Privacy notice

Who we are

Anahata Nature Resort, BR03, Ridge Lane, Broederstroom, Hartbeespoort, 0216, is responsible for the personal information described here. For anything about your information — including asking to see, correct or delete it — contact our information officer at info@anahataresort.co.za or on 078 067 9619.

We process personal information under the Protection of Personal Information Act, 2013 (POPIA).

What we collect, and why

• When you enquire or book: your name, email address, phone number, the dates, cabin and number of guests, any experiences you choose, and anything you write to us. We use these to answer you, to manage your booking and your stay, and to keep the records the law requires.
• When you pay: PayFast processes your payment. We receive confirmation of the amount and whether it succeeded — never your card or bank details.
• When you sign in to see your bookings: your email address, to find your bookings. If you choose to sign in with Google, Google shares your name and email address with us, and nothing else.
• If you booked through Airbnb, Booking.com or LekkeSlaap: that platform shares your dates with us so we do not double-book the cabin. Alongside them we keep only what lets us find your reservation on that platform — a link to it, or the last four digits of your phone number. We do not keep your name, email address or full phone number from those platforms.
• When we email you: whether the email was delivered, so we can phone you if an address turns out to be wrong.

We collect this because we need it to take and honour your booking, because the law requires some of it to be kept, and — for keeping the site secure — because we have a legitimate interest in protecting it.

Cookies and your device

We use a small number of cookies that the site needs to work: to keep you signed in to see your bookings, and to keep our own staff signed in. We do not use advertising cookies, tracking pixels or analytics services.

If you tick "Remember my details on this device" when you book, your name, email address and phone number are saved in your own browser so the form is filled in next time. They stay on your device — not with us — and "Not you?" on the booking form removes them.

Who we share it with

We do not sell your information or share it for marketing. We use these service providers to run the site and the bookings, each only for that purpose:

• PayFast — payments (South Africa).
• Supabase — our booking database (servers in Frankfurt, Germany).
• Vercel — hosts this website (servers in Frankfurt, Germany).
• Resend — sends our emails (servers in Ireland).
• Hostinger — our email inboxes.
• Google — only if you choose to sign in with Google.
• The developer who builds and maintains this website for us.

Some of these providers store information outside South Africa, in the European Union. EU law gives personal information protection comparable to POPIA, which is what POPIA requires before information may be sent abroad.

How long we keep it

Records of bookings and payments are kept for five years, as South African tax law requires. Enquiries that did not become a booking are deleted after two years. Delivery reports on our emails are kept for a year.

Keeping it safe

Your information is encrypted on its way to and from this site, and is readable only by our own systems and the people who run the resort. Staff sign in individually, and passwords are never stored in readable form.

Your rights

You may ask us what information we hold about you, and ask us to correct it or delete it. You may object to how we use it. Contact our information officer using the details above — we will answer within a reasonable time and will not charge you for a simple request.

If you are unhappy with how we have handled your information, you may complain to the Information Regulator of South Africa: inforegulator.org.za.

Children

Bookings must be made by an adult. We do not knowingly collect information from children, other than a child's place in a booking made by their parent or guardian.

Changes to this notice

If we change how we handle personal information, we will update this page and the date at the top of it.