Legal · POPIA

Privacy Policy

Last updated: 10 May 2026 · Version 1.0

1. Who we are

Mantuma Camp is operated by Dream Holiday Operators (Pty) Ltd, a private company registered in the Republic of South Africa ("Mantuma Camp", "we", "us", "our"). The accommodation is located inside uMkhuze Game Reserve, a provincial reserve managed by Ezemvelo KZN Wildlife.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, submit an enquiry, share a Bush Story, or otherwise interact with us. We are committed to compliance with the Protection of Personal Information Act, No. 4 of 2013 ("POPIA").

Our Information Officer can be contacted at hello@mkuzegamereserve.co.za. Full contact details are at the end of this policy.

2. What personal information we collect

We collect only the personal information you choose to provide when you contact us. This typically includes:

From booking enquiries

• First and last name
• Email address
• Phone or WhatsApp number (optional)
• Travel dates (arrival and departure)
• Number of adults and children
• Accommodation preference
• Any free-text message, special requests, or dietary notes you provide

From Bush Story submissions

• First and last name (or a pen name, if preferred)
• Email address
• Story title, body text, dates, and any photos you submit
• Your consent to publish (or not)

Automatically collected, when you browse

• Standard server logs: IP address, browser type, pages visited, timestamps
• Anonymised analytics data (page views, session duration, geographic region) when you have consented to analytics cookies

We do not collect identity numbers, passport numbers, payment-card details, banking information, biometric data, or any other "special" personal information through this website.

3. Why we collect it

We collect personal information for these specific purposes only:

• To respond to your enquiry and provide the information or booking quote you have requested
• To process and confirm a booking, where you proceed to book accommodation with us
• To consider your story for publication in the Bush Stories section, where you have submitted one
• To improve our website and services through anonymised analytics, where you have consented
• To comply with legal obligations, such as record-keeping required by South African law

We will not use your personal information for any other purpose without first obtaining your further consent.

4. Lawful basis for processing

Under POPIA, personal information may only be processed on one or more of the lawful bases set out in the Act. Our processing is justified on the following bases:

• Your consent — when you submit an enquiry form, story form, or accept cookies, you are giving consent for the processing described in this policy
• Performance of a contract — where you have made a booking with us, processing is necessary to provide the accommodation
• Legitimate interests — for routine technical operations of the website (server logs, security monitoring), where these do not unreasonably affect your privacy
• Legal obligation — where SARS or other legislation requires retention of records

5. Who we share your information with

We share your personal information only with the following categories of operator, each bound by appropriate data-processing terms:

• Form-handling services — Formspree (formspree.io), which receives your submitted enquiry or story before forwarding it to us by email
• Email service providers — the email infrastructure that delivers our reservations inbox (currently Google Workspace)
• Web hosting — Netlify or our chosen hosting provider, which stores the website and processes server logs
• Analytics — Google Analytics (Google LLC), only where you have consented to analytics cookies

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your information with affiliates, advertising networks, or data brokers.

We may disclose your information where required to do so by law (for example, in response to a court order or regulatory request), or where necessary to protect our legal rights.

6. Cross-border transfers

Some of our service providers (such as Formspree, Google Analytics, and our hosting provider) operate servers outside South Africa, principally in the United States and European Union. Where this is the case:

• The provider's jurisdiction has data-protection laws that provide a substantially similar level of protection to POPIA, or
• The transfer is necessary for the performance of the contract you have entered into with us, or
• You have consented to the transfer through this policy

We choose providers carefully and only those who publicly commit to GDPR-equivalent or stronger protections.

7. How long we keep your information

• Booking enquiries that did not result in a booking: 24 months from the date of last contact, then deleted
• Confirmed bookings and guest records: 5 years after departure, in line with SARS record-keeping requirements
• Bush Story submissions that were not published: 12 months, then deleted
• Bush Stories published with your consent: kept while published; removed within 30 days of you withdrawing consent
• Server logs: 90 days, then automatically rotated
• Analytics data: per Google Analytics retention settings (currently 14 months)

8. How we protect your information

We take reasonable technical and organisational measures to protect your personal information:

• HTTPS encryption for all data in transit between your browser and our website
• Restricted access to the reservations inbox; only authorised staff can read enquiries
• Strong passwords and two-factor authentication on all administrative accounts
• Regular software updates and security patches on the website infrastructure
• Periodic review of who has access to which information, and removal when access is no longer needed

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security and you provide it at your own risk.

In the event of a personal-information breach that creates a risk to your rights, we will notify you and the Information Regulator as required by section 22 of POPIA.

9. Your rights

POPIA gives you the following rights in respect of your personal information held by us:

• The right to be informed about how your personal information is being used (this policy)
• The right of access — to request a copy of the personal information we hold about you
• The right to correction of inaccurate or outdated information
• The right to deletion of your information where the processing is no longer necessary
• The right to object to processing in certain circumstances
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with the Information Regulator (see contact below)

To exercise any of these rights, contact our Information Officer using the details at the end of this policy. We will respond within a reasonable period, and ordinarily within 30 days.

10. Children's personal information

Mantuma Camp welcomes families, and parents often include children's first names and ages on booking enquiries. We treat this information with extra care:

• We process children's personal information only as part of a parent's or guardian's booking enquiry
• We do not knowingly collect personal information directly from children under 18
• We do not use children's information for marketing purposes
• If you become aware that a child has provided personal information directly to us without parental consent, please contact us and we will delete it

11. Cookies and analytics

This website uses a small number of cookies, described in our separate Cookie Policy. In summary:

• Strictly-necessary cookies — required to remember your cookie-banner choice; cannot be turned off
• Analytics cookies — Google Analytics, only loaded after you accept; can be declined
• No advertising cookies, no third-party tracking pixels, no Facebook Pixel

Your cookie consent is recorded in your browser and can be changed at any time using the link in the website footer.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or in the law. The "Last updated" date at the top of the page tells you when the most recent change was made. Material changes will be flagged on the website homepage for at least 30 days. Continued use of our website after a change constitutes acceptance of the updated policy.

13. How to contact us

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with:

↑ Back to top · Return to Mantuma Camp