Privacy Policy

Effective Date: 18 August 2025
Last Updated: 19 August 2025

Welcome to Mapesu Private Game Reserve (“Mapesu”, “we”, “us”, or “our”). We are committed to safeguarding the privacy of our guests, staff, and visitors. This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with us—whether through our website https://mapesu.com, by email, phone, bookings, or in person.

Mapesu complies with the Protection of Personal Information Act, 4 of 2013 (POPIA) in South Africa, and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

  1. Definitions
  • Personal Data: Any information that identifies you or could be used to identify you (e.g., name, email, ID/passport number).
  • Processing: Any operation performed on personal data (e.g., collecting, storing, using, sharing).
  • Data Subject: The person whose data is being processed (you).
  • Data Controller: The entity deciding why and how personal data is processed (Mapesu).
  • Service: Mapesu’s services, including the website, bookings, communications, and lodge operations.
  • Service Providers: Third-party vendors who help us deliver our services (e.g., booking platforms, payment processors).

1A. Compliance with the Protection of Personal Information Act (POPIA)

Mapesu processes personal information in accordance with the eight conditions for lawful processing as set out in POPIA:

  • Accountability: We ensure your information is processed lawfully and responsibly.
  • Processing limitation: We collect personal data directly from you and only process it for defined, lawful purposes.
  • Purpose specification: Your personal data is collected for legitimate, clearly defined purposes and not used for unrelated reasons.
  • Further processing limitation: We ensure any further use of your data aligns with the original purpose.
  • Information quality: We take reasonable steps to keep your data accurate, complete, and updated.
  • Openness: We are transparent about how and why your data is collected and processed.
  • Security safeguards: We apply appropriate measures to protect your personal data.
  • Data subject participation: You have the right to access, correct, or request deletion of your data under applicable law.

If you believe your personal information has been handled contrary to POPIA, you may lodge a complaint with the Information Regulator at https://www.justice.gov.za/inforeg.

  1. What Information We Collect

We may collect and process the following categories of personal data:

  1. a) Personal Details
  • Full name, gender, date of birth, nationality, marital status
  • Passport or ID number, driver’s licence number
  • Photographs or video footage (e.g., for security or marketing where applicable)
  1. b) Contact Information
  • Email address, phone number, residential address
  • Emergency contact details
  1. c) Booking & Travel Data
  • Stay dates, group details, dietary or medical preferences (if shared)
  • Payment confirmations (Note: Mapesu does not store card details)
  1. d) Technical Data
  • IP address, browser and device type
  • Website activity data (pages visited, time spent, clicks)
  1. How We Collect Your Data

We collect your data through the following methods:

  • When you book directly via our website, email, or phone
  • Via third-party booking platforms
  • When you contact us or sign up for updates
  • Through website cookies and analytics tools
  • From public sources (e.g., social media if you tag us)
  1. Why We Process Your Data

We use your data to:

  • Fulfil bookings and deliver services
  • Respond to enquiries and stay-related communications
  • Send newsletters and promotional updates (with your consent)
  • Improve our website and guest experience
  • Meet legal and regulatory requirements
  • Ensure the safety and security of our staff and guests
  1. Legal Basis for Processing

Depending on context, we rely on the following legal bases:

  • Your consent
  • Contractual necessity (e.g., fulfilling a booking)
  • Legal obligations (e.g., tourism and tax laws)
  • Legitimate interests (e.g., marketing, internal analytics), provided your rights are not overridden
  1. Sharing Your Information

We may share your data with:

  • Payment processors (e.g., PayGate, Stripe)
  • Booking platforms or travel agents
  • Email or marketing providers (e.g., Mailchimp)
  • Legal or accounting advisors
  • Government agencies (if required by law)
  • Third-party services (e.g., guides, transfer providers)

All third parties are contractually bound to process your data confidentially and in accordance with applicable data protection laws.

  1. International Transfers

Because we work with international guests and systems, your data may be transferred outside your country. All international transfers are handled in line with Section 72 of POPIA, and where applicable, GDPR. We implement appropriate safeguards such as:

  • Standard Contractual Clauses
  • Binding Corporate Rules
  • Only transferring to jurisdictions with adequate protection
  1. Data Retention

We only retain your personal data as long as necessary to:

  • Fulfil our services and legal obligations
  • Comply with South African statutory retention rules
  • Resolve disputes and enforce agreements

You may request the deletion of your data, subject to any legal or contractual restrictions.

  1. Data Security

We take data security seriously and implement technical and organisational measures to protect your information, including:

  • Secure servers and firewalls
  • Role-based access controls
  • Encrypted communications when required

However, no method of transmission over the internet is completely secure.

  1. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete information
  • Delete your data (within legal bounds)
  • Object to certain processing activities
  • Withdraw consent at any time for marketing communication
  • Lodge a complaint with the Information Regulator

To exercise these rights, please email us at: bookings@mapesu.com

If you are not satisfied with our response, you may contact the Information Regulator:

Information Regulator (South Africa)
📧 Email: inforeg@justice.gov.za
📍 JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
🌐 https://www.justice.gov.za/inforeg

  1. Cookies and Tracking

We use cookies and similar tracking tools to enhance your browsing experience, analyze site traffic, and improve our service. You can manage cookie preferences through your browser settings.

Please refer to our full [Cookie Policy] for more detail.

  1. Policy Updates

We may update this Privacy Policy periodically. When we do, we’ll revise the “Last Updated” date above and post the updated version on our website. We encourage you to review it regularly.

  1. Contact Us

Chief Privacy Officer
Mapesu Private Game Reserve
📧 Email: bookings@mapesu.com
📍 R572 Pontdrif Road, Musina, 0900, South Africa
🌐 Website: https://mapesu.com