De Meye Guesthouse · Jacobsbaai

Privacy Notice

Last updated 14 June 2026

This notice explains how De Meye Guesthouse collects, uses, shares, and protects your personal information when you enquire about or book a stay with us, and the rights you have. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

The responsible party is De Meye Guesthouse, operated by Hein Myburgh, of 4 Sesde Keerom, Jacobsbaai, 7395, Western Cape, South Africa.

Our Information Officer is Hein Myburgh. For any privacy question or request, contact us at stay@demeyejb.co.za.

2. The information we collect

When you send a booking request or contact us, we collect:

• Your name, email address, and phone number;
• Your requested dates, number of guests, and any message you include;
• A record that you accepted this notice, with the date and time.

Identity document. After we accept your booking, and before it is confirmed, we ask the main guest to upload a government-issued ID or passport. We use this only to verify the identity of the person staying with us. It is stored securely and separately from our website, is accessible only to us, and is deleted after your stay (see sections 6 and 7).

Payments. Card payments are processed by PayFast. We never see or store your card number — PayFast handles card data securely on its own systems. We retain only a payment reference confirming that a booking was paid.

Technical information. Our web server keeps standard short-term logs (such as IP addresses) for security. The reviews shown on our site and the fonts we use are loaded from third-party providers (see section 4), who may receive your IP address as part of delivering that content.

3. Why we collect it, and your choice

We use your information to:

• respond to your enquiry and manage your booking request;
• confirm availability, communicate with you, and arrange your stay;
• take and reconcile payment for a confirmed booking;
• keep records we are required by law to keep (for example, tax records); and
• only if you have agreed, send you occasional updates about De Meye.

Providing your information is voluntary. However, without at least your name, email, and dates we cannot process a booking request.

4. Who we share it with

We share personal information only with the operators we need to run the booking, and we never sell it. These are:

• PayFast (Payfast (Pty) Ltd) — to process your payment;
• Amazon Web Services — to host our website and database and to send our emails;
• Featurable and Google — to display our Google guest reviews on the site (this shows reviews to you; we do not send them your booking details);
• Airbnb, Booking.com, or LekkeSlaap — only where you chose to book through one of those platforms.

5. Where your information is stored (cross-border transfer)

Our website and database are hosted on Amazon Web Services infrastructure located in Ireland, in the European Union. This means your information is processed outside South Africa. The European Union provides a level of data protection that is comparable to, and in many respects stronger than, POPIA, and this transfer is necessary to perform our booking agreement with you — both of which are recognised bases for a cross-border transfer under section 72 of POPIA.

6. How long we keep it

• Confirmed bookings and related financial records — kept for 5 years, as required by South African tax law.
• Enquiries and requests that do not lead to a booking — kept for up to 12 months, then deleted.
• Marketing consent — kept until you withdraw it.
• Identity documents (ID/passport) — deleted within 30 days after check-out, or immediately if a held booking lapses without payment.

7. How we protect it

• Your connection to our site is encrypted with HTTPS/TLS.
• Access to your information is limited to those who need it to handle your booking.
• Our database is protected with restricted, least-privilege credentials.
• We do not store card data, which keeps payment details off our systems entirely.
• Uploaded ID documents are stored outside the public website, are not reachable by any web address, and can be viewed only by us after signing in.

8. Cookies & tracking

Our public website does not use advertising or analytics tracking cookies. The host login area uses a single session cookie that is not set for guests. The reviews widget and web fonts are loaded from their providers (Featurable and Google), who may log your IP address as part of serving that content.

9. Your rights under POPIA

You have the right to:

• Be informed — know what personal information we hold about you.
• Access — request a copy of your information.
• Correct — have inaccurate or outdated information fixed.
• Delete — ask us to delete or destroy your information where we are no longer entitled to keep it.
• Object — object to our processing of your information, including for direct marketing, free of charge and at any time.
• Withdraw consent — withdraw any consent you gave, without affecting processing already carried out.
• Complain — lodge a complaint with us or with the Information Regulator.

To exercise any of these, email stay@demeyejb.co.za. You may object or make a request by email, and we will not charge you for doing so.

10. Complaints to the Information Regulator

11. Changes to this notice

We may update this notice from time to time. The current version, with its date, is always available on this page.

12. Contact us

De Meye Guesthouse — Information Officer: Hein Myburgh
4 Sesde Keerom, Jacobsbaai, 7395
stay@demeyejb.co.za