Privacy Policy

1. Who We Are

Emfuleni River Lodge & Café 

​

45 Emfuleni dr Vanderbijlpark

Johanneburg, SE 5,1911

emufuleniriverlodge20@gmail.com 

+27 72 254 0745

​

We are the data controller responsible for the personal information collected through our website and services.

​

2. Information We Collect

We collect various types of personal information to provide and improve our services. This information may be collected directly from you or automatically as you interact with our website.

​

2.1. Information You Provide Directly:

​

•Contact Information: Name, email address, phone number, postal address.

•Reservation Details: Check-in/check-out dates, room preferences, number of guests, special requests.

•Payment Information: Credit card details (processed securely by third-party payment processors, we do not store full card details), billing address.

•Communication Data: Information you provide when you contact us via email, phone, or contact forms.

•Marketing Preferences: Your preferences for receiving marketing communications.

​

2.2. Information Collected Automatically (via Wix and Third-Party Services):

​

As our website is hosted on Wix.com, certain information is collected automatically by Wix and other integrated services. Wix acts as our data processor [1].

•Technical Data: IP address, browser type and version, operating system, device type, screen resolution.

•Usage Data: Pages visited, time spent on pages, links clicked, referring website, search queries, dates and times of access.

•Location Data: General geographical location derived from your IP address.

•Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 6).

​

3. Sharing Your Information

​

We may share your personal information with the following categories of recipients:

•Wix.com: As our website hosting platform, Wix processes data on our behalf. Their Data Processing Agreement (DPA) outlines their commitment to data protection [1, 2].

•Service Providers: Third-party vendors who perform services on our behalf, such as payment processors ([e.g., PayGate, Stripe]), booking engines ([e.g., NightsBridge, ResRequest]), email marketing platforms ([e.g., Mailchimp]), and analytics providers ([e.g., Google Analytics]). These providers are contractually obligated to protect your data.

•Legal & Regulatory Authorities: When required by law, such as in response to a subpoena, court order, or other legal process, or to comply with applicable regulations (e.g., guest identification requirements in South Africa).

•Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

​

4. International Data Transfers

​

Your personal information may be stored and processed in countries outside of South Africa or the European Economic Area (EEA) where our service providers (including Wix) operate. When such transfers occur, we ensure appropriate safeguards are in place to protect your data, such as:

•Relying on adequacy decisions by the European Commission or the South African Information Regulator.

•Implementing Standard Contractual Clauses (SCCs) approved by the European Commission.

•Ensuring the recipient is certified under an approved data transfer mechanism.

​

5. Cookies and Tracking Technologies

​

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and for marketing purposes. Cookies are small text files stored on your device.

•Essential Cookies: Necessary for the website to function correctly (e.g., session management, security).

•Analytical/Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).

•Functional Cookies: Remember your preferences (e.g., language settings).

•Marketing/Advertising Cookies: Used to deliver relevant advertisements.

You can manage your cookie preferences through your browser settings or via our website's cookie consent banner. Please note that disabling certain cookies may affect the functionality of the website.

​

6. Data Retention

​

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing.

8. Your Data Protection Rights

Under POPIA and GDPR, you have certain rights regarding your personal information:

•Right to Access: You have the right to request a copy of the personal information we hold about you.

•Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.

•Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal information under certain circumstances.

•Right to Restrict Processing: You have the right to request that we limit the processing of your personal information under certain conditions.

•Right to Object to Processing: You have the right to object to the processing of your personal information, particularly for direct marketing purposes.

•Right to Data Portability (GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format.

•Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.

•Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority:

•South Africa: The Information Regulator (www.justice.gov.za/inforeg/)

•European Union: Your local Data Protection Authority

To exercise any of these rights, please contact us using the details provided in Section 1.

​

7. Data Security

​

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, access controls, and regular security assessments. While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

​

8. Changes to This Privacy Policy

​

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website with a revised "Last Updated" date.

​

9. Lodge's Rights and Limitations of Liability

​

• Right of Refusal: The Lodge reserves the right to refuse admission or to require a guest to leave the premises if their conduct is deemed inappropriate or disruptive.

• Loss or Damage to Guest Property: The Lodge will not be held responsible for any loss or damage to guests' personal property, including vehicles, during their stay.

• Force Majeure: The Lodge shall not be liable for any failure or delay in performing its obligations due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, or government regulations.

​

10. General

• Governing Law: These Terms and Conditions shall be governed by and construed in accordance with the laws of South Africa.

• Severability: If any provision of these Terms and Conditions is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

• Amendments: The Lodge reserves the right to amend these Terms and Conditions at any time. The most current version will be available on the Lodge's website or upon request.

​

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Emfuleni River Lodge & Cafe 

emufuleniriverlodge20@gmail.com 

​ +27 72 254 0745