Privacy Policy · Privaatheidsbeleid

Last updated: March 2026 v2026.03  ·  Next review: March 2027

Quick summary: We collect limited information to handle enquiries and bookings for Rozelee Rest. We don't sell your data. You can access, correct, or delete your info by contacting us directly.

This policy explains how Rozelee Rest ("we", "us") collects, uses, and protects personal information in line with South African law, including the Protection of Personal Information Act (POPIA) and the Electronic Communications and Transactions Act (ECTA).

1) Information we collect
  • Booking & contact details (name, email, phone, country, special requests)
  • Stay information (dates, number of guests, unit type, preferences)
  • Payment-related info (processed by our booking/payment providers — see §5)
  • Technical data (IP address, browser type, device info)
  • User content (messages, reviews, photos you share with us)
2) How we use your information
  • Process and manage enquiries and bookings
  • Send confirmations, updates, and provide guest support
  • Meet legal and financial obligations (invoices, records)
  • Improve our website and services (analytics & troubleshooting)
  • Security and fraud prevention
3) Legal basis & POPIA compliance

Processing is based on one or more of the following: your consent, contractual necessity (to fulfil your booking), legal obligations we must comply with, and legitimate interests in operating our guesthouse securely.

4) Consent & withdrawal

By using our website or services, you consent to processing as described here. You may withdraw consent at any time by contacting us (see below). Withdrawal will not affect any processing that was already lawfully carried out before your withdrawal.

5) Sharing & disclosures (service providers)

We don't sell or rent your personal information. We share limited data with trusted third-party providers under confidentiality and data-processing terms:

  • Booking engine: NightsBridge
  • Payment gateways: NightsBridge / Booking.com / LekkeSlaap — Rozelee Rest does not store card numbers
  • Email / hosting / analytics: Gmail / Afrihost / Google Analytics

Some providers may process data outside South Africa. We use reputable providers with appropriate cross-border safeguards (see §10).

6) Security safeguards

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. Our booking and payment processes use industry-standard encrypted connections.

7) Your rights
  • Access your personal information we hold
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict certain processing
  • Lodge a complaint with the Information Regulator (see §27)
Make a data request: Contact our Information Officer at the email below with proof of identity and sufficient detail. We aim to respond within 21 business days.
Email us →
8) Booking terms & cancellation policy

Full payment is required to confirm a booking.

  • Cancellations 4 or more days before arrival: no cancellation fee
  • Cancellations less than 3 days before arrival: 100% cancellation fee applies
  • No-shows or early departures: charged in full — no refund
  • Refunds are processed within 30 days to the original payment method where possible

Full terms: /booking-terms

9) Payment & card security

Cards are processed securely via book.nightsbridge.com. Rozelee Rest does not store card numbers. All providers comply with PCI-DSS.

Other accepted methods: EFT / online via NightsBridge, LekkeSlaap, or Booking.com / direct deposit — payment must reflect to confirm a booking.

10) Cross-border transfers

Where our service providers store or process data outside South Africa, transfers occur under contractual safeguards with reputable international providers. Further details are available on request.

11) ID / passport handling at check-in

We may request a valid ID or passport at check-in for verification and legal/security purposes. Data captured: Full name, ID or passport number, Nationality. Retention: 5 years unless law requires longer, after which it is securely deleted.

12) Guest register retention

We maintain a guest register recording names, dates of stay, and unit number for operational and legal purposes. Retention period: 5 years (or as required by law).

13) CCTV / security cameras

CCTV cameras may operate in common areas (entrances, parking, exterior grounds) for safety and security. No CCTV is installed in private areas (guest rooms or bathrooms). Typical footage retention: 14–30 days (longer if required by law or if an incident is under investigation). Access is limited to management and our security provider for legitimate purposes only.

14) Wi-Fi terms & usage logs

Free Wi-Fi is provided subject to acceptable use. We may retain minimal connection logs (e.g., device MAC address, IP, and connection time) for 6–12 months for security purposes. We do not inspect the content of traffic. Illegal activity is strictly prohibited and may result in service being blocked or the matter being reported to authorities.

