Skip to main content

Privacy Policy

Version: 1.0 | Last updated: March 23, 2026

1. Introduction

Elandsbaai Stays ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, in compliance with the Protection of Personal Information Act (POPIA) of South Africa.

2. Information We Collect

2.1 Personal Information

We may collect:

  • Identity Information: Name, surname, ID number (where required by law)
  • Contact Information: Email address, phone number, physical address
  • Account Information: Username, password (encrypted)
  • Payment Information: Bank account details, payment card information (processed securely by our payment provider)
  • Booking Information: Dates, guest counts, special requests
  • Property Information: For Owners: property details, bank verification documents

2.2 Automatically Collected Information

  • IP address and browser information
  • Device information and operating system
  • Usage data and browsing history on our Platform
  • Cookies and similar tracking technologies

3. How We Collect Information

We collect information through:

  • Direct submissions via forms and registrations
  • Booking processes
  • Communications with our support team
  • Cookies and similar technologies
  • Third-party services (payment processors, verification services)

4. Purpose of Processing (Lawful Basis)

Under POPIA, we process your personal information for the following lawful purposes:

  • Contractual Necessity: To process bookings and payments
  • Legal Obligation: To comply with tax and regulatory requirements
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For marketing communications (where you have opted in)

5. How We Use Your Information

We use your information to:

  • Process and manage bookings
  • Facilitate communication between Guests and Owners
  • Process payments and commissions
  • Verify identity and prevent fraud
  • Provide customer support
  • Send booking confirmations and updates
  • Comply with legal obligations
  • Send marketing communications (with your consent)

6. Information Sharing

We may share your information with:

  • Property Owners: Guest details necessary for bookings (name, contact info, dates)
  • Service Providers: Payment processors, hosting providers, email services
  • Legal Authorities: When required by law or court order
  • Business Transfers: In case of merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of sensitive data in transit and at rest
  • Secure password hashing
  • Access controls and authentication
  • Regular security assessments
  • PCI DSS compliant payment processing

8. Data Retention

We retain your personal information for:

  • Active accounts: As long as your account is active
  • Booking records: 5 years (for tax and legal compliance)
  • Inactive accounts: 2 years after last activity, then anonymized or deleted
  • Marketing data: Until you withdraw consent

9. Your Rights Under POPIA

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your information (subject to legal requirements)
  • Objection: Object to processing for direct marketing
  • Withdraw Consent: Withdraw marketing consent at any time
  • Complaint: Lodge a complaint with the Information Regulator

10. Cookies

We use cookies to:

  • Maintain your session and login status
  • Remember your preferences
  • Analyze Platform usage and improve performance
  • Provide personalized content

You can control cookies through your browser settings.

11. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies.

12. Children's Privacy

Our Platform is not intended for children under 18. We do not knowingly collect information from children.

13. International Transfers

Your information may be processed by service providers outside South Africa. We ensure appropriate safeguards are in place for such transfers.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Significant changes will be notified via email.

15. Contact Us

For privacy-related questions or to exercise your rights, contact us:

  • Email: privacy@elandsbaai.co.za
  • Physical Address: Elandsbaai, Western Cape, South Africa

You may also contact the Information Regulator of South Africa if you have concerns about our data practices.

16. Consent

By using our Platform, you consent to the collection and use of your information as described in this Privacy Policy.

Last Updated: March 2026