Privacy Policy

Privacy Policy

Last Updated: March 2026

We are committed to protecting your privacy and ensuring that your personal information is processed lawfully and transparently in accordance with the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA) of South Africa.

1. Information We Collect


We collect and process the following personal information to provide our services and marketing:

  • Contact Details: Name, email address, and phone number (collected via our booking forms).

  • Technical Data: IP address, browser type, and usage patterns (collected via cookies and Google Analytics).

2. Purpose of Processing


We use your information for the following specific purposes:

  • Service Delivery: To manage your bookings, send confirmation details, and provide safety updates.

  • Advertising Optimization: We use your data to create Audience Signals for Google Ads Performance Max campaigns. This helps us show relevant  content to people with similar interests to our customers.

3. Third-Party Disclosures & Cross-Border Transfers


We do not sell your data. However, we share information with specialized service providers to run our business:

  • Google (Ads & Analytics): Your data may be processed on servers located outside of South Africa (e.g., in the USA). We ensure these providers uphold data protection standards substantially similar to POPIA.

  • Booking Infrastructure: Data is processed through our website’s secure booking engine to finalise your reservation.

4. Direct Marketing & Your Rights


In line with Section 69 of POPIA, we only send electronic marketing to:

  1. Individuals who have given explicit opt-in consent.

  2. Existing customers, provided that the marketing is relevant to our business activities.

Your Rights:

  • Right to Object: You may opt-out of marketing at any time, free of charge, by contacting us directly.

  • Right to Access: You may request a copy of the personal information we hold about you.

  • Right to Correction: You may ask us to update or delete inaccurate data.

5. Security Safeguards


We implement appropriate technical and organisational measures to secure your data against unauthorized access, including encrypted booking portals and secure data management practices on our marketing devices.

6. Contact Our Information Officer


For any privacy-related inquiries or to exercise your rights under POPIA, please contact our designated Information Officer:

  • Name: Ian Coetsee

  • Email: ian@kayakclifton.co.za

  • Address: Clifton 4th Beach, Cape Town

PAIA MANUAL for Kayak Clifton

Prepared in terms of Section 51 of the Promotion of Access to Information Act 2 of 2000.

1. Introduction

This manual is intended to assist potential requesters in the procedure to be followed when requesting access to records from Kayak Clifton, as per the constitutional right of access to information.

2. Business Contact Details

 
  • Head of Body & Information Officer: Ian Coetsee

  • Physical Address: Clifton 4th Beach, Cape Town, 8005

  • Email Address: ian@kayakclifton.co.za

3. The PAIA Guide


A Guide on how to use PAIA is available in all official languages from the Information Regulator.

  • Website: https://inforegulator.org.za/

  • Contact: JD House, 27 Stiemens Street, Braamfontein, Johannesburg.

4. Voluntary Disclosure (Automatic Availability)


The following records are automatically available without a formal request:

  • Pricing for the various activities is published on the website.

  • Publicly accessible website content and marketing brochures.

  • Terms and Conditions for activity participation.

5. Description of Records Held (Section 51(1)(e))


We maintain records on the following subjects:

  • Financial Statements (not available to the public).

  • Operational: Safety protocols and SAMSA permits.

  • Marketing: Customer lists used for Google Ads Performance Max campaigns.

  • Customer Records: Booking history, indemnity forms, and contact details.

6. Processing of Personal Information (POPIA Section)


In accordance with the Protection of Personal Information Act:

  • Purpose of Processing: To facilitate bookings, process payments, ensure safety on tours, and conduct digital marketing (including Google Ads Audience Signals).

  • Categories of Data Subjects: Customers and service providers.

  • Categories of Information: Names, contact numbers, email addresses, and payment confirmation.

  • Recipients of Information: Google (for analytics/ads) and relevant IT/Safety partners.

  • Cross-Border Transfers: Data may be stored on secure cloud servers (e.g., Google) outside of South Africa.

  • Security Measures: We use encrypted booking platforms and secure, password-protected devices to handle data.

7. Procedure for Requesting Information


To request access to a record, you must:

  1. Complete Form 02 (available on the Information Regulator’s website).

  2. Submit the form to the Information Officer at the email address provided in Section 2.

  3. Pay the prescribed Request Fee of R140 (as of 2026, for private bodies), unless exempt.

  4. If granted, an Access Fee (Form 03) will be calculated based on the time and resources required to reproduce the record.

 
Tags :
Share This :
Scroll to Top