1. Who We Are
Vindigo Travel (Pty) Ltd ("Vindigo", "we", "us", "our") is a private travel design house and inbound destination management company based in Cape Town, South Africa. For the purposes of the Protection of Personal Information Act, 4 of 2013 (POPIA), we are the responsible party; for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), we are the controller in respect of the personal information described in this policy.
Our Information Officer can be reached at concierge@vindigotravel.com.
2. Scope
This policy applies to personal information we collect when you browse our website, submit an enquiry or concierge request, make or discuss a booking, travel on a Journey, interact with us as a Trade Partner, or otherwise engage with us.
3. Personal Information We Collect
- Identity and contact data: name, title, date of birth, nationality, email address, telephone number, postal address, and (for Trade Partners) company and registration details.
- Travel and booking data: passport and visa details, itinerary and booking preferences, travel dates, emergency contacts, and details of companions travelling with you.
- Payment data: billing details, bank or payment information, and transaction records. We do not store full card numbers; card payments are processed by third-party payment providers.
- Special categories of personal information: where you provide it or it is necessary for your Journey — for example dietary requirements, allergies, medical conditions, disability or mobility needs, and vaccination status. We process this information only with your consent or where necessary for your vital interests or to arrange your travel safely.
- Marketing preferences: your preferences for receiving news, offers and updates.
- Technical and usage data: IP address, browser and device information, and pages viewed, collected through cookies and similar technologies (see clause 8).
4. How We Collect Information
- Directly from you, when you complete a form, contact us, or correspond with us.
- From a Trade Partner, travel advisor or person who books on your behalf.
- From Suppliers and partners as needed to arrange and operate your Journey.
- Automatically, through your use of our website (cookies and analytics).
5. Why We Process It & Lawful Basis
We process personal information to respond to enquiries, prepare quotations, arrange and operate Journeys, process payments, comply with legal and tax obligations, manage our relationship with Trade Partners, improve our services, and (with consent, or as otherwise permitted) send you marketing.
Under POPIA, we rely on the lawful bases in section 11 — including your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests. Under GDPR, we rely on the corresponding bases in Article 6 (consent, contract, legal obligation, legitimate interests) and, for special categories of data, Article 9 (your explicit consent, or where processing is necessary for your vital interests or the establishment or defence of legal claims). Where we rely on consent, you may withdraw it at any time.
6. Sharing & Cross-Border Transfers
We share personal information only as necessary to deliver the Journey and run our business. Recipients may include accommodation providers, lodges and conservancies; airlines, charter and transfer operators; guides and activity providers; payment processors and financial institutions; IT and hosting providers; professional advisers; insurers; and public authorities where required by law.
Because we arrange travel across Southern Africa, your information may be transferred to and processed in countries other than your own, including countries that may not provide the same level of data protection. Where we transfer personal information across borders, we do so in accordance with POPIA section 72 and, for GDPR purposes, under appropriate safeguards such as standard contractual clauses or the necessity of the transfer for the performance of your travel arrangements.
7. Data Security
We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, disclosure or misuse, and we require our service providers to do the same. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information.
8. Cookies & Analytics
Our website uses cookies and similar technologies to operate the site, remember preferences, and understand how it is used. You can control cookies through your browser settings; disabling cookies may affect the functionality of the site. Where required, we will ask for your consent before setting non-essential cookies.
9. Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, to comply with legal, tax and accounting obligations, to resolve disputes, and to enforce agreements. When information is no longer needed, we securely delete or de-identify it.
10. Your Rights
Subject to applicable law, you have the right to:
- request access to the personal information we hold about you;
- request correction or updating of inaccurate or incomplete information;
- request deletion or destruction of information we no longer have a lawful basis to keep;
- object to processing, or request restriction of processing;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- request data portability, where applicable under GDPR;
- lodge a complaint with a supervisory authority (see clause 13).
To exercise any of these rights, contact our Information Officer at concierge@vindigotravel.com. We may need to verify your identity before responding.
11. Direct Marketing
We will only send you marketing communications where you have opted in or where we are otherwise permitted to do so. You may opt out at any time using the unsubscribe link in our messages or by contacting us. In terms of section 69 of the Consumer Protection Act, 68 of 2008, you may also register a pre-emptive block against direct marketing.
12. Children
Our website and services are directed at adults. We do not knowingly collect personal information from children except where it is necessary to arrange family travel and is provided by a parent or guardian. Where we process a child's information, we do so with the consent of a competent person where required by law.
13. Complaints
If you are not satisfied with how we handle your personal information, please contact our Information Officer first so that we can try to resolve the matter.
You also have the right to complain to the Information Regulator (South Africa), the supervisory authority established under POPIA. If you are in the European Union, you may complain to the supervisory authority in your country of residence, place of work, or where an alleged infringement occurred.
14. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in the law. The current version is always available on this page, and the effective date above shows when it was last updated.
15. Contact
Vindigo Travel (Pty) Ltd
32 2nd Ave, Claremont, Cape Town, 7708, South Africa
Information Officer & Privacy queries: concierge@vindigotravel.com
Telephone: +27 21 671 5758