Privacy Policy

1. Our commitment to your privacy

Visit Hartbees is committed to protecting your privacy and the security of your personal information. This policy explains what information we collect, why we collect it, how we use it, and your rights as a data subject under South African law.

2. Categories of personal information collected

The following details the categories of personal information we collect and the specific business purpose for each:

3. How we collect your information

• Direct interaction: Information you provide when registering on our website or mobile applications, signing up for the Harties Hotlist newsletter, or contacting our Kosmos hub.
• Automated technologies: As you interact with our platform, we may automatically collect Technical Data through cookies and server logs.
• Third parties: We may receive information from our Partner Lodges or Activity Providers when you utilise the Master Pass system to redeem a curated experience.

4. How we utilise your information

In accordance with POPIA, we only process your information for lawful and specific purposes:

• Contractual fulfilment: To manage your stays, boat cruises, and Entrega deliveries.
• Marketing & communications: To keep you informed of exclusive hand-picked deals in Hartbeespoort (subject to your opt-in consent).
• Business operations: To manage our general accounting, recordkeeping, and legal functions for our March financial year-end.
• Safety & security: To protect the Leloko Hub and our users against malicious or illegal activity.

5. Cookies

We use three categories of cookies:

You can change your cookie preferences at any time by clearing hb_cookie_consent from your browser's local storage, or by refreshing the page and clicking “Manage” on the banner.

6. Disclosure to third parties

We do not sell your personal information. We only disclose data to third-party service providers who assist in our operations:

• Logistics providers: Entrega delivery contractors who require your address to fulfil orders.
• Booking partners: Lodges and tour operators who require your Master Pass details to verify your arrival.
• Tech providers: Data hosting and software services used to maintain our platform across iOS, Android, and Huawei AppGallery.
• Diagnostics providers: Where enabled, anonymised crash-and-error diagnostics are processed by Sentry to keep our mobile apps stable. Personal information (name, contact number, and location) is stripped before any report is sent.
• Authorities: When required by South African law, court order, or to protect our legal rights.

7. Data security & storage

We implement appropriate, reasonable technical and organisational measures to prevent the loss of, damage to, or unauthorised destruction of personal information. Your data is stored on secure servers with restricted access. For a full overview of our security controls, see our Trust & Security page.

8. Your rights under POPIA

As a data subject in South Africa, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — request that we update or correct any inaccurate or out-of-date data.
• Delete — request erasure of your data (subject to retention obligations).
• Object — opt out of direct marketing at any time.
• Complain — lodge a complaint with the Information Regulator of South Africa.

To exercise any right, email bookings@visithartbees.co.za. We will respond within 30 days.

9. Additional terms for Entrega drivers and couriers

This section applies if you register as an Entrega delivery driver and use the Visit Hartbees driver app. To operate the delivery service we process the following additional categories of personal information, used solely to run deliveries — never for advertising, and never sold:

• Precise location, including in the background: While you are signed in and on an active delivery, the app shares your live GPS position with our dispatch team and the customer tracking that order. Background collection is limited to active deliveries, is throttled (at most one update roughly every 15 seconds or 20 metres), and stops as soon as the delivery completes or you go offline. We do not collect your location when you are off duty.
• Identity & onboarding documents (KYC): To verify your eligibility to drive we collect your ID document, driver’s licence, proof of address, a profile photo, your vehicle licence disc, and proof of vehicle insurance. These documents are stored encrypted at rest and access is restricted to authorised staff.
• Proof-of-delivery photos: A photo you capture at hand-over to confirm an order was delivered.
• Banking details: Your account details, used solely to pay you for completed deliveries.
• Device push token: A device identifier used to send you new delivery offers and status updates.
• Crash & error diagnostics: Where enabled, anonymised diagnostics help us keep the app stable. Your name, contact number, and location are removed before any report is sent (see section 6).

You retain all of the rights set out in section 8. Onboarding documents are kept for as long as you remain an active driver and thereafter only for as long as the law requires (for example, tax and compliance records); operational location breadcrumbs are retained for a limited period and then deleted. To access, correct, or delete your driver data, contact our Information Officer below.

10. Changes to this policy

We may update this policy as our practices change or as required by law. Material changes will be notified by email to registered users. Continued use of the platform after the effective date constitutes acceptance.

11. Information officer contact details

For any enquiries regarding this policy or to exercise your data rights, please contact our designated Information Officer: