Privacy Policy

Website Privacy Policy

Last updated: August 2026

This Privacy Policy explains how personal information submitted through www.nambiti.com (“the Website”) is collected, used, shared, and protected, in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.

The “Responsible Party” for personal information collected via the Website is Nambiti Private Game Reserve (“the Company”, “we”, “us”, “our”).

Please note that the ten lodges within the Reserve are independently owned and operated. Where you contact or book directly with a Lodge, that Lodge acts as a separate responsible party for the personal information you provide to it, and its own privacy practices will apply. This Policy covers only information collected through the Website itself.

1.1 Information You Give Us Directly

Contact form submissions: name, email address, phone number (optional), enquiry type (Lodge Booking, Day Visit, Conservation, Media, Friends of Nambiti, Other), and message content;
Donation details: name, contact details, and donation amount submitted via Friends of Nambiti, together with payment information processed by our third-party payment provider (see clause 4);
WhatsApp messages: your phone number and the content of any conversation you initiate with us via WhatsApp Business;
Newsletter or blog subscription: your email address, where you choose to subscribe for reserve updates;
Media and press enquiries: name, publication or outlet, and details of any photography or filming request.

1.2 Information Collected Automatically

Standard technical information such as IP address, browser type, device type, and pages visited, collected via cookies and similar analytics technologies to help us understand how the Website is used and to improve it.

We do not knowingly collect sensitive personal information (such as health information) through the Website, save where you choose to volunteer it in a message (for example, to explain an accessibility requirement in an enquiry). Please avoid including sensitive personal information in general enquiries unless it is necessary for us, or the relevant Lodge, to assist you.

2. How We Use Your Information

We use personal information collected via the Website to:

respond to your enquiry and, where relevant, forward it to the appropriate Lodge, Friends of Nambiti, or the Reserve’s media/communications team;
process and acknowledge donations, and administer corporate partnership discussions;
route day visit enquiries to Umzolozolo Private Safari Lodge for handling;
communicate with you via email or WhatsApp regarding your enquiry or subscription;
send reserve updates and blog content, where you have subscribed to receive them;
maintain the security, performance, and functionality of the Website; and
comply with our legal and regulatory obligations.

3. Legal Basis for Processing

We process your personal information on one or more of the following bases: your consent (for example, subscribing to updates or submitting an enquiry); the necessity of processing to take steps towards a contract at your request (for example, forwarding a booking enquiry to a Lodge); our legitimate interests in operating and improving the Website and the Reserve’s conservation and community programmes; and compliance with a legal obligation, where applicable.

4. Sharing of Your Information

We share personal information only where necessary, and with appropriate safeguards:

With the relevant Lodge, where you submit a lodge-specific or day-visit enquiry, so that the Lodge can respond to and, if applicable, process your booking;
With Umzolozolo Private Safari Lodge for all day visit enquiries;
With payment processing providers, to process donations securely – we do not store full card details on our own systems;
With WhatsApp / Meta, where you choose to contact us via WhatsApp, subject to WhatsApp’s own terms and privacy practices;
With email delivery and newsletter service providers, to send subscribed updates;
With website hosting, analytics, and IT service providers who process data on our behalf under appropriate confidentiality and security terms; and
Where required by law, regulation, or a valid legal process, or to protect the rights, safety, or property of the Reserve, our guests, or the public.

We do not sell personal information to third parties.

5. Cookies and Analytics

The Website uses cookies and similar technologies to enable core functionality (such as the WhatsApp chat trigger and contact forms) and to gather anonymised or aggregated analytics about how visitors use the Website. You can control or disable cookies through your browser settings; disabling certain cookies may affect the functionality of the Website.

6. Data Security

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure, in line with the security safeguard requirements of POPIA. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, including to respond to your enquiry, administer a donation, comply with legal, tax, or accounting requirements, or resolve disputes. Where information is no longer needed, it is securely deleted or anonymised.

8. Your Rights Under POPIA

Subject to applicable law, you have the right to:

request access to the personal information we hold about you;
request correction of inaccurate or outdated personal information;
request deletion of personal information we no longer have a lawful basis to retain;
object to the processing of your personal information for direct marketing purposes, including unsubscribing from reserve updates at any time;
withdraw consent previously given, where processing is based on consent; and
lodge a complaint with the Information Regulator (South Africa) if you believe your information has been processed unlawfully.

To exercise any of these rights, contact our Information Officer using the details in clause 12. The Information Regulator can be contacted at enquiries@inforegulator.org.za or via inforegulator.org.za.

9. Children's Privacy

The Website is not directed at children, and we do not knowingly collect personal information from children through the Website. Where a parent or guardian submits an enquiry on behalf of a child (for example, regarding a family booking), that information is used solely for the stated purpose of the enquiry.

10. Cross-Border Transfers

Some of our service providers (such as hosting, analytics, email, or messaging platforms) may process or store information outside South Africa. Where this occurs, we take reasonable steps to ensure such providers apply a level of protection for your information that is consistent with POPIA.

11. Third-Party Links

The Website may link to individual Lodge websites, social media platforms, or other third-party sites. This Policy does not apply to those third-party sites, and we encourage you to review their privacy policies separately, particularly before making a booking or payment directly with a Lodge.

12. Contact Us / Information Officer

If you have any questions about this Privacy Policy, or wish to exercise any of your rights under POPIA, please contact us:

Email: reception@nambiti.com

Or via the contact form.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or Website functionality. The date at the top of this page indicates when it was last revised. We encourage you to review this Policy periodically.

X

X