Privacy and POPIA

Who is responsible

Trekly decides what personal information we collect and why, which makes us responsible for it under South African privacy law. Our registered details are on our company details page, where our Information Officer is named. They are registered with the Information Regulator.

Ask us anything about this notice at hello@trekly.co.za.

What we collect

To answer an enquiry: your name, your contact details, and what you tell us about the trip you want.

To book a trip: the full name of every traveller as it appears on their ID or passport, and the ID or passport number where a supplier requires it to hold the booking. Dietary requirements, mobility needs and an emergency contact where you give them to us.

To take payment: what our payment partner returns — the amount, the method, the last four digits of a card. We never see or store your full card number.

Because you used the site: the pages you opened and rough location from your network address.

Why we are allowed to

To deliver the trip you asked for. Most of it is simply necessary to do what you contracted with us to do.

Because the law requires it. Tax records, and identity information a supplier must hold.

Because you agreed. Marketing only — separate, optional, and never a condition of booking.

Who else sees it

The suppliers holding your bookings. A lodge needs the names of the people arriving and any dietary requirement that affects them. We send what that supplier needs and nothing more.

Our payment partner, to take the payment.

Nobody else. We do not sell your information and we do not share it for anyone else's marketing.

If information has to leave South Africa — a supplier or service provider based elsewhere — we only send it where the receiving country or our contract with them gives it protection comparable to ours.

How long we keep it

Identity documents — ID and passport numbers — are deleted 90 days after your trip ends. They exist to get you through a check-in desk. After that they are a liability to hold, and we do not hold them.

An enquiry that never became a trip is deleted after 2 years without contact.

Financial records we keep as long as tax law requires, because we are not permitted to delete those on request.

A scheduled job does this automatically. It is not a promise that depends on someone remembering.

What you can ask us to do

See what we hold. Ask, and we will confirm what we have and give you a copy.

Fix it. Anything wrong or out of date, tell us and we will correct it.

Delete it. We will, except where the law requires us to keep it — and we will tell you exactly which parts those are and why.

Object, including to direct marketing at any time.

Complain to the Information Regulator if you are unhappy with how we handled any of this. You do not need our permission and you do not have to come to us first. Their details are public at inforegulator.org.za.

Email hello@trekly.co.za. We will confirm it is really you before we act — protecting you, not stalling — and answer within 30 days.

Marketing

Only if you opted in, and every message carries a way out that works in one click. We may tell existing customers about similar trips; you can stop that at any time and we will not ask why.

Keeping it safe

Access is limited to the people who need it, everything is encrypted in transit, and who looked at what is recorded. If there is a breach that puts you at risk we will tell you and the Information Regulator, as soon as we reasonably can rather than once the story is tidy.

Changes

We post any change here with the date. Material changes we tell you about directly.