Full Wi-Fi terms: /wifi-terms

15) House rules & property policy
  • Check-in: from 14:00  ·  Check-out: by 10:00 (late check-in by prior arrangement, no later than 21:00)
  • Smoking: Strictly prohibited indoors. Guests may smoke only in designated outdoor areas with ashtrays. Dispose of cigarette butts responsibly.
  • Pets: Not permitted unless pre-arranged and confirmed in writing.
  • Quiet hours: 20:00 – 07:00. Please be considerate of other guests and neighbours.
  • Pool rules: Registered guests only. No lifeguard on duty — use at your own risk. Children must be supervised at all times. No glass, alcohol, running, or rough play in or around the pool. Pool hours: 08:00–20:00.
  • Damages & lost property: Guests are responsible for any damage or loss caused during their stay. Please report accidental damage promptly. Charges may apply. Rozelee Rest is not liable for lost, stolen, or unattended items.

Full house rules: /house-rules

16) Child / minor policy

Where we collect or process information relating to a minor (a person under 18), we obtain consent from a parent or legal guardian as required by POPIA. Children must be supervised at all times, particularly around the pool area.

17) Accessibility statement

We aim to accommodate all guests. Current accessibility features include accessible parking and ground-floor units. Please contact us ahead of your arrival with any specific accessibility needs so we can assist you appropriately.

18) Load-shedding & backup power

During power outages, Rozelee Rest uses solar power as a backup solution to support essential services, subject to weather conditions and the duration of the outage. Some services may be temporarily impacted during extended outages.

19) Cookies & tracking technology

We use essential cookies for site functionality and booking features. We also use optional analytics cookies (Google Analytics) to understand site usage, and optional marketing cookies for campaign measurement. You can manage your preferences using the button below or via your browser settings. Disabling non-essential cookies will not prevent you from using our site.

20) Marketing communications

We only send marketing messages (e.g., special offers or updates) if you have explicitly opted in. You can opt out at any time by clicking the unsubscribe link in any message footer, or by contacting us directly.

21) Insurance & liability notice

Guests are advised to safeguard their valuables. Rozelee Rest is not liable for loss or damage to personal items unless directly caused by our negligence, and only to the extent permitted by applicable law.

22) Information Officer & operators (processors)
  • Information Officer: Whanita Parkes (Owner / Operator) — rozeleerest@gmail.com
  • Operators (processors): NightsBridge; Payment gateways used by NightsBridge / Booking.com / LekkeSlaap; Gmail; Afrihost; Google Analytics
  • PAIA Manual: /paia-manual
23) Data retention schedule
Record typePurposeRetention period
Bookings & guest registerOperations / legal5 years
Invoices & financial recordsTax / audit5 years
CCTV footageSecurity14–30 days
Contact & enquiry formsGuest support12 months
Wi-Fi connection logsSecurity / compliance12 months
Marketing / mailing listsPromotionsUntil opt-out or withdrawal
ID / passport recordsLegal verification5 years
24) Data subject requests (access / correction / deletion)

To exercise any of your rights, email our Information Officer with proof of identity and sufficient detail about your request. We aim to respond within 21 business days. A fee may apply for excessive or repetitive requests.

25) Data breach notification

In the unlikely event of a personal information breach likely to result in material harm to data subjects, we will notify affected individuals and the Information Regulator as required by POPIA Section 22.

26) Updates to this policy

We may update this Privacy Policy periodically to reflect changes in law or our practices. Material changes will be posted here with a revised date shown at the top of this page. We encourage you to review this page on occasion.

27) Information Regulator (South Africa)

If you believe your data rights have been violated, you may lodge a complaint with the Information Regulator:

Contact us

Email: rozeleerest@gmail.com
Tel / WhatsApp: 071 144 4199  ·  064 695 8819
Address: 36 Augusta Street, Sonheuwel, Nelspruit, 1200
ECTA Section 43 — Company Information
Vinnige opsomming: Ons versamel beperkte inligting om navrae en besprekings by Rozelee Rest te hanteer. Ons verkoop nie jou data nie. Jy kan toegang vra, regstel of skrap deur ons te kontak.

