Privacy Policy

Last updated 24 October 2026

This policy explains how Land's Edge Struisbaai collects, uses, shares and protects personal information when you visit www.landsedge.co.za, enquire, make a booking or stay with us. It also explains how you can exercise your rights under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Land's Edge Struisbaai is operated by Landsedge (Pty) Ltd, registration number 2024/076376/07. Landsedge (Pty) Ltd is the responsible party for the processing described in this policy.

Please direct privacy enquiries and requests to our Information Officer using the email address above.

2. Information we collect and where it comes from

Enquiries and bookings: your name and contact details, guest names where supplied, number of guests, arrival and departure dates, booking reference, accommodation preferences, special requests, correspondence and payment status. Payment providers process payments; we do not store full payment card details.

Your stay: booking and check-in information, messages, service requests, feedback and information about incidents, complaints or disputes where relevant.

Website use: technical information such as your IP address, browser and device details, pages requested and referring website, where collected by our hosting service or embedded third-party content. See section 7 for cookies.

We collect information directly from you, through our website, email, telephone and other communication channels you use to contact us. We may also receive it from NightsBridge, booking platforms such as Booking.com, Airbnb and LekkeSlaap, or a person making a booking on your behalf.

If you provide another person's details, please ensure you are authorised to do so and make this policy available to them. We do not request ID or passport copies, children's names or health information. Please avoid including unnecessary sensitive information in special requests or messages.

3. Why we use information

We use personal information to respond to enquiries; arrange, administer and fulfil bookings; communicate about your stay; process and reconcile payments; provide guest support; request feedback, including a review invitation; protect guests and property; handle incidents, complaints and legal claims; maintain our website; and meet applicable legal, tax and accounting obligations.

Depending on the purpose, we rely on your consent, the steps needed to conclude or perform our contract with you, a legal obligation, or legitimate interests such as proportionate security and service administration. We use only information reasonably necessary for the relevant purpose.

Contact, booking and payment information needed to arrange and fulfil a stay is necessary for the booking. Without it, we may be unable to respond, confirm a reservation or provide the requested service. Optional preferences and special requests are voluntary. Where a law requires particular information, we will explain the requirement when requesting it.

We do not currently send promotional emails or WhatsApp messages. If we introduce direct marketing, we will update this policy, obtain consent where required or meet the applicable existing-customer requirements, and provide a simple way to opt out. A booking does not automatically constitute consent to promotional messages.

4. CCTV and property security

We use CCTV for guest and property security and for investigating incidents. Cameras cover external areas including entrances, parking, gardens, the laundry area, braai areas and street-facing approaches. There are no cameras inside accommodation units. Audio is not recorded. CCTV signage is being installed at the properties. Until it is in place, this policy serves as notice that CCTV is in use.

Routine access to footage is restricted to our owner and guest manager through password-protected systems, including the Hik-Connect app. Our alarm monitoring and armed response provider does not have access to our cameras. Relevant footage may be disclosed where reasonably necessary to investigate an incident, deal with an insurance claim or comply with the law.

Footage is automatically deleted after 30 days, unless relevant footage must be retained for an incident, insurance claim, investigation or legal proceedings. In those cases, we retain it only for as long as reasonably necessary for that purpose or as required by law.

5. Who we share information with

We share relevant information only where needed for the purposes described in this policy, including with NightsBridge and booking channels involved in your reservation; website hosting provider Squarespace; email provider Google Workspace; payment providers; our accountants and professional advisers; and security providers, including Top Coastal Security and Hikvision's Hik-Connect service, where relevant to their services.

Information may also be shared with insurers, emergency services, law enforcement or other authorities where necessary and lawfully justified. We do not sell your personal information.

Where a provider processes information on our behalf as an operator, we require appropriate confidentiality and security obligations in a written agreement. Booking platforms and payment providers may also process information independently under their own privacy policies.

6. Processing outside South Africa

Some providers, including Squarespace, Google and Hikvision, may process or route personal information outside South Africa. International booking channels may also process information abroad.

For transfers for which we are responsible, we require a lawful basis under section 72 of POPIA. This may include a recipient subject to an applicable law, binding corporate rules or a binding agreement providing an adequate level of protection, including safeguards for onward transfers, or another basis permitted by section 72, such as a transfer necessary to perform your booking contract.

You may contact our Information Officer for information about relevant destinations and safeguards applicable to your information.

7. Cookies and third-party content

Cookies are small files stored on your device. Our website is hosted by Squarespace and uses cookies and similar technologies for website functionality. Our cookie banner allows you to manage the choices available for our website.

Google Analytics is not currently installed on our website. If we introduce it, we will update this policy and configure consent controls before using it.

Our homepage and Guest Reviews page include Tripadvisor content, and pages may include Google content. Embedded content may transmit technical information, including your IP address, to those providers and may use cookies or similar technologies. Depending on the content and your choices, providers may use information for their own purposes, including advertising. Their privacy policies explain their practices:

• Tripadvisor: tripadvisor.mediaroom.com/us-privacy-policy
• Google: policies.google.com/privacy
• Squarespace: www.squarespace.com/privacy

You can revisit the cookie preferences available on our website and use your browser settings to block or delete cookies. Blocking some cookies may affect website features. Our banner may not control tracking on a separate booking platform or another website you choose to visit; their own privacy notices and controls apply.

8. How long we keep information

We retain personal information only for as long as necessary for its purpose, to meet legal obligations or to establish, exercise or defend legal claims.

Booking, payment and invoice records: for the periods required by applicable tax and company-record laws. Where the five-year tax retention rule applies, it generally runs from submission of the relevant tax return, rather than from the date of your stay. Longer retention may be necessary for other statutory requirements, outstanding returns, audits, investigations or disputes.

Enquiries that do not result in a booking: ordinarily 12 months after the last contact. Guest messages and additional stay details: ordinarily 12 months after checkout, unless they form part of records that must be retained longer. CCTV: as described in section 4.

When information is no longer needed and no lawful retention basis remains, we securely delete, destroy or de-identify it.

9. How we protect information

We use reasonable technical and organisational safeguards appropriate to the information and risks, including access restrictions, password protection and confidentiality requirements. Access is limited to people who need it for their duties.

If there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected people as required by POPIA, as soon as reasonably possible, subject to lawful exceptions or delays.

10. Your rights and how to contact us

Subject to POPIA and other applicable law, you may ask us to confirm, free of charge, whether we hold your personal information; request access to it and information about recipients; request correction or deletion of information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained; and request destruction or deletion of records we are no longer entitled to retain.

You may withdraw consent where processing relies on consent. Withdrawal does not affect processing lawfully carried out before withdrawal. You may also object on reasonable grounds to processing where POPIA permits, and object to direct marketing at any time. These rights do not require us to delete information that must lawfully be retained.

Email hello@landsedge.co.za for the attention of the Information Officer. We may request proportionate proof of identity before disclosing or changing information. We will respond within the applicable legal timeframe and explain any lawful refusal, extension, prescribed form or permitted fee.

11. Complaints

You may raise a concern with our Information Officer or complain directly to the Information Regulator (South Africa). You do not need to complete our internal process before contacting the Regulator.

Complaints are lodged on the Regulator's prescribed form (POPIA Form 5). The form and submission guidance are available on the Regulator's website.

12. Changes to this policy

We may update this policy to reflect changes to our services, processing or legal obligations. The current version will be published on our website with its last updated date. Where required, we will provide further notice or obtain consent before introducing a new use of personal information.