Protection of Personal Information Statement for Clients and Website Users
Hospitality Innovations (PTY) Ltd respects privacy and aims to process personal information in a lawful, reasonable and responsible manner in line with the Protection of Personal Information Act, 4 of 2013, also known as POPIA.
This statement explains what personal information may be collected, why it may be processed, how it may be used, who it may be shared with, and what rights data subjects may have when interacting with Hospitality Innovations, its website, or its services.
Depending on the services requested, Hospitality Innovations may process personal information such as names, business names, contact details, email addresses, phone numbers, billing details, project communication, login details supplied by the client, website content, enquiry information, support requests, analytics identifiers, and technical information such as IP addresses or device and browser information.
For hospitality, e-commerce, booking, or marketing-related clients, personal information may also include guest, customer, subscriber, product, order, booking, enquiry, mailing list, form submission, or CRM-style information where access is necessary to perform the agreed services.
Hospitality Innovations does not intentionally collect special personal information unless it is necessary for the agreed services, supplied by the client, required by law, or specifically authorised and handled with appropriate safeguards.
Hospitality Innovations processes personal information only where there is a lawful and reasonable basis to do so. This may include consent, performance of a contract, compliance with legal obligations, legitimate business interests, or the protection of the rights and interests of the client, Hospitality Innovations, or another party.
Hospitality Innovations aims to follow appropriate privacy principles, including processing information for a specific purpose, limiting unnecessary collection, keeping information secure, using information only where relevant, and retaining information only for as long as reasonably required.
In many service situations, the client remains the responsible party for its own customer, guest, subscriber, employee, product, order, booking, and business data. Hospitality Innovations may act as a service provider or operator where it processes such data only for purposes linked to the agreed services.
The client remains responsible for ensuring that its own privacy policy, cookie notice, consent processes, mailing lists, guest data collection, website forms, booking rules, customer communications, and data handling practices are appropriate for its business and legal obligations.
Hospitality Innovations may need to access third-party systems such as hosting accounts, domain registrars, website admin areas, Shopify, WooCommerce, WordPress, Elementor, email tools, PMS or channel managers, OTAs, analytics tools, CRM-style systems, payment gateways, or other platforms. These providers may have their own privacy policies, data processing terms, and security practices.
Hospitality Innovations will take reasonable technical and organisational steps to protect personal information against loss, unauthorised access, misuse, disclosure, alteration, or destruction.
Reasonable safeguards may include controlled access, password protection, limited access to client systems, secure storage practices, appropriate account handling, and careful use of third-party tools.
No website, system, hosting provider, email account, platform, or internet-based service can be guaranteed as completely secure. The client remains responsible for its own user permissions, passwords, staff access, hosting environment, backups, and platform subscriptions unless these responsibilities are specifically included in an agreed service.
Personal information will be kept only for as long as reasonably required for the purpose for which it was collected, service delivery, recordkeeping, legal compliance, accounting purposes, dispute handling, security, or legitimate business needs.
Where information is no longer required, Hospitality Innovations will take reasonable steps to delete, destroy, anonymise, or archive it where appropriate and practical.
Data subjects may have rights under POPIA, including the right to request confirmation of whether personal information is held, request access to personal information, request correction or deletion where appropriate, object to certain processing, and lodge a complaint with the Information Regulator.
Requests should be submitted in writing using the contact details published by Hospitality Innovations. Hospitality Innovations may need to verify identity and may refuse or limit requests where permitted by law, where the request relates to another party’s rights, or where the information is controlled by the client rather than Hospitality Innovations.
Where Hospitality Innovations assists with email marketing, newsletter setup, or mailing tools, the client remains responsible for ensuring that mailing lists are lawful, consent has been obtained where required, unsubscribe mechanisms are available, and messaging complies with applicable law and platform rules.
Hospitality Innovations is not responsible for purchased, rented, scraped, unauthorised, or non-compliant mailing lists supplied by the client.
Some platforms, hosting providers, software tools, email systems, cloud services, or third-party suppliers may process or store information outside South Africa.
Where this occurs, Hospitality Innovations will use such services only where reasonably necessary for the agreed services or where selected, approved, or supplied by the client.
The client should review the relevant third-party provider terms and privacy policies where international processing is relevant to its own customers, guests, users, or subscribers.
Privacy requests, access requests, correction requests, deletion requests, or POPIA-related queries may be submitted using the contact details published on this website.
Complaints may also be referred to the Information Regulator of South Africa where appropriate.