POPIA Compliance Policy

The Zone Resort
Email: info@thezoneresort.co.za

1. Purpose

This POPIA Policy outlines how The Zone Resort processes and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). We are committed to safeguarding the privacy and data of all guests, clients, suppliers, and employees.

2. Scope

This policy applies to:

All visitors and users of www.thezoneresort.co.za
All guests of The Zone Resort
Employees and contractors of The Zone Resort
Any individual whose personal information is processed by The Zone Resort

3. Definitions

Personal Information: Any information that identifies or relates specifically to an individual.
Data Subject: The person to whom the personal information relates.
Responsible Party: The Zone Resort, who determines the purpose and means of processing personal information.
Operator: Any third party who processes personal information on behalf of The Zone Resort.
Processing: Any activity concerning personal information including collection, storage, use, dissemination, modification, or destruction.

4. Information We Collect

We may collect and process the following types of personal information:

Full name
Contact details (email address, phone number, physical address)
Identification/passport number
Booking and accommodation details
Payment and banking information
Special requirements or preferences (e.g. dietary, medical needs)
CCTV recordings and security data (for guests onsite)

5. Purpose of Collection

The Zone Resort collects personal information to:

Confirm and manage bookings
Facilitate check-in/check-out and accommodation services
Process payments and refunds
Comply with legal obligations (e.g., SARS, Department of Home Affairs)
Improve customer experience and communication
Ensure security and safety on premises
Conduct direct marketing with consent

6. Legal Basis for Processing

Processing of personal information is carried out under the following lawful bases:

Consent: Voluntary and informed permission from the data subject
Contractual obligation: To fulfil our agreement with the guest or client
Legal requirement: To comply with applicable laws and regulations
Legitimate interest: For security, operational improvements, and lawful business operations

7. Data Subject Rights

In terms of POPIA, you have the right to:

Be informed when your personal information is being collected
Access your personal information
Request correction, updating, or deletion of your data
Object to the processing of personal information
Lodge a complaint with the Information Regulator (South Africa)

To exercise any of these rights, contact us at info@thezoneresort.co.za.

8. Sharing of Information

The Zone Resort may share your personal information with:

Third-party service providers (e.g. payment processors, booking engines)
Legal and regulatory authorities, if required
Our business partners for legitimate business needs, under confidentiality agreements

We will never sell your personal information to third parties.

9. Data Security

We implement the following security safeguards:

Secure access controls and password protection
SSL encryption on our website
Physical security measures at our premises
Data access limited to authorized personnel only

In the event of a data breach, we will notify the Information Regulator and affected parties in accordance with POPIA.

10. Cross-border Data Transfers

Where personal data is transferred outside of South Africa, The Zone Resort ensures that the destination country has adequate data protection laws or that appropriate safeguards (such as contractual clauses) are in place.

11. Retention of Information

We retain personal information for as long as:

It is required to fulfill the purpose it was collected for
Required by law (e.g. tax or accounting obligations)
Needed for legitimate business purposes or legal claims

After this, data is securely deleted or de-identified.

12. Direct Marketing

We may use your contact details to send you promotional materials related to The Zone Resort, but only where you have provided consent. You may opt-out of receiving such communications at any time by clicking “unsubscribe” in our emails or contacting info@thezoneresort.co.za.