Privacy Policy
Pilot policy for the Heritage Tourism SME Dashboard, aligned with the Protection of Personal Information Act, 2013 (POPIA). Last updated 18 July 2026.
What we collect
Account details (name, email address, password stored only as a salted hash), booking and ticket records, job applications and cover notes you submit, reviews you write, and — for registered businesses — the business profile and operational records you enter (listings, promotions, compliance tracking, sustainability reports).
Why we collect it
To operate the platform: processing bookings and payments, issuing tickets, letting businesses respond to reviews and applications, and giving municipal oversight users aggregated (not personal) tourism statistics. Marketing updates are sent only if you opted in at registration, and you can withdraw that consent at any time by contacting us.
Payments
Card and banking details are never collected or stored by this platform. Online payments are processed by PayFast (Pty) Ltd; we receive only a payment reference and confirmation of the amount paid.
Who can see your information
The business you book with sees your name and booking details. Your reviews are shown publicly with your display name. Platform administrators can access records for moderation and support, and every administrative action is logged. We do not sell personal information.
Your rights (POPIA)
You may request access to, correction of, or deletion of your personal information, and you may object to processing or withdraw consent. Use the contact details below or your account settings for name and password changes. Complaints may also be lodged with the Information Regulator of South Africa.
Security & retention
Access to personal information is role-restricted and audit-logged. Passwords are hashed with bcrypt. Records are retained only as long as needed for the purposes above or as required by law.
Contact
Information officer: the platform team — privacy@heritage.local. This is a pilot deployment; contact details will be updated for production.