Privacy policy

[DRAFT — must be reviewed by a lawyer before go-live.] South Africa's Protection of Personal Information Act (POPIA) requires this page, because the enquiry form collects personal information. The structure below covers POPIA's requirements; fill in the bracketed details.

Who is responsible for your information

[Registered name and address.] Our information officer is [name], contactable at [email address].

What we collect

When you send an enquiry we collect your name, email address, phone number, country of residence, travel dates, party size, and anything you write in the message field. Our server also records your IP address, browser type and the page you came from, as a record of the submission and to help block automated spam.

Why we collect it

To respond to your enquiry, to check availability and rates with the relevant lodge on your behalf, and to keep a record of our correspondence. We rely on your consent, given when you submit the form.

Who we share it with

We share the details necessary to answer your enquiry with the lodge or lodges concerned, and with transfer and activity operators where you have asked us to arrange those. [List any other processors — your email provider, hosting company.] We do not sell your information to anyone, ever.

How long we keep it

[State your retention period, for example: enquiries are retained for X years, after which they are deleted.]

How we protect it

The site runs over an encrypted HTTPS connection. Enquiries are stored in a password-protected database on our hosting provider's servers, accessible only to authorised staff.

Your rights

Under POPIA you may ask us what personal information we hold about you, ask us to correct it, ask us to delete it, and object to our processing of it. Write to [email address] and we will respond within a reasonable period. You also have the right to complain to the Information Regulator of South Africa.

Cookies

[If you enable Google Analytics, say so here and explain what it does. If you use no analytics and no cookies beyond the session cookie needed for the enquiry form, say that instead — it is a much shorter policy.]

Changes to this policy

[How you will notify people of changes. Add a "last updated" date.]