Privacy policy

We hold your data only for the duration the booking lifecycle requires.

What we collect

We collect the lead guest contact details, the names and ages of every guest in the party, the dates of the trip, and the dietary or accessibility notes the guest chooses to share.

We collect aggregate analytics on page navigation when the visitor opts in to analytics cookies. The analytics consent state is stored as a cookie named consent-state.

Why we collect it

We use the contact details to confirm the booking, to send pre-arrival notes, and to coordinate transfers. We use the guest names and ages to allocate rooms and to brief the activity team. We use the dietary and accessibility notes to brief the kitchen and the housekeeping team.

Retention

We hold your data only for the duration the booking lifecycle requires. Confirmed bookings persist indefinitely; non-confirmed proposals delete twenty-four months after their terminal status, through the scheduled job at src/lib/jobs/proposal-retention.ts.

Analytics events are sampled and redacted before they reach the analytics provider. Email addresses, phone numbers, card numbers, and South African ID numbers are stripped at the source.

Sharing and disclosure

We share booking details with the partner property when the trip composition includes a partner leg. We do not sell, trade, or rent your data to any third party. We disclose data to a regulator only when compelled by law.

Your rights

You may request a copy of the data we hold on you. You may request correction of any inaccuracy. You may request deletion of any data the booking lifecycle no longer requires. Direct any such request to the reservations team.