Legal

Privacy Policy

PRIVACY POLICY

African Signature Golf Travel

Effective date: 17 August 2026

Website: www.africansignaturegolf.com

1. Who we are

African Signature Safaris (Pty) Ltd (registration number 2025/350447/07), trading as African Signature Golf Travel (“African Signature”, “we”, “us” or “our”), is a South African-based travel company. For purposes of South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA), we are the responsible party. Where the EU General Data Protection Regulation (GDPR) applies, we are the data controller.

Postal address: PostNet Suite 90, Hoedspruit, Limpopo, 1380, South Africa

Privacy and Information Officer contact: info@africansignature.co.za | +27 83 387 1764

2. Scope of this policy

This policy explains how we collect, use, disclose, store and protect personal information when you visit our website, submit an enquiry, subscribe to marketing, request or accept a proposal, make a booking, travel with us, communicate with us, or otherwise use our services. It applies to travellers, prospective travellers, group members, travel companions, agents, tour operators, suppliers and website visitors.

3. Personal information we collect

Depending on your interaction with us, we may collect:

identity and contact information, including your name, title, email address, telephone or WhatsApp number, residential or postal address, nationality and country of residence;
enquiry and trip-planning information, including travel dates, destinations, group size, number of golfers and non-golfers, accommodation and activity preferences, golf handicap, course preferences and free-text requests;
booking and travel information, including passport or identity-document details, date of birth, flight details, visa information, travel insurance information, emergency contacts, loyalty details and travel documents where needed for your arrangements;
payment and transaction information, including invoices, payment status and limited payment references. Where payments are processed by a bank or payment provider, we do not ordinarily receive or retain your full card details;
special or sensitive information that you choose to provide and that is necessary for your trip, such as dietary requirements, allergies, health, mobility or accessibility information. We will ask for explicit consent where required, unless another lawful basis applies;
communications with us by email, telephone, WhatsApp, website forms or other channels;
marketing preferences, including newsletter subscriptions, consent records and unsubscribe requests; and
website and device information, such as IP address, browser and device type, approximate location, pages visited, referring pages, dates and times, cookie identifiers and server logs.

4. How we collect information

We collect personal information directly from you, from a person arranging travel on your behalf, from another member of your group, from a travel agent or tour operator, and from suppliers or service providers involved in your booking. We also collect limited technical information automatically when you use our website. If you give us information about another person, you must be authorised to do so and should make this policy available to them.

5. Why we use your information and our lawful bases

Enquiries and proposals: to respond to you, understand your requirements and prepare a tailor-made itinerary or quotation. We rely on steps requested before entering into a contract and, where appropriate, our legitimate interests in operating and developing our business.
Bookings and travel services: to confirm and manage accommodation, tee times, transport, safari activities, guides, flights and other arrangements; communicate operational information; assist during travel; and deal with changes, emergencies, complaints or refunds. We rely mainly on performance of our contract with you.
Legal and financial administration: to issue invoices, maintain accounting and tax records, prevent fraud, establish or defend legal claims, comply with legal obligations and respond to lawful requests. We rely on legal obligations and legitimate interests.
Safety and special requirements: to accommodate dietary, allergy, health, mobility or accessibility needs and support your safety. We rely on your explicit consent where required, or on vital interests or other lawful grounds permitted by applicable law.
Service improvement and website security: to understand website use, maintain functionality, diagnose faults, secure our systems and improve our services. We rely on legitimate interests for essential and security-related processing. We use consent for non-essential analytics or marketing cookies where applicable law requires it.
Direct marketing: to send newsletters, travel inspiration and offers where you have opted in or where another lawful basis permits it. You may withdraw consent or object to direct marketing at any time.

Where we rely on legitimate interests, we consider whether the use is necessary and whether your rights and reasonable expectations outweigh our interests. We do not use personal information for materially different purposes without a lawful basis and, where required, further notice or consent.

