Privacy Policy – Timbavati Bookings
1. Introduction
Timbavati Bookings (hereinafter referred to as “we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA).
2. Information We Collect
We collect personal information necessary for providing our booking services, including:
-
Personal Details: Full name, identity number, date of birth, gender.
-
Contact Information: Telephone number, email address, postal address.
-
Booking Information: Dates of service, accommodation preferences, special requests.
-
Payment Information: Banking details for processing deposits and payments.
-
Communication Records: Correspondence via email, phone, or other communication channels.
3. Purpose of Collecting Personal Information
We collect and process your personal information for the following purposes:
-
To facilitate and manage bookings and related services.
-
To communicate with you regarding your bookings and other related matters.
-
To process payments and manage financial transactions.
-
To comply with legal and regulatory requirements.
-
To improve our services and customer experience.
4. Legal Basis for Processing
Under POPIA, we process your personal information based on the following legal grounds:
-
Consent: By providing your personal information, you consent to its processing for the purposes outlined in this policy.
-
Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party.
-
Legal Obligation: Compliance with legal obligations to which we are subject.
5. Sharing of Personal Information
We may share your personal information with third parties in the following circumstances:
-
Service Providers: To facilitate bookings, accommodations, and related services.
-
Legal Compliance: When required by law or to protect our rights and interests.
-
Business Transfers: In the event of a merger, acquisition, or sale of assets.
We ensure that any third parties with whom we share your personal information are compliant with POPIA and have appropriate safeguards in place.
6. Data Security
We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
-
Secure storage and transmission protocols.
-
Regular security assessments and audits.
-
Access controls and authentication mechanisms.
7. Data Retention
Your personal information will be retained for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Upon expiration of the retention period, your personal information will be securely deleted or anonymized.
8. Your Rights Under POPIA
You have the right to:
-
Access: Request confirmation of whether we hold your personal information and access to it.
-
Correction: Request correction of any inaccurate or incomplete personal information.
-
Deletion: Request deletion of your personal information, subject to legal and contractual limitations.
-
Objection: Object to the processing of your personal information under certain circumstances.
-
Withdraw Consent: Withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, please contact our Information Officer at [Insert Contact Details].
9. Contact Information
For any questions or concerns regarding this Privacy Policy or our data processing practices please contact us
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on our website with an updated effective date.