Hierdie beleid verduidelik hoe Rozelee Rest ("ons") persoonlike inligting invorder, gebruik en beskerm ingevolge die Suid-Afrikaanse reg, insluitend die Wet op Beskerming van Persoonlike Inligting (POPIA) en die Wet op Elektroniese Kommunikasies en Transaksies (ECTA).

1) Inligting wat ons invorder
  • Bespreking- en kontakbesonderhede (naam, e-pos, foon, land, spesiale versoeke)
  • Verblyf-inligting (datums, aantal gaste, eenheid-tipe, voorkeure)
  • Betaling-verwante inligting (verwerk deur ons verskaffers — sien §5)
  • Tegniese data (IP-adres, blaaier-tipe, toestel-inligting)
  • Gebruiker-inhoud (boodskappe, resensies, foto's wat jy met ons deel)
2) Hoe ons jou inligting gebruik
  • Verwerk en bestuur navrae en besprekings
  • Stuur bevestigings, opdaterings, en bied gas-ondersteuning
  • Voldoen aan wetlike en finansiële verpligtinge (fakture, rekords)
  • Verbeter ons webwerf en dienste (analise en foutoplossing)
  • Sekuriteit en bedrogvoorkoming
3) Regsgrondslag & POPIA-nakoming

Verwerking berus op een of meer van die volgende: jou toestemming, kontraktuele noodsaaklikheid (om jou bespreking te vervul), wetlike verpligtinge, en regmatige belange in die veilige bedryf van ons gastehuis.

4) Toestemming & onttrekking

Deur ons webwerf of dienste te gebruik, stem jy in tot verwerking soos hier uiteengesit. Jy kan te eniger tyd onttrek deur ons te kontak (sien hieronder). Onttrekking het geen invloed op verwerking wat reeds wettig uitgevoer is nie.

5) Deling & openbaarmaking (diensverskaffers)

Ons verkoop of verhuur nie persoonlike inligting nie. Ons deel beperkte data met betroubare derde partye onder vertroulikheids- en dataverwerkingsooreenkomste:

  • Besprekingsenjin: NightsBridge
  • Betalingspoorte: NightsBridge / Booking.com / LekkeSlaap — Rozelee Rest stoor nie kaartnommers nie
  • E-pos / gasheer / analise: Gmail / Afrihost / Google Analytics

Sommige verskaffers kan data buite Suid-Afrika verwerk. Ons gebruik toepaslike kontraktuele waarborge vir sulke grens-oorplasings (sien §10).

6) Sekuriteitsmaatreëls

Ons pas toepaslike tegniese en organisatoriese maatreëls toe om persoonlike inligting te beskerm teen ongemagtigde toegang, verandering, openbaarmaking of vernietiging. Ons bespreking- en betalingsprosesse gebruik industrie-standaard versleutelde verbindings.

7) Jou regte
  • Toegang tot jou persoonlike inligting wat ons hou
  • Versoek regstelling van onakkurate data
  • Versoek uitwissing van jou data (onderhewig aan wetlike bewarings-vereistes)
  • Beswaar teen of beperking van sekere verwerking
  • Dien 'n klagte in by die Inligtingsreguleerder (sien §27)
Dien 'n data-versoek in: Kontak ons Inligtingsbeampte by die e-pos hieronder met bewys van identiteit en voldoende besonderhede. Ons streef na 'n antwoord binne 21 werksdae.
Stuur vir ons 'n e-pos →
8) Besprekingsterme & kansellasiebeleid

Volle betaling word vereis om 'n bespreking te bevestig.

