Privacy Policy for MaraKaya Safari Lodge

This Privacy Policy (“Policy”) outlines how MaraKaya Safari Lodge (“MaraKaya”, “us”, “we”, or “our”), located in Manyoni private game reserve in South Africa, collects, uses, discloses, and protects your personal information. We are committed to safeguarding your privacy in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable laws. By using our website, making a booking, or engaging with our services, you consent to the practices described in this Policy. This Policy is modeled on standard practices from leading South African safari lodges such as Singita and Sabi Sabi.

Scope and Application

This Policy applies to all personal information collected through our website (e.g., www.marakaya.co.za), email communications, booking forms, telephone inquiries, in-person interactions at the lodge, or via third-party agents. Personal information includes any data that identifies you as an individual, such as your name, contact details, or passport information. We may update this Policy periodically; changes will be posted on our website with the effective date. Continued use of our services after changes implies acceptance.

Types of Information We Collect

We collect personal information in two main ways: actively (provided directly by you) and passively (automatically through technology).

Active Collection:

• Personal details: Name, surname, gender, age, nationality, passport/ID number, and expiry dates.
• Contact information: Email address, phone number, postal address.
• Travel details: Arrival/departure dates, flight information, emergency contacts, medical conditions, dietary requirements, allergies, or special needs (e.g., mobility assistance).
• Booking and payment details: Preferences, group composition, marital status (for room allocations), and company information if applicable.
• Marketing preferences: Interests, feedback, or subscriptions to newsletters.

Passive Collection:

• Usage data: IP address, browser type, operating system, device information, pages visited, time spent on site, and referrer URLs.
• Cookies and tracking technologies: We use cookies, web beacons, and similar tools to enhance user experience, analyze trends, and administer the website. You can manage cookie preferences via your browser settings.

We do not collect sensitive financial information like credit card details directly; payments are processed through secure third-party gateways.

How We Use Your Information

Your personal information is used for legitimate business purposes, including:

• Processing bookings, reservations, and payments.
• Providing tailored services, such as game drives, meals, and transfers.
• Communicating with you about your stay, itineraries, quotes, or updates.
• Improving our services through feedback, research, and analytics.
• Sending marketing materials, promotions, or newsletters (with your consent).
• Complying with legal obligations, such as health and safety regulations or anti-money laundering requirements.
• Monitoring website usage for security, fraud prevention, and statistical analysis.
• Sharing with emergency services if needed for your safety.

We process information based on your consent, contractual necessity, legal obligations, or our legitimate interests (e.g., service improvement). We do not use your data for automated decision-making that significantly affects you.

Sharing and Disclosure of Information

We may share your personal information with:

• Affiliated entities or subsidiaries for operational purposes.
• Trusted third-party service providers, such as travel agents, airlines, transfer companies, or medical providers, to facilitate your booking and stay. These parties are contractually obligated to protect your data and use it only for the specified purpose.
• Government authorities or law enforcement if required by law, for compliance, or in response to legal processes.
• In the event of a merger, acquisition, or sale of assets, where your data may be transferred to the new entity.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Data may be transferred cross-border (e.g., to EU or US-based providers) but only with appropriate safeguards, such as standard contractual clauses, to ensure equivalent protection under POPIA.

Data Security

We implement reasonable technical, administrative, and physical measures to protect your personal information from unauthorized access, loss, misuse, or alteration. This includes encryption, firewalls, access controls, and secure servers. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. You transmit information at your own risk.

In the event of a data breach, we will notify you and the relevant authorities as required by POPIA.

Retention of Information

We retain your personal information only as long as necessary for the purposes outlined in this Policy, or as required by law (e.g., for tax or auditing purposes). Typically, booking data is kept for up to 7 years. After this period, data is securely deleted or anonymized.

Your Rights

Under POPIA, you have the right to:

• Access your personal information we hold.
• Request correction or update of inaccurate data.
• Object to processing (e.g., for direct marketing).
• Request deletion or restriction of processing under certain conditions.
• Withdraw consent at any time (though this may affect service delivery).
• Receive your data in a portable format.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise these rights, contact us at bookings@marakaya.co.za with proof of identity. We will respond within 30 days. Requests are free unless manifestly unfounded or excessive.

Marketing and Opt-Out

If you subscribe to our newsletters or promotions, we may send you relevant offers via email or SMS. You can opt out at any time by clicking the unsubscribe link in emails, replying “STOP” to SMS, or emailing. We will process opt-outs within 10 business days.

Cookies and Tracking

Our website uses cookies for functionality, performance, and analytics. Essential cookies are always active; others require consent. For details, see our Cookie Policy (linked on our website). Third-party tools like Google Analytics may collect anonymized data; refer to their privacy policies for opt-out options.

Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from minors without parental consent. If we become aware of such data, we will delete it.

Third-Party Links

Our website may contain links to third-party sites (e.g., payment gateways). We are not responsible for their privacy practices; review their policies before providing information.

Changes to This Policy

We may amend this Policy to reflect changes in our practices or legal requirements. Updates will be posted on our website; significant changes will be notified via email if you have subscribed.

Contact Us

For questions, complaints, or to exercise your rights, contact our Information Officer at:

• Email:  bookings@marakaya.co.za

We aim to resolve concerns promptly. If unsatisfied, you may contact the Information Regulator at inforeg@justice.gov.za.

By engaging with MaraKaya Safari Lodge, you acknowledge that you have read and understood this Policy. Effective Date: March 4, 2026.