Privacy Policy

Golforia Golf Tours ("Golforia", "we", "us" or "our") respects your privacy. This policy explains how we process personal information when you use golforia.africa, create an account, request information, submit a golf-tour enquiry, make or manage a booking, use our golf-instruction services, communicate with us, or travel on a journey arranged by us.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law. This policy should be read with our Terms & Conditions.

1. Responsible party and contact details

The responsible party is Golforia Golf Tours, operating from Somerset West, The Huntsman Estate, Cape Town, 7134, South Africa.

• Email and privacy requests: admin@golforia.africa
• Telephone: +27 66 391 1500 / +27 62 711 7945
• Website: golforia.africa

2. Personal information we collect

Depending on how you interact with us, we may collect:

• identity and contact details, including your name, email address, telephone number, country and account identifiers;
• journey details, including travel dates, destinations, group composition, accommodation, golf ability and handicap, rooming, transport, activities and preferences;
• information needed to meet dietary, accessibility, medical or safety requirements that you choose to disclose;
• booking, quotation, invoice and payment-status records. Card details are handled by the payment provider and are not intended to be stored by Golforia;
• messages, enquiry history, feedback, uploaded media and golf-instruction information you provide;
• account, authentication and security information; and
• technical information such as IP address, device and browser information, pages visited, referral source, cookie identifiers and security-check results.

3. How we collect information

We usually collect information directly from you through our website, email, telephone, WhatsApp, forms and conversations. We may also receive relevant information from a person arranging travel for a group, a travel adviser, payment and authentication providers, or suppliers involved in a requested or confirmed journey. If you provide information about another traveller, you must be authorised to do so and should make this policy available to them.

4. Why we process information

We process personal information where it is adequate, relevant and reasonably necessary to:

• respond to enquiries and prepare personalised proposals;
• create and manage accounts, applications, bookings, itineraries and payments;
• arrange golf, accommodation, transfers, activities, dining and other requested services;
• communicate service, safety, schedule and booking information;
• provide golf instruction, customer support and post-journey assistance;
• detect fraud, spam, misuse and security incidents;
• operate, analyse and improve our website and services;
• meet accounting, tax, consumer-protection, safety and other legal obligations; and
• send marketing only where permitted, with an opportunity to object or unsubscribe.

Our lawful grounds may include your consent, steps requested before entering into a contract, performance of a contract, compliance with legal obligations, protection of legitimate interests, and other grounds permitted by POPIA. You may withdraw consent where processing depends on consent, without affecting processing already lawfully completed.

5. Required and voluntary information

Providing information for an initial enquiry is voluntary. Certain details become necessary when you ask us to prepare or fulfil a booking, meet supplier requirements, process payment, address safety or accessibility needs, or comply with law. If required information is not provided, we may be unable to respond fully, prepare an accurate proposal, confirm a booking or provide the requested service.

6. Who receives information

We disclose only the information reasonably needed for the relevant purpose. Recipients may include:

• hotels, lodges, golf clubs, transport operators, activity providers, restaurants and other journey suppliers;
• payment, banking, accounting and fraud-prevention providers;
• website hosting, database, authentication, email, analytics, mapping and customer-support providers;
• Cloudflare, which provides the Turnstile security check used to prevent automated abuse;
• professional advisers, insurers, regulators, law-enforcement bodies or courts where disclosure is lawful and necessary; and
• a successor or transaction adviser in connection with a legitimate business restructuring, subject to appropriate safeguards.

We do not sell personal information.

7. Cross-border processing

Some technology providers, international suppliers or travellers may be outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use recipients subject to laws, contracts, consent or other safeguards that provide an appropriate level of protection as required by POPIA.

8. Cookies, analytics and security tools

The website may use necessary storage for authentication, security, saved application drafts and service preferences. We may use analytics to understand aggregate website use and improve performance. Map content may be supplied by third-party map providers. Cloudflare Turnstile processes technical and interaction data to distinguish people from automated traffic. These providers process information under their own privacy terms.

You can control cookies through your browser, although blocking necessary storage may prevent account, application or security features from working correctly.

9. Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, damage, unauthorised access, interference, alteration or disclosure. These include access controls, authenticated administration, encrypted network connections, restricted service credentials and anti-abuse checks. No internet service can guarantee absolute security. Where a security compromise creates a notification duty, we will notify the Information Regulator and affected data subjects as required by law.

10. Retention

We retain personal information only for as long as reasonably needed for the purpose for which it was collected, to provide services, resolve disputes, maintain booking and financial records, enforce agreements, and meet legal or regulatory duties. We then delete, destroy or de-identify it where reasonably practicable, unless continued retention is authorised or required by law.

11. Your rights

Subject to POPIA and applicable exceptions, you may:

• ask whether we hold personal information about you and request access to it;
• request correction or deletion of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
• object to processing on reasonable grounds;
• withdraw consent where consent is the applicable ground;
• object to direct marketing at any time; and
• complain to the Information Regulator or institute proceedings where permitted by law.

Send a request to admin@golforia.africa. We may need to verify your identity before acting on a request. Official objection, correction and complaint forms are available from the Information Regulator.

12. Children

A parent, guardian or other competent person must provide or authorise personal information relating to a child where required by law. Student Academy interest does not create a booking, and Golforia will establish appropriate consent, safeguarding and supplier arrangements before collecting information needed to provide services directly to children.

13. Automated decisions

We may use automated tools to assist with security, calculations, recommendations or administration. We do not intend to make decisions that produce legal or similarly significant effects based solely on automated processing without the safeguards required by law.

14. Complaints

Please contact us first so that we can try to resolve your concern. You may also contact:

Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Telephone: 010 023 5200 / 0800 017 160
Email: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Complaint guidance

15. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The current version and update date will remain available on this page. Material changes may also be communicated through the website or directly where appropriate.