Last Updated: January 2024
Introduction
Frost Bear ("we", "our", "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We comply with the Protection of Personal Information Act (POPIA) of South Africa and applicable international data protection regulations.
Information We Collect
We may collect information about you in various ways:
- Personal Data: Name, email address, postal address, and other contact information you provide when making enquiries or bookings
- Booking Information: Tour preferences, dietary requirements, health information relevant to your tour participation, and payment details
- Technical Data: IP address, browser type, operating system, referring URLs, and pages visited on our website
- Communication Data: Records of correspondence when you contact us
How We Use Your Information
We use the information we collect for the following purposes:
- Processing tour bookings and managing your reservations
- Communicating with you about your enquiries and bookings
- Providing customer support and responding to your requests
- Sending you relevant information about our tours and services (with your consent)
- Improving our website and services based on user behaviour analysis
- Complying with legal obligations and protecting our legitimate business interests
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract: Processing necessary to fulfil our contractual obligations to you
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights
- Legal Obligation: Processing required to comply with applicable laws and regulations
Data Sharing and Disclosure
We may share your information with:
- Service providers who assist in operating our business (payment processors, accommodation partners, transport providers)
- South African National Parks and other park authorities as required for booking confirmations
- Legal authorities when required by law or to protect our rights
We do not sell your personal information to third parties.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, this means:
- Booking records: 7 years after your tour
- Marketing communications: Until you unsubscribe
- Website analytics: 26 months
Your Rights
Under POPIA and applicable data protection laws, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal requirements)
- Object to processing of your information
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Regulator
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
International Transfers
If you are accessing our services from outside South Africa, your information may be transferred to and processed in South Africa. We ensure appropriate safeguards are in place for any international data transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Frost Bear
45 Waterkloof Ridge
Pretoria, Gauteng 0181
South Africa
Email: [email protected]