Thank you for visiting www.andBeyond.com. Kindly take note that this website, as well as all other websites and/or landing pages (“the / our Websites”) of which the And Beyond Group, which comprises of And Beyond Holdings (Proprietary) Limited and all its subsidiary companies, is the proprietor property of and is/are managed and maintained by And Beyond South Africa (Proprietary) Limited (“And Beyond / “we” / ”our”).
The object of this Policy is to inform you, being the person to whom the Personal Information relates, as to (i) who is responsible for the processing, as well as the management and safeguarding of collected and /or processed Personal Information; ii) the manner in which your Personal Information may be processed pursuant to visiting our Websites; (iii) the type of Personal Information we may process; (iv) other parties we may share the Personal Information we process with; (vi) how you can access , amend and/or delete your Personal Information which we have collected from you; and (vii) security measures we employ to protect the Personal Information which we have processed.
Please note that your continued use of the Websites after your perusal of the Policy will constitute your acceptance and agreement to the terms of the Policy. In the event that you do not wish to consent to the processing of your Personal Information, or no longer want us to continue processing your Personal Information in accordance with this Policy, you are kindly requested to indicate same by sending us an email to contactus@andBeyond.com or by clicking the “Opt-out” button provided on our newsletters.
2. Scope of policy
3. Who is responsible for the processing of personal information collected?
Subject to obtaining your consent as envisioned in this Policy, the Personal Information which we collect from you, is processed by And Beyond South Africa (Proprietary) Limited, a private limited liability company registered and incorporated in terms of the Company Statues of the Republic of South Africa with registration number 1991/000918/07 whose registered offices is at 164 Katherine Street, Pin Mill Farm, Block F, Sandown, Johannesburg, the Republic of South Africa.
4. How do we process Personal Information?
Information may be collected either through or by electronic means, which includes, without limitation, the use of our Websites, electronic mail (e-mail), text, voice, sound or image messages, or through non-electronic means which includes, without limitation, the capturing of Personal Information on hard copy documents.
When using our Websites your Personal Information may be collected either actively where you or your appointed agent provide us with certain Personal Information or inactively where we collect information from you that you have not actively provided. See below for a more detailed discussion.
a) Active Information Collection:
Active information collection refers to instances where we obtain Information from you where you have directly provided us with Information, such as when you submit an enquiry in respect of a specific product or service, or when you subscribe to our newsletter. When submitting an enquiry through our Websites you will be required to provide us with your first name, last name, e-mail address, country of residence, as well as your preferred dates of travel, which Information will be processed by us to create an itinerary that suits your particular needs. Upon your departure from our Lodges we may request that you provide us with your views and / or opinion in the form of a questionnaire, such information being required to assist us to not only improve our products and services to our guests, but also ensure that our guests continue to experience products and services that are of exceptional value. We may also use your information to provide you with electronic updates, alerts, and other information regarding our products and services.
b) Inactive Information Collection:
Inactive or passive Information collection refers to instances where we collect Information from you which you have not actively provided as contemplated above. To this end we may use technologies to passively collect information while you are visiting, accessing or using our Websites. These technologies allow us to collect certain kinds of Information which cannot be linked to you as a person (i.e. non-personally identifiable information), such as your internet domain name, the type of web browser you use, the operating system you use, the date and time of your visit to our Websites, the specific pages you may have visited, and the address of the website which you have visited prior to entering our Websites. Kindly note that we do not link this passively collected non-personally identifiable information with personally identifiable information you have actively provided elsewhere on any of our Websites or at our Lodges. We reserve the right to share with third parties, including our business partners and advertisers, any anonymous aggregated non-personal information which we may have passively collected via our Websites.
We may from time to time use the following technologies (without limitation) to passively or inactively collect information through our Websites, namely:
(ii) Web Beacons:
We may include small graphic images called web beacons, also known as “Internet tags” or “clear gifs,” in our web pages and e-mail messages. Web beacons may be invisible to you, but any electronic image inserted into a web page or e-mail can act as a web beacon. We may use web beacons or similar technologies for a number of purposes, including, without limitation, to count the number of visitors to our Websites, to monitor how users navigate the Websites, to count how many e-mails that we sent were actually opened or to count how many particular articles or links were actually viewed.
(iii) Embedded Scripts:
An embedded script is programming code that is designed to collect information about your interactions with the relevant Websites. It is temporarily downloaded onto your computer from our web server or a third party we may work with, is active only while you are connected to the relevant Websites, and is deleted or deactivated thereafter.
(iv) Mobile Device Identifiers:
Certain mobile service providers uniquely identify mobile devices and we or our third-party service providers may receive such device information if you access our Websites through mobile devices. Certain features of the relevant Websites may require collection of mobile phone numbers and we may associate that phone number with the mobile device identifiers. Additionally, some mobile phone service providers operate systems that pinpoint the physical location of devices that use their service. Depending on the provider, we and our third-party service providers may receive this information. If we associate any such passively-collected information with your Personal Information, we will treat the combined information as Personal Information as contemplated in this Policy.
5. Type of information we process
By using our Websites and / or by completing our product review questionnaires at our Lodges we will be collecting the following Information from you:
(i) Active Information:
- Your name and surname;
- Physical address;
- Your e-mail address;
- Your telephone number;
- Identity and/or passport number;
- Your location;
- Your nationality; and
- Your personal opinion, views and preferences (should you wish to complete our product review questionnaires at our Lodges).
(ii) Inactive Information Collection:
See discussion relating to Inactive Information Collection under paragraph 4 (b) above.
