Privacy Policy / POPIA
Cliffhanger Cottages Privacy Policy Sep 2019 (GDPR Compliant).
This is the privacy notice for Cliffhanger Cottages. Here we specify how we collect, store and use your personal info and your rights with respect to it. Your privacy is extremely important to us and we'll never share your information with any 3rd parties.
We may collect your information because:
In light of the above, you are consenting to us storing and using the personal data you are providing us with, for the above purposes. If you don't want us to have access to your personal info, please don't provide us with any.
Information we may collect:
We may ask for such information classed as personally identifiable to you as an individual:
The ways in which we may use your info include to:
Confidentiality:
We treat your information as strictly confidential. We don't sell any personal data to 3rd parties and we'll never share any personal info about you to anyone not directly linked with the management and marketing of Cliffhanger Cottages, without your permission.
Protection of your information:
We protect your info via administrative measures; electronic cyber security systems and physical measures on our premises to ensure the safe-keeping thereof.
Your rights:
If you have already consented to us using and holding your personal info, you are within your rights to withdraw this consent at any time. You can unsubscribe from our communications by using the appropriate measure, e.g. by replying with the word UNSUBSCRIBE in the heading or by UNSUBSCRIBING via our newsletter software, or by e-mailing us to request removal from our subscriber database. We will respond by deleting all info we have about you from our system (unless we are required by law to retain any) and you won't receive further communications from us; we don't want to contact anyone who doesn't wish to be contacted.
Barry Young is the registered Information Officer and Ingrid Young the deputy information officer for Cliffhanger cottages. They are responsible (and liable) for all compliance duties, working with the Regulator, establishing procedures, and training any team members in awareness and compliance.
The personal information Cliffhanger Cottages is given by guests, prospective guests and followers include Name, E-mail Address, Contact Number, Bank info, and any other information necessary in order to allow us to run our accommodation establishment. This information is stored digitally across e-mails, a subscriber database, a guest database, and on related websites where guests have provided a testimonial about their stay.
The information we keep is strictly relevant and not excessive for the purpose of being able to contact our guests and ensure their stay is booked and enjoyable. ONLY information absolutely required to do this effectively is requested and kept legitimately for as long as the client requires our support and/or where the law requires us to keep records.
We will never sell or share private information with 3rd parties not specifically contracted to assist with the reservation of rooms for the guests in question.
Cliffhanger Cottages secures the integrity and confidentiality of personal information in our possession or under our control by taking appropriate, reasonable technical and organisational measures to prevent unlawful access to, loss of, damage to or unauthorised destruction thereof. We take steps to establish and maintain appropriate safeguards against those risks, including cyber-attacks.
Our incident response plan is to report any actual or suspected breaches (security compromises) as soon as reasonably possible to both the Information Regulator and the data subject/s involved. Where third parties (“operators”) hold or process any personal information for you (e.g. e-newsletter facilitators, booking sites), they should act only with our authority, treat the information as confidential, and have in place all the above security measures.
The information we hold is kept behind digital security measures such as passworded log-ins and physical security measures such as alarm system and IR beams.
Our policy is to do ethical marketing which includes marketing to past guests, prospective guests, and an audience of interested persons who at all times have the ability to opt out. Subscribers need to opt in via a double-opt-in mechanism where only they can give consent by clicking on a link sent to their e-mail address, to prevent anyone else from subscribing them. Please also see our Privacy Policy above.
All previous, current and past suppliers, employees and guests have the right to participate in their data and can e-mail the Information Officer to request that their information be updated, deleted, destroyed, objected to or to raise complaints if required.
Although only the information officer and deputy information officer currently have access to private information stored (which means that nothing can "fall through the cracks"), where it becomes relevant, staff members will be trained accordingly.
As a small business that does not employ more than 50 persons, does not exceed turnover threshold defined for the industry, and is managed by a sole proprietor, Cliffhanger Cottages is exempt from having a s51 PAIA Manual.
Here are all the systems, technology and programmes we use in serving our guests, prospective guests & subscribers: Microsoft Windows 10, Office 365 Suite including email, browsers like Firefox, Edge & Chrome, Zoom / Skype as required, Nightsbridge / Portal Booking Systems, Google, Samsung browser / whatsapp / contacts / email / Instagram & Facebook. We confirm that we use Anti-Virus software, user access controls, back-ups and encryption where provided.
Cliffhanger Cottages collects via e-mail, phone call and newsletter subscription information needed to serve our guests. The processes around the storage and duration of storage of such private information is solely dictated by what we need to be able to provide the support for as long as the data owner requires our support.
