1. Information We Collect

We collect personal information that you provide to us directly when using our Website, making an inquiry, making a booking, or during your stay. This information includes:

• Identifiable Information: Full name, ID or passport number, and nationality (required for statutory guest registration).
• Contact Information: Email address, telephone/mobile number, and physical address.
• Booking Details: Check-in and check-out dates, number of guests (including names and ages of children, if applicable), and details of any special requests or preferences.
• Financial Information: Credit card details or bank account details for processing booking payments and security deposits. Note that online payments are processed securely through our third-party payment gateways, and we do not store full card details.
• Guest Feedback: Reviews, comments, or correspondence you send to us.
• Technical Information: IP address, browser type, device information, and website usage data collected via cookies when you browse our Website.

2. How We Use Your Information

We process your personal information for the following purposes:

• To Manage Bookings & Services: Processing your reservation, managing check-in/check-out, communicating details about your stay, and providing the amenities and services requested.
• To Process Payments: Facilitating payments, refunds, and processing security/breakage deposits.
• Communication: Responding to your inquiries, sending booking confirmations, and providing updates or customer support.
• Legal Compliance: Complying with South African statutory guest registration requirements (including the Tourism Act) and tax regulations.
• Safety and Security: Ensuring the safety of our property, guests, and staff (e.g., maintaining guest lists and secure access control).
• Marketing (With Consent): Sending you promotional offers, news, or seasonal updates about Zurri Bluu, subject to your right to opt-out at any time.

3. Lawful Basis for Processing

Under POPIA, we process your personal information under the following lawful bases:

• Consent: Where you have explicitly agreed to the processing (e.g., subscribing to a newsletter).
• Contractual Necessity: Processing is necessary to fulfill our agreement with you (i.e., managing your booking and stay).
• Compliance with Law: Processing is necessary to comply with legal obligations (e.g., tax reporting and security registries).
• Legitimate Interests: Processing is necessary to protect our legitimate interests, such as securing our property and preventing fraud.

4. Sharing Your Personal Information

We do not sell, rent, or trade your personal information. We may share your information with trusted third-party service providers who assist us in operating our business, including:

• Booking Engines & Channel Managers: Platforms used to manage reservations and calendars.
• Payment Gateways: Secure third-party providers processing transaction payments.
• Property Management Partners: Local co-hosts, cleaners, or maintenance staff who require guest arrival details to prepare the property.
• Legal & Regulatory Authorities: When required by South African law, court order, or government regulation.

All third-party service providers are contractually obligated to handle your information securely and in accordance with POPIA.

5. Security of Your Personal Information

We take the security of your personal information seriously and implement reasonable technical and organizational measures to prevent unauthorized access, loss, disclosure, or modification. These measures include secure servers, encryption of payment details, secure physical storage for guest files, and restricted staff access to guest databases.

6. Retention of Your Personal Information

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by South African law (e.g., for tax or statutory guest registration records). Once no longer required, your personal data is securely destroyed or de-identified.

7. Your Rights under POPIA

In terms of POPIA, you have the right to:

• Access: Confirm whether we hold personal information about you and request a copy of that information.
• Correction: Request that we correct, update, or delete inaccurate, irrelevant, or incomplete personal information.
• Objection: Object to the processing of your personal information on reasonable grounds.
• Withdraw Consent: Withdraw your consent for promotional communications at any time.
• Complain: Lodge a complaint with the South African Information Regulator.

8. Cookies and Analytics

Our Website uses cookies to enhance your browsing experience, track website performance, and gather anonymous analytics. You can adjust your browser settings to refuse cookies, although some features of the Website may not function properly as a result.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Information Officer:

• Information Officer: Zurri Bluu Management
• Physical Address: 1468 Hibiscus Street, Wilderness, South Africa, 6560
• Email Address: info@zurribluu.co.za
• Phone Number: +27 (0) 82 000 0000