Fynbos & Gold

Legal

Privacy notice

How we handle personal information under the Protection of Personal Information Act (POPIA) and the EU/UK General Data Protection Regulation (GDPR).

Under review. This notice is published in good faith and is currently under legal review; it may be updated. Last updated 26 October 2026.

1. Who we are

This website, Fynbos & Gold, is operated by Cape Colony, a trading name based in South Africa. Cape Colony is the responsible party (POPIA) and controller (GDPR) for the personal information described here. For any privacy question or request, including to reach our Information Officer, email sortedprintables@gmail.com.

2. What we collect and why

DataPurposeLawful basisRetention
Your name, email address and message when you email usReplying to you, including adding you to the newsletter launch notice if you askLegitimate interests in answering enquiries; consent where you ask to be notified (GDPR Art. 6(1)(a) and (f); POPIA s.11(1)(a) and (f))Up to 12 months after our last exchange, or until you ask us to delete it
Technical server logs kept by our hosting provider (IP address, browser, pages, time)Security and keeping the site runningLegitimate interests (GDPR Art. 6(1)(f); POPIA s.11(1)(f))As set by the hosting provider, typically a short period

This site has no account system, no sign-up forms and no comment sections. We do not use analytics, advertising or social-media tracking cookies. If that changes we will update this notice and ask for consent where required.

3. Links to booking platforms

When you click a link to a platform such as Viator, GetYourGuide, Klook, Expedia or Booking.com you leave this site. That platform may set its own cookies, including to attribute a booking to us once we join its affiliate programme, and its own privacy notice applies. We would receive only aggregated commission reports, not your booking details.

4. Service providers and international transfers

The site is hosted on Cloudflare Pages (Cloudflare, Inc.). Email is handled by Google (Gmail). Where personal information is transferred outside South Africa, the EU/EEA or the UK, we rely on adequacy decisions, standard contractual clauses or equivalent safeguards (POPIA s.72; GDPR Chapter V).

5. Your rights

Under GDPR you can request access, rectification, erasure, restriction and portability, and object to processing; you may withdraw consent at any time without affecting prior processing. Under POPIA you can request access to and correction or deletion of your personal information, and object to processing, including for direct marketing. To exercise any right, email sortedprintables@gmail.com.

You can complain to the Information Regulator (South Africa), to your local EU data-protection authority, or in the UK to the Information Commissioner's Office (ICO).

6. Security and breaches

We use reasonable technical and organisational measures. If a breach affecting your data occurs we will notify you and the relevant regulator where the law requires (POPIA s.22; GDPR Arts. 33–34).

7. Children

This site is intended for adults planning travel. We do not knowingly collect children's data.

8. Changes

We will post any changes on this page with a new date. Last updated: 26 October 2026.