aids between the parties — every arrangement, and anything agreed or paid under it, is solely between the consenting adults who make it (18+).
What we collect
Account details (name, email, optionally a mobile number), the content you publish, in-platform messages, booking records, billing records for plans and fees, and technical data (IP address, device and browser information) kept for security and abuse prevention. For verification: your identification document and a liveness selfie.
Verification documents
Verification documents are encrypted at rest, stored on a private disk, and visible only to a reviewer during review — through short-lived signed links that expire. They are never shown on a profile and never served from a public URL. Verification data is retained only as long as the law and our re-verification cycle require, then destroyed.
How we use it
To operate the platform: publish and verify listings, run messaging and bookings, process plan and fee payments you initiated, keep the service secure, prevent duplicate and fraudulent accounts, and comply with legal obligations. We do not sell your personal information.
Sharing
Only with processors that run the service for us (hosting, storage, search, email) under instruction, and only where the law requires. Your contact details are shown to other users only as you choose: masked until you reveal them, with Pro members able to see contact details on listings per the plan terms.
Your rights under POPIA
You may request access to your personal information, correct it, delete your account (a full export — DSAR — and deletion are built into settings), object to processing, and withdraw consent. Deletion removes your account and reveals; records we must keep for legal purposes (billing, moderation, legal holds) are retained in minimal form only.
Security
Encryption in transit and at rest for sensitive stores, access controls with audit logging, and panic-mode controls that let a listing hide instantly. No system is perfect — report anything suspicious and we will act.
Contact
Privacy requests go through the in-app DSAR tool or the report page; the operator is the responsible party for POPIA purposes.