Privacy policy

We hold your data only for the duration the booking lifecycle requires.

What we collect

We collect the lead guest contact details, the names and ages of every guest in the party, the dates of the trip, and the dietary or accessibility notes the guest chooses to share.

We collect aggregate analytics on page navigation when the visitor opts in to analytics cookies. The analytics consent state is stored as a cookie named consent-state.

Why we collect it

We use the contact details to confirm the booking, to send pre-arrival notes, and to coordinate transfers. We use the guest names and ages to allocate rooms and to brief the activity team. We use the dietary and accessibility notes to brief the kitchen and the housekeeping team.

Retention

We hold your data only for the duration the booking lifecycle requires. Confirmed bookings persist indefinitely; non-confirmed proposals delete twenty-four months after their terminal status, through the scheduled job at src/lib/jobs/proposal-retention.ts.

Analytics events are sampled and redacted before they reach the analytics provider. Email addresses, phone numbers, card numbers, and South African ID numbers are stripped at the source.

Advertising measurement

We advertise on Google. When an enquiry naming Makakatana Bay Lodge is submitted we report one conversion to Google Ads so we can tell which advertising produced it. An enquiry naming only our partner lodges reports nothing. No advertising script is loaded on any other page of this site; it is fetched on the page that confirms an enquiry and not before.

We send the advertising account, the conversion, and nothing more. We do not send your name, your email address, your phone number, or your enquiry reference. Google consent mode is set to denied for advertising storage, advertising personalisation, advertising user data, and analytics storage, so the report stores nothing on your device and reads nothing from it. We build no remarketing or audience list, and we ask for no cross-site signal.

Google’s own script adds the address of the page to its report. We instruct it to send the enquiry page without the details in its web address, without the page you came from, and without the page title, so the lodge you were enquiring about, your dates, and the size of your party stay with us. We do not control what Google’s script does beyond that instruction.

Sharing and disclosure

We share booking details with the partner property when the trip composition includes a partner leg. We do not sell, trade, or rent your data to any third party. We disclose data to a regulator only when compelled by law.

Your rights

You may request a copy of the data we hold on you. You may request correction of any inaccuracy. You may request deletion of any data the booking lifecycle no longer requires. Direct any such request to the reservations team.