Your information
Privacy
This policy explains how St Croix Estate collects, uses and protects your personal information under South Africa’s Protection of Personal Information Act (POPIA).
1 Personal information
We collect full names, contact details, reservation and payment records, correspondence, preferences and signed guest forms. These come from you, the person arranging your stay, booking platforms or service providers. If sharing another person’s details, please have their permission and share this policy with them.
The Immigration Act may also require an ID or passport copy, residential address, residence status in South Africa and signature. Please provide ID on arrival or through a secure method agreed with us.
Health or accessibility details are used only to assist you. Children’s information is limited to their stay, care and legal requirements, with a parent or guardian’s consent where required.
We may collect CCTV footage and incident records for security, and website data such as IP addresses, device details and security logs. Monitored areas are marked.
We may be unable to host you without essential reservation or registration information. Other details are optional.
2 Use of information
We use your information to arrange your stay, process payments, answer enquiries, maintain safety, resolve complaints or claims and meet legal obligations. We obtain consent where required.
If you subscribe to news or offers, you can unsubscribe at any time.
3 Information sharing
We use Benson Software for reservations and TurnStay for card payments. Where necessary and lawful, we share information with staff, booking and payment providers, IT and hosting services, accountants, security providers, insurers, advisers and authorities. Providers acting for us must keep it secure and confidential. We do not sell personal information.
TurnStay may process and store payment-related personal information outside South Africa. Its Privacy Policy explains how this information is handled and protected.
4 Information security
We take reasonable steps to protect your information and restrict access. We notify affected individuals and the Information Regulator of security breaches where required by law.
5 Record retention
We keep information only as required by law or reasonably needed for your stay, accounts, complaints or claims. Guest registers are kept securely for at least two years where required by the Immigration Regulations. Information is then securely deleted or made anonymous.
Routine CCTV footage is kept for no more than 30 days, unless needed for an incident, investigation or legal obligation.
7 Your rights
You may request access, correction or deletion, object to the use of your information, or withdraw consent, subject to the law. Withdrawal does not affect earlier lawful use or information we must keep or may use on another legal basis.
Please contact our Information Officer with any request. We may need to verify your identity. Confirming whether we hold your information is free. Any prescribed access fees will be explained in advance. Our PAIA Manual sets out the procedure.
You may also complain to the Information Regulator.
8 Policy updates
We publish the current version on our website and provide further notice or seek consent where required by law.
9 Contact
St Croix Estate is operated by Kegeti Operations (Pty) Ltd, registration 2024/643151/07, which is responsible for your personal information.
Business address: St Croix Estate, R301 Wemmershoek Road, Franschhoek, 7690, South Africa.
Information Officer: stay@stcroixestate.com
Telephone: +27 79 949 0484
Information Regulator: POPIAComplaints@inforegulator.org.za
Telephone: +27 10 023 5200
Website: inforegulator.org.za