6. What do we do with your information?
All Personal Information which may be collected from you, will only be processed in accordance with this Policy or as specifically disclosed to you and/or brought to your attention, at the time you provide the information. We will be entitled to lawfully process your Personal Information and to disclose the same to any subsidiary within the And Beyond group of companies, as well as trade partners to facilitate the procurement of products and / or services which you may have requested. We will not sell, transfer, share, or otherwise permit access to your Personal Information with any third parties other than as described in this Policy. Please note that we reserve the right to transfer, or otherwise share without restriction aggregated, de-identified, and other non-personally identifiable information as contemplated in this Policy. We further reserve the right to use or disclose your Personal Information provided by you through, or by means of, our Websites as may be required from time to time so as to respond to your requests, comply with applicable laws, regulations, legal processes, and law enforcement inquiries, as required by litigation, to take precautions against liability, and protect the security and integrity of our Websites and the safety of its users.
The Personal Information will be processed by us, pursuant to and for the following purposes:
(i) verifying your identity;
(ii) transmitting and receiving necessary correspondence to you in relation to the services or the products or services accessed, used or purchased through, or by means of the Websites;
(iii) facilitating delivery of the services or the products or services accessed, used or purchased by you through, or by means of the Websites;
(iv) generally rendering the services procured by you;
(v) processing payments, refunds and the like in respect of any of the services or the products or services accessed, used or purchased by you through, or by means of the Websites;
(vi) transmitting marketing material to you in respect of the services and the products made available to you through or by means of our Websites and generally offered by And Beyond;
(vii) to monitor and analyse your conduct in respect of the Websites and/or services offered through or by means of our Websites;
(viii) for compliance and risk purposes;(ix) to analyse the Personal Information collected for research and statistical purposes and once such Personal Information is analysed to send you marketing and promotional material which the we believe may, based on our processing of your Personal Information, be relevant to you and enhance your use of the Websites and products and/or services provided on, though, or by means of the Websites;
(x) to conduct market research, as well as academic research in respect of the Personal Information in order to identify potential markets and trends, to develop new products and services and to improve the nature of the products and/or services being made available to you through or by means of our Websites;
7. Newsletter subscribers
Given that you wish to subscribe to our newsletter, we will, from time to time, send you promotional emails about And Beyond’s special offers or other information using the email address which you have provided. Please note that you can unsubscribe from this list at any time should you wish to by selecting the “unsubscribe” button at the bottom of the newsletter, or by emailing us your request contactus@andBeyond.com.
8. Opting out
Please note that we do not wish to collect and/or process any Personal Information from you that you do not want to be so collected and/or processed. In this regard we indicate at all active information fields whether requested information is required or optional. Please see explanation at relevant active information fields as to the consequences should you elect not to provide the required or optional information. Kindly be advised that when you provide us with Personal Information electronically through facsimile, electronic mail, social media platforms or through the functionality on our Websites, whether such information is required or optional, you consent to the disclosure and use of such information in accordance with this Policy. Should you at any point in time decide that you do not wish to receive any further information from us regarding our products and services, you are at liberty to opt-out of receiving such information by contacting us by e-mail at contactus@andBeyond.com, alternatively by clicking “unsubscribe” button at the bottom of our newsletters.
9. Information access
You will be given reasonable access to your Personal Information to correct errors or to delete any information which you may have provided. If you wish to correct or delete any of your Personal Information, please contact us by e-mail at contactus@andBeyond.com. To respond to your request or inquiry, we may require information to allow us to verify that you are the person authorised to view the Personal Information you are requesting access to as contemplated in this Policy. We reserve the right to, at our discretion, refuse to allow you access to certain information which, in our view, if provided to you, will compromise another person’s privacy or will violate any applicable law, foreign law, regulation, or directive in respect of which we are obliged to observe and adhere to pursuant to processing Personal Information.
10. Data security
Unfortunately, the transmission of information via the internet is not completely secure. Whilst we have taken all appropriate, technical, organizational and reasonable measures to secure the integrity and confidentiality of the Personal Information in our possession, in order to guard against the loss of, damage to or unauthorized destruction of Personal Information and unlawful access to or processing of Personal Information, we do not guarantee that our security system is 100% secure or error-free. Therefore, we do not guarantee the security or accuracy of the information (whether it be Personal Information or not) we collect from you and process in accordance with this Policy. Any transmission of Personal Information will be solely at your own risk. Once we have received your Personal Information, we will use strict procedures and security features to try to prevent unauthorised access to it.
We restrict access to your Personal Information to our employees who have a legitimate operational reason for having access to such Personal Information. We also maintain physical, electronic and procedural safeguards that comply with the relevant laws and regulations to protect your Personal Information from any unauthorized access.
Where we have given you (or where you have chosen) a password to enable you to access certain parts of our Websites, you will be responsible for keeping the password confidential. We ask you not to share a password with anyone.
We shall not be held responsible and by accepting the terms and conditions to which this Policy relates, you agree to indemnify us and hold us harmless for any security breaches which may potentially expose the Personal Information in our possession to unauthorised access and or the unlawful processing of such Personal Information by any third party.
11. Place when personal information will be kept
All Personal Information provided to us will be stored on our secure servers in South Africa. We may, however, in future store data at a destination outside of South Africa in which event we will only transfer your Personal Information to facilities or parties outside South Africa were such transfer is compliant with applicable data protection laws and regulations.
12. Changes to this policy
Kindly take note that we reserve the right to change this Policy at any time and in our sole discretion. In the event that that Policy is changed the new policy will be made available on our Websites.