6. If you do not provide information

Some information is optional, including marketing consent. However, information needed to prepare a proposal, enter into a contract, verify travellers, process payment or make travel arrangements may be necessary. If you do not provide it, we may be unable to quote, make or fulfil a booking, or accommodate a particular requirement.

7. Sharing personal information

We do not sell or rent your personal information. We may share only what is reasonably necessary with:

hotels, safari lodges, golf clubs, airlines, transport providers, guides, activity providers, destination partners and other travel suppliers;
travel agents, tour operators, group organisers or corporate clients involved in your arrangements;
technology and business service providers, including website hosting, email, cloud storage, communications, analytics, accounting, banking and payment providers;
professional advisers, insurers, auditors and legal representatives;
government, immigration, border, law-enforcement, regulatory or tax authorities where required or permitted by law; and
a buyer, successor or adviser in connection with a genuine restructuring, merger or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

Service providers acting on our behalf must process information only for authorised purposes and protect it appropriately. Some travel suppliers act as independent responsible parties or controllers and may provide their own privacy notices.

8. International transfers

We are based in South Africa and arrange travel across South Africa, Southern Africa and Mauritius. Your information may therefore be transferred to, stored in or accessed from countries outside South Africa and, if you are in the European Economic Area (EEA), outside the EEA. Those countries may have different data-protection laws.

We make international transfers only where permitted by applicable law. Depending on the transfer, safeguards may include transferring to a country recognised as providing adequate protection, contractual safeguards such as the European Commission’s Standard Contractual Clauses, binding agreements with operators, your explicit consent where legally valid, or a transfer necessary to perform or conclude a travel contract in your interests. You may contact us for further information about the safeguards relevant to your data.

9. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including service, safety, legal, accounting, tax, fraud-prevention and dispute-resolution requirements. Our retention decisions take account of the nature and sensitivity of the information, the risk of harm, the purpose of processing and applicable limitation periods.

unsuccessful enquiries and proposal records are normally retained for up to 24 months after the last meaningful contact, unless you ask us to delete them sooner and no lawful reason requires continued retention;
booking, contract, invoice and transaction records are normally retained for at least five years after the relevant transaction or for any longer period required by law or reasonably needed for legal claims;
passport copies, health details and other travel-specific sensitive records are deleted or securely restricted when no longer needed for the trip, supplier requirements, safety, legal compliance or claims;
marketing records are kept until you unsubscribe or object, after which we may retain a minimal suppression record to ensure we respect your request; and
technical and security logs are retained for a limited period determined by operational, security and legal requirements.

We may anonymise information so that it can no longer identify you and use the anonymised information for statistical or business purposes.

10. Security

We use appropriate and reasonable technical and organisational safeguards designed to protect personal information from accidental or unlawful loss, destruction, alteration, disclosure, access or misuse. Access is limited to people and providers who need the information for authorised purposes. No internet transmission or storage system is completely secure, but we review safeguards and respond to suspected incidents in accordance with applicable law.

11. Cookies and similar technologies

Our website may use cookies and similar technologies. Strictly necessary cookies support core functions, security and form operation and do not require consent where permitted by law. Optional analytics, preference or marketing technologies, if used, help us understand website use or measure communications.

Where required, optional cookies are disabled until you make a choice through our cookie banner or preference tool. You may accept, reject or change your preferences at any time. Browser settings can also block or delete cookies, although this may affect website functionality. Our cookie notice or preference tool should identify the cookies in use, their providers, purposes and durations.

12. Marketing communications

We send electronic marketing only where permitted by applicable law. Newsletter subscription is voluntary and must be separate from a travel enquiry or booking. You can unsubscribe through the link in an email or contact us at info@africansignature.co.za. Withdrawing marketing consent does not affect service communications necessary for an enquiry or booking.

