Legal
Privacy and POPIA notice
What we collect, why, and what you can do about it.
Terms to be confirmed
These terms are being finalised and may still change. The deposit and cancellation terms are the ones we work by today. Ask Alison if anything here matters to your booking.
Last updated
Who is responsible for your information
Stone House Lodge CC, trading as Stonehouse Lodge, is the responsible party for personal information collected through this site under the Protection of Personal Information Act 4 of 2013 (POPIA).
Questions about your information go to abryant@mweb.co.za. The Information Officer is Alison Bryant, contactable at the same address; registration with the Information Regulator is in progress.
What we collect and why
Only what the site needs:
- Booking enquiries: your name, email, phone, dates, house and number of guests, so that we can answer you and hold your booking.
- Olive oil orders: your name, email, phone and delivery address, so that we can deliver your order. Card details go to Yoco and never reach us.
- Advertising click identifiers (such as gclid and fbclid) from the link you arrived on, so an enquiry can be credited to the advert that produced it. Shared with the platform that issued them only if you accept advertising cookies.
- A hashed form of your IP address, to rate-limit the forms. The raw address is not stored.
- Analytics about how pages are used, only if you accept analytics cookies.
Updates by email
We only email you news or offers if you tick the box to ask for them. The box is never ticked for you, and every email lets you stop.
Who processes your information for us
Railway (hosting and database), Resend (email delivery), Cloudflare Turnstile (spam protection), Yoco (card payments for olive oil), our courier (deliveries) and, only with your consent, Google, Meta and Microsoft (analytics and advertising). Some of these store data outside South Africa, under data-protection terms comparable to POPIA as section 72 requires.
How long we keep it
Enquiries that do not become a booking: 24 months, then deleted.
Bookings and olive oil orders: 5 years, the period tax law requires us to keep records, then deleted.
Messages marked as spam: 30 days.
Sign-in links for the admin area: deleted a day after they expire.
Email updates: until you unsubscribe.
Your rights
You may ask to see the information we hold about you, have it corrected or deleted, object to its use, and complain to the Information Regulator of South Africa (www.inforegulator.org.za).