POPIA Compliance Policy

Effective Date: August 2024

1. Introduction

African Soulstice Travel is committed to protecting the privacy and personal information of our clients, employees, and partners in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This policy outlines how we collect, use, store, and protect personal information in compliance with POPIA.

2. Scope

This policy applies to all personal information processed by African Soulstice Travel, including information related to our clients, employees, suppliers, and any other third parties.

3. Definitions

Personal Information: Any information that can be used to identify a person, such as name, contact details, identification number, financial information, or other related data.

Data Subject: The person to whom personal information relates.

Responsible Party: African Soulstice Travel, responsible for collecting and processing personal information.

Operator: A third party that processes personal information on behalf of the Responsible Party.

4. Collection of Personal Information

We collect personal information directly from the Data Subject or through third parties with the Data Subject’s consent. The types of personal information we may collect include, but are not limited to:

• Name, surname, and contact details (email address, phone number, postal address)

• Identification or passport number

• Financial and banking details

• Travel preferences and history

• Communication records

5. Purpose of Processing Personal Information

We process personal information for the following purposes:

• To make and manage travel bookings and related services

• To communicate with clients about their bookings and travel arrangements

• To comply with legal and regulatory requirements

• To improve our services and customer experience

• For marketing purposes, where consent has been provided

6. Consent

We will obtain consent from Data Subjects before collecting or processing their personal information unless the processing:

• Is necessary for the performance of a contract to which the Data Subject is a party

• Complies with a legal obligation

• Protects the legitimate interests of the Data Subject

• Is necessary for pursuing our legitimate interests or those of a third party to whom the information is supplied

7. Sharing and Disclosure of Personal Information

We will not share personal information with third parties except in the following circumstances:

• When required for the performance of our services (e.g., sharing information with airlines, hotels, or other travel partners)

• When required by law or legal process

• With third-party service providers who assist us in our operations, subject to confidentiality agreements

• With the Data Subject’s consent

8. Security of Personal Information

We take reasonable steps to ensure that personal information is protected from unauthorized access, loss, or damage. This includes:

• Implementing technical and organizational measures such as encryption, access controls, and secure storage systems

• Regularly reviewing and updating our security practices to ensure continued compliance with POPIA

9. Data Subject Rights

Data Subjects have the right to:

• Access their personal information held by us

• Request correction or deletion of their personal information

• Object to the processing of their personal information

• Withdraw consent for the processing of their personal information at any time

• Lodge a complaint with the Information Regulator if they believe their rights under POPIA have been violated

10. Data Retention

We will only retain personal information for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once the personal information is no longer needed, we will securely delete or destroy it.

11. Changes to This Policy

We may update this POPIA Compliance Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website with the updated effective date.

12. Contact Information

For any questions, concerns, or requests regarding your personal information or this policy, please contact us at:

African Soulstice Travel

311 Boundry Road, Sundowner

info@africansoulstice.com

+27 (84) 244 8922

This policy ensures compliance with the POPIA and provides transparency on how African Soulstice Travel handles personal information. Be sure to customize it with your specific contact details and ensure that it aligns with your operational practices.