13. Your rights

Subject to applicable law and any lawful limitations, you may have the right to:

ask whether we hold personal information about you and request access to it;
ask us to correct or complete inaccurate or incomplete information;
ask us to delete information that we no longer have a lawful reason to keep;
ask us to restrict processing in certain circumstances;
object to processing based on legitimate interests and object at any time to direct marketing;
withdraw consent at any time, without affecting processing already carried out lawfully;
receive certain information in a structured, commonly used and machine-readable format and ask for it to be transmitted to another controller, where GDPR data portability applies;
not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, subject to legal exceptions; and
complain to a data-protection authority.

We do not currently use solely automated decision-making or profiling that produces legal or similarly significant effects. To exercise a right, email info@africansignature.co.za. We may need to verify your identity. We ordinarily respond within one month under the GDPR and within the periods required by POPIA. We do not charge a fee unless a request is manifestly unfounded, excessive or otherwise chargeable under applicable law.

14. Complaints

Please contact us first so that we can try to resolve your concern.

South Africa: You may complain to the Information Regulator (South Africa). Current contact details and complaint forms are available at https://inforegulator.org.za.

EEA: If the GDPR applies, you may complain to the supervisory authority in the EEA country where you live or work, or where you believe an infringement occurred. A list of authorities is available through the European Data Protection Board at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

15. Children

Our website is not directed at children. We may process information about travellers under 18 only where it is provided by, or with the authority of, a parent, guardian or authorised group organiser and is needed for travel arrangements. We apply additional protection required by law and do not knowingly send direct marketing to children.

16. Third-party links and services

Our website may link to external websites or services, including social media, messaging, payment and travel-supplier sites. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information.

17. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The current version will be published on www.africansignaturegolf.com with a revised effective date. Where a change materially affects how we use information, we will provide additional notice where required.

18. Contact us

African Signature Safaris (Pty) Ltd t/a African Signature Golf Travel

Registration number: 2025/350447/07

Postal address: PostNet Suite 90, Hoedspruit, Limpopo, 1380, South Africa

Email: info@africansignature.co.za

Telephone / WhatsApp: +27 83 387 1764

Website: www.africansignaturegolf.com

IMPLEMENTATION CHECKLIST

The policy text is only accurate if the website and business processes match it. Complete these items before publishing.

Replace the current privacy email hello@africansignature.com with info@africansignature.co.za.
Confirm that Gary Geyer is the registered POPIA Information Officer for African Signature Safaris (Pty) Ltd and that his Information Regulator registration is current.
Confirm the official address to publish. PostNet Suite 90 is currently used as the public postal address; use the registered business address instead if legally preferred.
Audit all cookies and scripts actually loaded by the website, including Vercel/hosting analytics, Google Analytics, Meta Pixel, embedded maps, video, chat/WhatsApp widgets, fonts and newsletter tools. Do not state that only necessary cookies are used unless this is technically true.
Implement a consent banner for EEA visitors before any non-essential analytics or marketing technology loads. Provide Accept, Reject and Manage Preferences choices of equal prominence and a permanent way to reopen preferences.
Publish a cookie table naming each cookie or similar technology, provider, purpose, category and duration.
Keep enquiry consent and newsletter consent separate. The marketing checkbox must be optional, unticked by default and supported by a consent record.
Add a short privacy notice and link to the policy immediately beside each enquiry form and newsletter field.
Confirm the website form, CRM/email, cloud-storage, analytics, payment and hosting providers so the sharing and international-transfer sections can be made more specific.
Ensure contracts or data-processing terms are in place with processors that handle personal information for the company.
Document and apply the stated retention periods, especially for passport copies, health/accessibility information and unsuccessful enquiries.
Because the business actively offers travel services to people in the EU/EEA, obtain legal advice on whether an EU representative must be appointed under GDPR Article 27. If required, appoint one and add its name, address and contact details to section 1 before publication.
Maintain internal processes for access/deletion requests, objections, consent withdrawal, data breaches and cross-border transfers. A privacy policy alone does not establish compliance.