Privacy Policy

1. Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address, phone number, nationality, and other contact details.
• Reservation and stay details, including dates, apartment selection, guest numbers, preferences, and requests.
• Identity or guest-registration information where reasonably required for check-in, security, or legal compliance.
• Billing details, payment status, transaction references, refunds, and related financial records.
• The content and history of enquiries and communications sent through our website, email, or WhatsApp.
• Basic technical information such as IP address, browser type, device information, cookies, and website activity.

Payment card or bank details may be collected directly by a payment provider and are handled under that provider's privacy and security terms.

2. How we collect information

We collect information directly from you when you contact us, complete a form, make a reservation, pay for a stay, or communicate with our team. We may also receive relevant reservation information from booking platforms, payment providers, service providers, or a person making a booking on your behalf.

3. How we use information

We use personal information to:

• Respond to enquiries and create, administer, amend, or cancel reservations.
• Process payments, deposits, refunds, invoices, and booking records.
• Prepare for check-in, provide accommodation services, and support guests during their stay.
• Send booking confirmations, arrival instructions, service updates, and other operational messages.
• Maintain the safety and security of guests, staff, apartments, and systems.
• Meet accounting, tax, legal, regulatory, and record-keeping requirements.
• Improve our website, guest service, and business operations.
• Send marketing communications where you have consented or where otherwise permitted by law.

4. Email and WhatsApp communications

If you provide an email address or phone number, or contact us through one of these channels, we may use that channel to manage your enquiry, reservation, payment, arrival, stay, and departure. You can ask us to stop promotional messages at any time. We may still send necessary service or transaction messages relating to an active booking or legal obligation.

Communications delivered through third-party services such as WhatsApp are also subject to the relevant provider's own privacy terms.

5. When we share information

We do not sell personal information. We may share only the information reasonably necessary with:

• Authorised Beach Haus staff and contractors who need it to provide guest services.
• Booking, payment, hosting, communications, analytics, accounting, and operational service providers.
• Professional advisers, insurers, auditors, or authorities where required to protect rights, prevent harm, or comply with law.
• A successor or purchaser if the business or relevant assets are reorganised or transferred, subject to appropriate safeguards.

6. International processing

Some service providers may process information outside South Africa. Where this occurs, we take reasonable steps to use providers and arrangements that protect personal information in accordance with applicable data-protection requirements.

7. Retention and security

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including guest service, dispute resolution, security, accounting, tax, and other legal obligations. We use reasonable administrative, technical, and organisational safeguards, but no method of electronic storage or transmission is completely secure.

8. Cookies and website data

Our website may use essential cookies for security, sessions, and core functionality, together with limited analytics or preference technologies. You can manage cookies through your browser, although disabling essential cookies may affect website functionality.

9. Your privacy rights

Subject to applicable law, including South Africa's Protection of Personal Information Act ("POPIA"), you may ask to access or correct your personal information, request deletion where appropriate, object to certain processing, or withdraw consent where processing relies on consent. Some requests may be limited by legal or contractual record-keeping duties.

You may also submit a privacy complaint through the Information Regulator of South Africa.

10. Children's information

Reservations must be made by an adult. Where an adult provides information about a child travelling with them, we use it only as reasonably necessary to administer the stay, meet safety requirements, or comply with law.

11. Changes to this policy

We may update this policy when our practices, services, or legal obligations change. The latest version will be published on this page with its effective date.