Data Protection
Serene-meadow is committed to protecting your personal data in accordance with applicable data protection laws, including the Protection of Personal Information Act (POPIA) in South Africa and, where applicable, the General Data Protection Regulation (GDPR) for visitors from the European Union.
Data Controller
Serene-meadow is the data controller responsible for your personal data. Our contact details are:
45 Botanical Drive
Cape Town, 7700
South Africa
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you submit an enquiry or booking request, you consent to our processing of your data for that purpose.
- Contractual Necessity: Processing necessary to perform services you have requested.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality.
- Legal Obligation: Processing required to comply with legal requirements.
Your Data Protection Rights
Under applicable data protection legislation, you have the following rights:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete data.
- Right to Erasure: You may request deletion of your personal data under certain circumstances.
- Right to Restriction: You may request that we restrict processing of your data in certain situations.
- Right to Data Portability: You may request transfer of your data to another organisation in a machine-readable format.
- Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.
International Data Transfers
Your personal data may be transferred to and processed in countries outside South Africa. When such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable law.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the type of data and the purpose of processing:
- Booking enquiries: Three years after the last interaction
- Marketing communications: Until you unsubscribe or request deletion
- Website analytics: 26 months
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Regulator in South Africa or, for EU residents, with your local supervisory authority.
Information Regulator (South Africa):
33 Hoofd Street, Braamfontein
Johannesburg, 2001
Updates
This Data Protection notice may be updated periodically. Any changes will be posted on this page with an updated revision date.
Last updated: September 2024