Privacy Policy

Who we are

Our website address is: https://fivemountainsfarm.co.za.

At Five Mountains Guest Farm & Spa (“Five Mountains”, “we”, “our” or “us”), we are committed to protecting your privacy and ensuring that your personal information is collected, used and stored responsibly. This Privacy Policy explains how we collect, process and safeguard your personal information when you visit our website, make a booking, enquire about our services, or interact with us.

We process all personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable South African legislation.

Personal Information We Collect

Depending on how you interact with us, we may collect and process the following personal information:

  • Full names
  • Identity or passport numbers (where required for bookings)
  • Physical and billing addresses
  • Email addresses
  • Telephone and mobile numbers
  • Booking and reservation information
  • Payment information (processed securely through our payment providers)
  • Guest preferences and special requests
  • Wedding, event or spa booking details
  • Website usage information collected through cookies and analytics
  • Any other information voluntarily provided by you through our website, email or telephone enquiries

Why We Collect Your Information

Your personal information enables us to provide you with exceptional service and a seamless guest experience.

We use your information to:

  • Process accommodation, spa and event bookings
  • Respond to enquiries and requests
  • Confirm reservations and communicate booking updates
  • Arrange special requests and guest preferences
  • Process payments and issue invoices
  • Provide customer support
  • Improve our website and guest experience
  • Send information relating to your booking
  • Send promotional offers, newsletters or special packages where you have consented to receive these communications
  • Comply with our legal and regulatory obligations

Wedding, Spa & Event Enquiries

Should you enquire about weddings, private functions, spa treatments or special events, we may collect additional information necessary to prepare quotations, coordinate your booking and provide the requested services.

This information will only be used for the purpose for which it was collected.

Information Collected Through Our Website

.

When you visit our website, certain information may automatically be collected, including:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Time spent on our website
  • Referral website
  • Cookies and similar technologies

This information helps us improve the performance, security and functionality of our website.

Cookies

Our website uses cookies to improve your browsing experience.

Cookies help us:

  • Remember your preferences
  • Analyse website traffic
  • Improve website functionality
  • Measure marketing effectiveness
  • Provide a personalised browsing experience

You may disable cookies through your browser settings, although certain website functionality may be affected.

Sharing Your Personal Information

We respect your privacy and do not sell your personal information.

Your information may be shared only where necessary with trusted third parties, including:

  • Booking and reservation systems
  • Payment processors
  • Website hosting providers
  • IT support providers
  • Marketing platforms (where consent has been provided)
  • Professional advisers
  • Service providers assisting with weddings, events or guest experiences
  • Government or regulatory authorities where required by law

All service providers are expected to maintain appropriate security measures and confidentiality obligations.

Legal Basis for Processing

In accordance with POPIA, we process personal information where:

  • it is necessary to perform a contract with you;
  • you have provided consent;
  • processing is required by law;
  • processing protects your legitimate interests;
  • processing is necessary for our legitimate business interests, provided these do not override your privacy rights.

Security of Your Information

Five Mountains Guest Farm & Spa takes reasonable technical and organisational measures to protect your personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • unlawful processing;
  • alteration;
  • destruction; or
  • disclosure.

Although every reasonable precaution is taken, no method of electronic transmission or storage can be guaranteed to be completely secure.

Retention of Information

We retain your personal information only for as long as necessary to:

  • fulfil the purposes outlined in this Privacy Policy;
  • comply with legal, accounting or tax obligations;
  • resolve disputes;
  • enforce agreements.

Thereafter, personal information will be securely deleted or anonymised where appropriate.

International Transfers

Some of our service providers may store or process information outside South Africa.

Where this occurs, we will take reasonable steps to ensure that your personal information receives an adequate level of protection consistent with POPIA.

Marketing Communications

Where you have provided consent, we may send you:

  • accommodation specials;
  • spa promotions;
  • seasonal offers;
  • event announcements;
  • newsletters.

You may unsubscribe from marketing communications at any time by clicking the unsubscribe link or contacting us directly.

Children’s Privacy

Our website is not intended to collect personal information from children without parental or guardian consent.

Should we become aware that such information has been collected without appropriate consent, it will be removed as soon as reasonably possible.

Your Rights

Under POPIA you have the right to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of information where legally permissible;
  • object to certain processing activities;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with the Information Regulator.

Requests may be submitted in writing to our Information Officer.

Third-Party Websites

Our website may contain links to third-party websites, including booking platforms and social media pages.

We are not responsible for the privacy practices or content of these external websites.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time.

Any changes will be published on this page together with the updated effective date.

Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your rights under POPIA, please contact us:

Five Mountains Guest Farm & Spa

Information Officer

Email: stay@fivemountainsfarm.co.za

Telephone: +27 (0)21 873 2276

Website: https://fivemountainsfarm.co.za

Information Regulator (South Africa)

If you believe your personal information has not been processed in accordance with POPIA, you may lodge a complaint with:

The Information Regulator (South Africa)

JD House
27 Stiemens Street
Braamfontein
Johannesburg
2001

Website: https://www.justice.gov.za/inforeg/

Complaints: POPIAComplaints@inforegulator.org.za

General Enquiries: enquiries@inforegulator.org.za