When does this Policy apply?
- You agree that this policy will apply if you access or use our website at https://biggestleaftravel.com. When registering and making any enquiries or reservations on our site, as appropriate, you may be asked to enter your name, email address or other details to help you with your experience. This policy will apply to you, and will create a legally binding contract between us, whenever you use or access our website.
- Our commitment. This policy is important to us. We are committed to taking steps to protect your privacy when you use our website and implementing business practices that comply with all relevant legislation.
What information do we collect?
- What information is collected. We generally store and use the following information: your first name(s), surname, address, phone numbers, email address, other personal identification information (such as identity document or passport numbers) or IP address or cookie information, location information, demographic information including your age and gender, health-related information, and any other information which we reasonably need to perform our obligations in terms of the agreement with you when you use our services.
How do we use your information?
- How we use your information. We use your information to provide our website and services to you and generally for purposes of our relationship. We may process the information we collect from you when you register, make any enquiries or reservations, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features. We may use your information for other purposes if the law allows for it, or if you consent to it, or if it is in the public interest.
- Legal basis for processing information: Our legal basis for collecting and using the personal information described in this policy depends on the personal information we collect and the specific context in which we collect it.
6.1. Accordingly, we may process personal information because:
6.1.1. We need to perform a contract with you;
6.1.2. You have given us consent to do so;
6.1.3. The processing is in our legitimate interest to offer a specific service when that legitimate interest is not overridden by your rights;
6.1.4. To comply with the law.6.2. If there is a different legal basis that would permit us to continue processing your personal information after withdrawing consent, we will notify you of that legal basis at the time.
- Purposes for processing information. We will only process adequate and relevant information to:
7.1. Perform in terms of our contract with you;
7.2. Operate and manage your account and to process your transactions quickly;
7.3. Monitor and analyse our business;
7.4. To respond to your customer service requests;
7.5. Contact you by e-mail, short-message-service, or other means to tell you about our services and promotional offers (you can always opt out from future marketing);
7.6. To identify, develop or improve products that may interest you;
7.7. Carry out market research, business and statistical analysis;
7.8. To ask for ratings and reviews of services or products, and carry out audits;
7.9. To follow up with you after correspondence (live chat, email or phone enquiries);
7.10. Perform other administrative and operational tasks like testing our processes and systems;
7.11. Comply with our regulatory or other obligations.
- Cross-border flow of information.8.1. We may transfer your information to foreign countries mainly for retention purposes or if our service providers are cross border or use systems cross border. If you continue to use our website, you expressly agree that we may transfer the information cross border for these purposes. We will only share information cross border to recipients who have similar laws like POPI that apply to them, or who entered into a written agreement with us to include the relevant POPI principles.
- Children’s information and special personal information. We do not intentionally collect or use information of children (persons under the age of 18 years) unless with consent. Our intention is to only process information of children with the consent of a competent person (someone like the parent or guardian) or if the law otherwise allows or requires us to process such information.
- Sharing of personal information. In general, we may share your information with our affiliates, third party service providers, payment gateways, regulatory and governmental authorities or tax authorities (if we are requested by them to do so), and any other third party if the law requires from us to share it. We will keep your personal information confidential and only share it with others in terms of this policy, or if you consent to it, or if the law requires from us to share it. We have trusted relationships with carefully selected third parties who perform services for us. All these service providers have a contract with us in terms of which they have a legal obligation to secure your personal information and to use it only in a way that we permit.
How do we protect your information?
- You have the following rights: 11.1. You may require us to erase your information. If you so require, we will erase your information, except if the law allows or permits us to retain such information.11.2. You have the right to access, update, or delete the personal information we have on you.11.3. You have the right to have your personal information rectified if that information is inaccurate or incomplete.11.4.You have the right to object to our processing of your personal information.11.5. You have the right to request that we restrict the processing of your personal information.11.6. You have the right to be provided with a copy of the personal information we have on you in a structured, machine-readable and commonly used format.
11.7. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.
- To exercise any of the above rights, kindly notify us by sending an email to [email protected].
- Lodging a complaint.
13.1. If you believe we are using your information unlawfully, you may lodge a complaint to the Information Regulator with the following contact details:
The Information Regulator (South Africa)
316 Thabo Sehume Street
Tel: +27(0)12 406 4818
Email: [email protected]
13.2. In addition, if you a citizen of the European Union, you may submit a complaint regarding the processing of your personal information to the EU data protection authorities (each a “DPA”). The following link may assist you in finding the appropriate DPA: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
- Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible. We are committed to implement appropriate technical and other security measures to protect the integrity and confidentiality of your information. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology.
- Third parties, like payment gateways, may collect your payment details via our website to ensure that you transact securely with us. Only the gateway provider will store and process these details, they are not stored or processed on our servers.
- Security breach. We will report any security breach to the Information Regulator and to the individuals or companies involved withing 5 business days of becoming aware of such breach. If you want to report any concerns about our privacy practices or if you suspect any breach regarding your information, kindly notify us by sending an email to [email protected].
Retention of information
- Retention of information. We retain information in accordance with the required retention periods in law or for legitimate business purposes. We will only retain your information for the purposes explicitly set out in this policy. We may keep information indefinitely in a de-identified format for statistical purposes. This policy also applies when we retain your information.
Do we use “cookies”?
- Cookies enable us to improve our service to you, compile aggregate data regarding our site traffic and interactive and usage patterns, store information about your preferences and recognise when you return to our website.
- In instances where we collect and store information about your location, we may convert your Internet Protocol address or mobile GPS data into a rough geo-location, allowing us to use this information to improve and personalise our services for you. We may also use trusted third-party services that track this information on our behalf.
What if cookies are disabled in your browser?</h2?
- You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
Can you opt-out of communications?
- You can opt-out of receiving communications from us at any time. Simply click on the “unsubscribe” link at the bottom of any email received from us.
Third-party disclosure and links
- We do not sell, trade, or otherwise transfer to outside parties your personal information.
- Links on our website. Our website may include links to other applications or third party websites which do not fall under our control. We cannot accept any responsibility for your privacy or the content of these applications, but we display these links in order to make it easier for our visitors to find information about specific subjects.
- Social Media. Our website may connect to various social media sites or applications, including Facebook, Twitter, LinkedIn, Instagram and Google+. If you want to use our website for social media integration, including to create user profiles and login functionality, we will share your information with the relevant social media sites or applications.
- Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
- We use Google AdSense Advertising on our website.
- We have implemented the following:
30.1. Remarketing with Google AdSense
30.2. Google Display Network Impression Reporting
30.3. Demographics and Interests Reporting
31. We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third- party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.
How does our site handle Do Not Track signals?
- We honour Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place.
- Are there other applicable terms too? Yes, there are also website terms (at https://biggestleaftravel.com/terms-conditions on our website). Additional terms may also apply for specific products or services or subscriptions available through our website – these terms are included in our website terms. If there is a conflict between these terms and the specific terms, the specific terms will apply.
- Changes to this policy. Unless notice is required in terms of the law, we may change the terms of this policy from time to time in line with any changes that the law or our internal business operations require, without prior notice. The current version of this policy that applies at the time you visit and/or use our website will regulate our relationship. It is your responsibility to consider the policy each time you use our website. If you do not agree with any terms of this policy, you must stop using our website.
- Note that Biggestleaf’s appointed:
35.1. Information Officer in terms of POPI is Roanna Bernatzeder.
Physical Address: 18 Rose Avenue
Western Cape Province
Telephone: 087 943 7171
E-mail: [email protected]