  • Kansellasies 4 of meer dae voor aankoms: geen kansellasiefooi
  • Kansellasies minder as 3 dae voor aankoms: 100% kansellasiefooi van toepassing
  • Nie-opdaag of vroeg vertrek: vol tarief gehef — geen terugbetaling
  • Terugbetalings word binne 30 dae verwerk na die oorspronklike betalingsmetode waar moontlik

Volledige terme: /booking-terms

9) Betaling & kaartsekuriteit

Kaarte word veilig verwerk via book.nightsbridge.com. Rozelee Rest stoor nie kaartnommers nie. Alle verskaffers voldoen aan PCI-DSS.

Ander aanvaarde metodes: EFT / aanlyn via NightsBridge, LekkeSlaap of Booking.com / direkte deposito — betaling moet weerspieël om bespreking te bevestig.

10) Grens-oorplasings van data

Waar diensverskaffers data buite Suid-Afrika stoor of verwerk, vind oorplasings plaas onder kontraktuele waarborge met betroubare internasionale verskaffers. Verdere besonderhede is op versoek beskikbaar.

11) ID / paspoort-hantering by incheck

Ons kan 'n geldige ID of paspoort by incheck vereis vir verifikasie en wetlike/sekuriteitsredes. Data wat vasgelê word: Volle naam, ID- of paspoortnommer, Nasionaliteit. Bewaringstydperk: 5 jaar (langer indien die wet dit vereis), waarna dit veilig geskrap word.

12) Gasteregister-bewaring

Ons hou 'n gasteregister met name, verblyfdatums en eenheid-nommer vir bedryfsdoeleindes en wetlike rekords. Bewaringstydperk: 5 jaar (of soos deur die wet vereis).

13) CCTV / sekuriteitskameras

CCTV-kameras kan in gemeenskaplike areas (ingange, parkering, buite-omgewing) werk vir veiligheid en sekuriteit. Geen CCTV word in private areas geïnstalleer nie (gastekamers of badkamers). Tipiese bewaringstydperk: 14–30 dae (langer indien vereisbaar deur wet of lopende ondersoek). Toegang is beperk tot bestuur en ons sekuriteitsverskaffer.

14) Wi-Fi bepalings & gebruikslogboeke

Gratis Wi-Fi word verskaf onderhewig aan aanvaarbare-gebruiksreëls. Ons kan minimale verbindingslogboeke hou (bv. toestel-MAC-adres, IP, en verbindingstyd) vir 6–12 maande vir sekuriteitsdoeleindes. Ons inspekteer nie die inhoud van verkeer nie. Onwettige aktiwiteit word verbied en kan geblokkeer of aan owerhede gerapporteer word.

Volledige bepalings: /wifi-terms

15) Huisreëls & eiendomsbeleid
  • Incheck: vanaf 14:00  ·  Uitcheck: teen 10:00 (laat incheck met vooraf reëlings, nie later as 21:00 nie)
  • Rook: Streng verbode binnenshuis. Gaste mag slegs in aangewese buite-areas met asbakkies rook. Gooi sigaretstompies verantwoordelik weg.
  • Troeteldiere: Nie toegelaat tensy vooraf skriftelik gereël en bevestig.
  • Stiltetye: 20:00 – 07:00. Wees asseblief bedagsaam teenoor ander gaste en bure.
  • Swembadreëls: Slegs vir geregistreerde gaste. Geen lewensredder — eie risiko. Kinders moet altyd toesig hê. Geen glas, alkohol, hardloop of rof speel in of rondom die swembad nie. Ure: 08:00–20:00.
  • Skade & verlore eiendom: Gaste is aanspreeklik vir skade of verlies tydens hulle verblyf. Rapporteer ongelukke dadelik. Kostes kan van toepassing wees. Rozelee Rest is nie aanspreeklik vir verlore, gesteelde of onbewaakte items nie.

Volledige huisreëls: /house-rules

16) Kinderbeleid

Waar ons inligting rakende 'n minderjarige (persoon onder 18) verwerk, verkry ons toestemming van 'n ouer of wettige voog soos vereis deur POPIA. Kinders moet altyd toesig hê, veral rondom die swembad-area.

