Privacy Policy

1. Who we are

KhayrCape Experiences ("we", "us", "our") provides private guided tours and related booking services in Cape Town, South Africa. For POPIA purposes, we are the responsible party for personal information collected through this website and our booking channels.

Information Officer

• Name: Yaseen (Information Officer)
• WhatsApp: +27 82 327 7446
• Location: Cape Town, South Africa

Please update the formal legal entity name and postal address here once confirmed for registration and correspondence.

2. Personal information we collect

Depending on how you use our services, we may collect:

• Identity & contact: full name, email address, phone number, country
• Booking details: tour selection, date, group size, pickup address, flight number, dietary requirements, special requests
• Account data: login credentials (handled by our auth provider), profile name and phone
• Payment references: booking identifiers and limited metadata needed to confirm payment (card data is processed by Yoco — we do not store full card numbers)
• Technical data: session information required to keep you signed in, and basic logs needed to operate and secure the site

3. Why we process your information

• To respond to enquiries and confirm private tour bookings
• To arrange pickup, allocate vehicles and guides, and deliver the experience
• To process payments and send booking confirmations
• To create and manage optional customer accounts
• To meet legal, accounting, and safety obligations
• To improve our website and prevent fraud or abuse

We process information where it is necessary to perform a contract with you, where we have a legitimate interest (for example securing bookings and operating the business), where the law requires it, or where you have given consent (for example creating an account or accepting optional cookies if introduced later).

4. Who we share information with

We only share personal information with service providers who help us operate, and only as needed for those purposes:

• Supabase — authentication and database hosting
• Yoco — secure payment processing
• Resend — transactional booking notifications
• Vercel — website and API hosting
• Google Maps — embedded maps on experience pages (may set cookies or load content from Google)
• WhatsApp / Meta — when you choose to contact or continue a booking conversation on WhatsApp

Some providers may process data outside South Africa. Where that happens, we take reasonable steps to ensure appropriate safeguards consistent with POPIA.

5. Cookies and similar tech

We use essential storage to keep you signed in and operate the site. See our Cookie Policy for details and how to manage preferences.

6. Retention

We keep booking and account records for as long as needed to fulfil the booking, handle follow-ups, and meet tax or legal requirements. When information is no longer needed, we delete or de-identify it where reasonably practicable.

7. Your rights under POPIA

You may request to:

• Access the personal information we hold about you
• Correct or update inaccurate information
• Object to certain processing, where applicable
• Request deletion, subject to legal retention obligations
• Withdraw consent where processing is based on consent

To exercise these rights, contact the Information Officer via WhatsApp at +27 82 327 7446. We may need to verify your identity before responding.

You may also lodge a complaint with the Information Regulator (South Africa) if you believe your rights have been infringed.

8. Children and special information

Our services are not aimed at children under 18 without a parent or guardian. If you share dietary or health-related notes for a booking, we use that information only to deliver a suitable experience and keep it confidential.

9. Security

We use reputable providers, access controls, and HTTPS to help protect personal information. No online system is completely secure; please use strong passwords for any account you create.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after updates means you accept the revised policy.