Quick summary
The essentials, at a glance:
- We only collect information we genuinely need
- We never sell your personal data — ever
- You stay in control of your data
- We use industry-standard encryption & security
- You can access or delete your data anytime
- We are fully GDPR & POPIA compliant
01 · Overview
This Privacy Policy applies to Beyond Africa Safaris (Pty) Ltd, trading as Private Tours Cape Town (“we”, “us”, “our”), and to privatetourscapetown.com and all related booking and communication channels.
It describes how we handle your personal information when you browse our website, request a quote, make a booking, or contact our team. We are committed to processing your data lawfully, fairly and transparently in line with the EU General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA).
By using our website or services, you consent to the practices described here. If you do not agree, please discontinue use of the site and our services.
02 · Information We Collect
We only collect what we need to plan and deliver your journey:
- Personal details — name, email address, phone number and country of residence.
- Booking information — travel dates, destinations, party size, accommodation and tour preferences.
- Payment information — processed securely by our payment partners; we do not store full card numbers on our servers.
- Special requirements — dietary needs, accessibility requests or occasion details you choose to share.
- Website usage data — pages visited, device and browser type, and approximate location, via cookies and analytics.
- Communication records — emails, WhatsApp, chat and call notes, so we can serve you better.
Providing optional information (like dietary requirements) is entirely up to you — it simply helps us tailor your experience.
03 · How We Use Your Information
We use your information to:
- Prepare quotes, process bookings and manage reservations.
- Communicate with you about your trip before, during and after travel.
- Provide customer support and respond to your enquiries.
- Improve our website, services and the quality of our journeys.
- Send you marketing and inspiration — only with your consent, and you can opt out at any time.
- Comply with legal, tax and regulatory obligations.
- Detect, prevent and address fraud or misuse.
Our lawful bases for processing are: performance of a contract (your booking), your consent (marketing), our legitimate interests (improving and securing our services), and legal obligations.
05 · Data Sharing
We share your information only when necessary to deliver your trip, and only with trusted parties:
- Tour operators & suppliers — lodges, guides, transfer and activity providers who fulfil parts of your itinerary.
- Payment processors — to securely handle transactions.
- Service providers — IT, email and analytics partners bound by confidentiality obligations.
- Legal authorities — where required by law or to protect our rights and your safety.
We never sell your personal data. We do not trade or rent your information to third parties for their own marketing.
06 · Data Security
We take the protection of your data seriously, using measures such as:
- Encryption in transit (SSL/TLS) across our website and forms.
- Secure, access-controlled servers and systems.
- Role-based access — staff only see the data they need.
- Regular reviews of our security practices.
- A defined procedure for assessing and reporting any data breach.
No method of transmission or storage is ever 100% secure, but we continually work to safeguard your information and limit how long we keep it.
07 · Your Privacy Rights
Under GDPR and POPIA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Delete your data (“right to be forgotten”), where applicable.
- Port your data to another provider in a usable format.
- Restrict or object to certain processing.
- Withdraw consent at any time, without affecting prior processing.
- Complain to a supervisory authority (e.g. your local data protection regulator or the South African Information Regulator).
To exercise any of these rights, email us at privacy [at] privatetourscapetown.com. We will respond within 30 days (often much sooner).
08 · Children’s Privacy
Our services are not directed at children under 16, and we do not knowingly collect their personal data without parental or guardian consent. Where a booking includes children as part of a family trip, that information is provided and managed by the booking adult.
If you believe we hold a child’s data without proper consent, please contact us and we will remove it promptly.
09 · International Transfers
We are based in South Africa, so your data is primarily processed here. Because travel is global, some information may be shared with suppliers or service providers in other countries to fulfil your itinerary.
When data is transferred internationally, we take steps to ensure it remains protected with appropriate safeguards consistent with GDPR and POPIA requirements.
10 · Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or the law. The “Last updated” date at the top of this page always shows the current version.
For significant changes we will provide a clear notice — for example, a website banner or an email where appropriate. We encourage you to review this page periodically.
11 · Contact Us
If you have any questions about this policy or how we handle your data, our privacy team is here to help.
Looking for something else? Visit our Contact page to call, WhatsApp or message our travel team.