17) Toeganklikheidsverklaring

Ons poog om alle gaste te akkommodeer. Huidige toeganklikheidskenmerke sluit in toeganklike parkering en grondvloer-eenhede. Kontak ons asseblief vooraf met enige spesifieke toeganklikheidsbehoeftes sodat ons jou kan help.

18) Beurtkrag & rugsteunkrag

Tydens kragonderbrekings gebruik Rozelee Rest sonkrag as rugsteunoplossing om noodsaaklike dienste te ondersteun, onderhewig aan weerstoestande en die duur van die onderbreking. Sommige dienste kan tydelik geraak word tydens langdurige onderbrekings.

19) Koekies & dop-tegnologie

Ons gebruik noodsaaklike koekies vir webwerf-funksionaliteit en besprekingsfunksies. Ons gebruik ook opsionele analise-koekies (Google Analytics) en opsionele bemarkingskoekies. Jy kan jou voorkeure via die knoppie hieronder of jou blaaier-instellings bestuur.

20) Bemarkings-kommunikasie

Ons stuur slegs bemarkingsboodskappe (bv. spesiale aanbiedinge of opdaterings) as jy uitdruklik ingestem het. Jy kan te eniger tyd onttrek deur die uitskryf-skakel in enige boodskap-voet te gebruik, of deur ons direk te kontak.

21) Versekering & aanspreeklikheids-kennisgewing

Gaste word aangeraai om hulle waardevolle items te beveilig. Rozelee Rest is nie aanspreeklik vir verlies of skade aan persoonlike items nie, tensy dit direk deur ons nalatigheid veroorsaak is, en slegs tot die mate wat deur die wet toegelaat word.

22) Inligtingsbeampte & operateurs (verwerkers)
  • Inligtingsbeampte: Whanita Parkes (Eienaar / Operateur) — rozeleerest@gmail.com
  • Operateurs (verwerkers): NightsBridge; Betalingspoorte deur NightsBridge / Booking.com / LekkeSlaap; Gmail; Afrihost; Google Analytics
  • PAIA-handleiding: /paia-manual
23) Databewaringskedule
Rekord-tipeDoelBewaringstydperk
Besprekings & gasteregisterBedryf / wetlik5 jaar
Fakture & finansiële rekordsBelasting / oudit5 jaar
CCTV-beeldmateriaalSekuriteit14–30 dae
Kontak- & navraag-vormsGas-ondersteuning12 maande
Wi-Fi verbindingslogboekeSekuriteit / nakoming12 maande
Bemarkings- / poslysPromosiesTot onttrekking of intrekking
ID / paspoort-rekordsWetlike verifikasie5 jaar
24) Datasubjek-versoeke (toegang / regstelling / uitwissing)

Om enige van jou regte uit te oefen, e-pos ons Inligtingsbeampte met bewys van identiteit en voldoende besonderhede oor jou versoek. Ons streef na 'n antwoord binne 21 werksdae. 'n Fooi kan van toepassing wees vir buitensporige of herhaalde versoeke.

25) Dataskending-kennisgewing

In die onwaarskynlike geval van 'n persoonlike inligtingskending wat waarskynlik wesenlike skade aan datasubjekte sal veroorsaak, sal ons geraakte persone en die Inligtingsreguleerder in kennis stel soos vereis deur POPIA Artikel 22.

26) Opdaterings aan hierdie beleid

Ons kan hierdie Privaatheidsbeleid periodiek opdateer om veranderinge in die reg of ons praktyke te weerspieël. Wesenlike veranderinge sal hier geplaas word met 'n hersiene datum bo-aan die bladsy. Ons moedig jou aan om hierdie bladsy gereeld te hersien.

27) Inligtingsreguleerder (Suid-Afrika)

As jy glo dat jou dataregte geskend is, kan jy 'n klagte by die Inligtingsreguleerder indien:

Kontak ons

E-pos: rozeleerest@gmail.com
Tel / WhatsApp: 071 144 4199  ·  064 695 8819
Adres: 36 Augusta Straat, Sonheuwel, Nelspruit, 1200
ECTA Artikel 43 — Maatskappy-inligting