Privacy Policy

Privacy Policy
**Last Updated: 05 **January 2025

Who We Are

Our website address is: https://surflodgesouthafrica.co.za/.

What Personal Data We Collect and Why We Collect It

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the website.

Contact Forms

When you submit a contact form, we collect your name, email address, and message content. We retain this information for customer service purposes but do not use it for marketing unless explicitly consented.

Cookies

  • If you leave a comment, you may opt-in to saving your name, email address, and website in cookies for convenience. These cookies last for one year.

  • If you log in, we set up cookies to save login information and screen display choices. Login cookies last two days, and screen option cookies last one year. Selecting “Remember Me” extends login persistence to two weeks.

  • If you edit or publish an article, an additional cookie is saved to indicate the post ID of the edited article. It expires after 1 day.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the same way as if the visitor has visited the other website. These websites may collect data, use cookies, and track your interaction with embedded content.

Analytics

We use Google Analytics to track website traffic and improve our services. Google Analytics may collect IP addresses, browser details, and interaction data. You can opt out by visiting: Google Analytics Opt-Out.

Who We Share Your Data With

We do not sell, trade, or rent personal data. However, we may share data with the following service providers:

  • Google Analytics (for website performance analysis)

  • Payment Processors (if applicable, for secure transactions)

  • Email Marketing Services (only if you opt-in to receive newsletters)

  • Spam Detection Services (to protect against malicious activity)

How Long We Retain Your Data

  • Comments: Retained indefinitely.

  • Registered Users: Personal data is stored until the user deletes their account.

  • Contact Form Submissions: Retained for 6 months for customer service purposes.

  • Analytics Data: Retained for 14 months before automatic deletion.

Your Rights Over Your Data (GDPR & CCPA Compliance)

If you are a resident of the European Economic Area (EEA) or California (CCPA), you have the right to:

  • Request access to your personal data.

  • Request corrections or updates to your data.

  • Request deletion of your personal data.

  • Object to how we use your data.

  • Request that we do not sell your personal data (California residents only).

To make a data request, please contact us at info@surflodgesouthafrica.co.za.

Where We Send Your Data

Visitor comments may be checked through an automated spam detection service.

How We Protect Your Data

We use encryption, secure server protocols, and limited access controls to protect your personal data. We also regularly review our security measures to ensure compliance.

What Data Breach Procedures We Have in Place

In the event of a data breach, we will:

  1. Investigate and contain the breach.

  2. Notify affected users within 72 hours (as per GDPR requirements).

  3. Report the breach to legal authorities if necessary.

  4. Implement corrective actions to prevent future breaches.

What Third Parties We Receive Data From

We may receive analytics data from third-party platforms like Google Analytics and Facebook Pixel for website performance analysis.

What Automated Decision-Making and Profiling We Do With User Data

We do not use automated decision-making or profiling that significantly affects users’ rights. However, we may use Google Ads and Facebook Pixel for personalized advertising, which can be opted out of through the respective platforms.

Industry Regulatory Disclosure Requirements

We comply with all applicable privacy laws, including GDPR, CCPA, and South African data protection regulations.

Changes to This Privacy Policy

We may update this privacy policy periodically. Changes will be posted on this page with the updated “Last Revised” date. If significant changes occur, we will notify users via email or a website banner.

Contact Information

For privacy-related concerns, contact us at:

By using this website, you consent to our privacy policy.