Privacy Policy

Cape Town Experiences is a trading name of J WENTZEL ENTERPRISES LTD, a company registered in England and Wales (company number 10732285), registered office 22 Ashmead Road, Banbury, Oxfordshire, England, OX16 1AA. We are the data controller ("responsible party" under POPIA) for your personal information. Our Information Officer and data protection contact is Jordan Wentzel, who can be contacted at explore@capetownexperiences.com.

We process personal information in line with the UK General Data Protection Regulation and Data Protection Act 2018, South Africa's Protection of Personal Information Act 4 of 2013 (POPIA), and, where it applies to you, the EU General Data Protection Regulation.

• Booking details: names, email, phone and WhatsApp numbers, country, number of guests, dates, pickup location, and special requests.
• Information you choose to give us so an experience can be delivered safely, such as relevant medical conditions, mobility needs, allergies or dietary needs. We only use this for your booking and only share it with the Operator who needs it.
• Payment information: Stripe processes payments. We receive confirmation of payment and limited card details (such as card type and last four digits), never your full card number.
• Communications: emails, WhatsApp messages, enquiries and reviews.
• Website data: IP address, browser and device type, pages viewed, items added to your itinerary, and referral source. We collect this through essential cookies and, if you consent, analytics cookies.

• To take, manage and fulfil your bookings. This includes sharing the necessary details with Operators, guides and drivers. (Legal basis: performing our contract with you.)
• To send booking confirmations, calendar invites, reminders and updates. (Contract.)
• To handle payments, refunds, fraud prevention and accounting. (Contract and legal obligations.)
• To answer enquiries and resolve complaints. (Legitimate interests.)
• To improve our website and services using aggregated analytics. (Consent for analytics cookies; otherwise legitimate interests.)
• To send marketing emails, only if you opt in. You can unsubscribe at any time. (Consent.)

We never sell your personal information. We share it only with:

• Operators, guides and drivers delivering your booking. They get only what they need, such as your name, group size, pickup point, contact number and relevant requirements.
• Service providers who help us run the business: Stripe (payments), our website hosting and database providers, email delivery providers, and WhatsApp/Meta when you message us.
• Professional advisers, and authorities where the law requires it.

Some of our service providers store data outside South Africa, for example in the EU, UK or US. Where this happens, we rely on providers bound by data-protection laws or contractual safeguards that give your information a comparable level of protection, as POPIA section 72 and the GDPR require.

• Booking and payment records: 5 years after your experience, for tax and accounting purposes.
• Enquiries that don't become bookings: 24 months.
• Marketing consent: until you unsubscribe.
• Health or medical information you share for a booking: deleted 90 days after the experience.

We use reasonable technical and organisational measures to protect your information. These include encrypted connections, access controls limited to the staff who need it, and audit logging. No system is completely secure. If a breach affects you, we'll notify you and the Information Regulator as the law requires.

You can ask us to:

• confirm what personal information we hold about you and give you a copy;
• correct or delete it;
• stop or restrict processing, or object to processing based on legitimate interests;
• withdraw consent at any time (this doesn't affect processing already carried out);
• where the GDPR applies, give you your data in a portable format.

Email explore@capetownexperiences.com to make a request. We'll respond within 30 days.

If you're unhappy with how we've handled your information, you can complain to the Information Regulator (South Africa): inforeg.org.za, POPIAComplaints@inforegulator.org.za. If you're in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). If you're in the EU, you can complain to your local data protection authority.

• Essential cookies keep the site working, for example your itinerary, currency choice and checkout session. These don't need your consent.
• Analytics cookies help us understand how the site is used. We only set them if you click "Accept all".

You can change your choice at any time using "Cookie settings" in the footer.

Our services are aimed at adults. Bookings must be made by someone aged 18 or over. We collect information about children only as part of a booking made by their parent or guardian, for example their age for ticket pricing.

We may update this policy. The latest version will always be on this page, with the date it was last updated.