Privacy Policy

Introduction

This Privacy Policy explains how mountain-starling collects, uses, stores, and protects personal information provided by visitors to our website and users of our services. We are committed to safeguarding your privacy and ensuring transparent data practices in accordance with the Protection of Personal Information Act (POPIA) and applicable international regulations.

Information We Collect

We may collect the following categories of personal information:

• Contact details including name and email address when you submit enquiry forms
• Service preferences and booking requests
• Communications you send to us via email or contact forms
• Technical information including IP address, browser type, and device information
• Usage data including pages visited, time spent on site, and navigation patterns

How We Use Your Information

Personal information collected is used for the following purposes:

• Responding to enquiries and processing booking requests
• Providing requested services and experiences
• Communicating relevant updates about your bookings
• Improving our website functionality and user experience
• Analysing website traffic patterns through anonymised data
• Complying with legal obligations

Legal Basis for Processing

We process personal information based on legitimate interests in operating our heritage services, fulfilling contractual obligations when you book services, and with your consent for communications. Where required by law, we process data to comply with legal obligations.

Data Sharing

We do not sell, trade, or rent personal information to third parties. Information may be shared with:

• Service providers who assist with website hosting and analytics, bound by confidentiality agreements
• Legal authorities when required by law or to protect our rights

Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include secure data transmission, access controls, and regular security assessments.

Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Enquiry data is typically retained for 24 months unless a longer period is required.

Your Rights

Subject to applicable law, you have the right to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator

Cookies

Our website uses cookies to enhance user experience and analyse traffic. For detailed information about cookies and how to manage them, please refer to our Cookies Policy.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these sites and encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website. Continued use of our services constitutes acceptance of the updated policy.

Contact Us

For questions regarding this Privacy Policy or to exercise your data rights, please contact us at [email protected] or write to: 45 Harbour Road, V&A Waterfront, Cape Town, 8001, South Africa.