Privacy Policy

KDF Experience ("we", "our", "us") is committed to protecting your personal information. This policy explains what information we collect, how we use it, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Information We Collect

We collect personal information that you provide directly when making a booking or contacting us. This includes:

• Full name and identity number (for guest verification)
• Email address and phone number
• Payment details processed securely through PayFast
• Booking preferences and stay history
• Messages sent through our contact form

We also collect technical information automatically, including IP address, browser type, and pages visited, through Google Analytics 4.

2. How We Use Your Information

We use your personal information to:

• Process and confirm your booking
• Send booking confirmations and pre-arrival information
• Respond to your queries and support requests
• Send post-stay review requests and relevant promotions (only if you have opted in)
• Meet legal and regulatory obligations
• Improve our website and services through anonymised analytics

3. Sharing Your Information

We do not sell your personal information. We share it only with trusted service providers who assist in operating our booking system:

• PayFast processes all payments securely. Your card details are handled exclusively by PayFast and never stored on our systems.
• Brevo delivers transactional emails and booking confirmations on our behalf.
• Supabase provides secure database hosting for booking records.
• Meta (WhatsApp Business) is used for booking notifications and guest support.

All service providers are contractually required to protect your information and may not use it for any other purpose.

4. How Long We Keep Your Data

We retain booking records for seven years as required by South African tax and financial legislation. Contact messages are retained for two years. You may request earlier deletion of non-legally required data at any time.

5. Your Rights Under POPIA

As a data subject you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to the processing of your information for direct marketing
• Lodge a complaint with the Information Regulator of South Africa

6. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All data transmissions are encrypted via HTTPS. Payment data is never stored on our servers.

7. Cookies

We use cookies for Google Analytics 4 (anonymised traffic analysis) and session management for the booking flow. No advertising or third-party tracking cookies are used. You can disable cookies in your browser settings at any time.

8. Contact and Complaints

To exercise any of your rights, or if you have a concern about how we handle your data, please contact us at:

KDF Experience
Email: info@kdfexperiance.co.za
WhatsApp: 27723002085

If you are not satisfied with our response, you may contact the Information Regulator of South Africa at inforegulator.org.za.