Privacy Policy

Riverside Country Estate is a trading name of Marsh Harrier Investments (Pty) Ltd (Registration number: 2011/101912/07). We are committed to protecting the privacy and personal information of our clients, guests, and website visitors in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how we protect it, and what your rights are as a data subject. By engaging with our services or using our website, you consent to the collection and use of your information as described in this policy.

We collect personal information that is necessary to provide our services and fulfil our legal obligations. This includes:

We collect and process your personal information for the following purposes:

• To fulfil your booking: Planning, coordinating, and delivering your event or accommodation booking.
• To process payments: Invoicing, collecting payments, processing refunds, and maintaining financial records.
• To communicate with you: Responding to enquiries, sending booking confirmations, and providing event-related updates.
• To comply with legal obligations: Maintaining records as required by South African law, including the Companies Act, Income Tax Act, and other applicable legislation.
• For marketing purposes (with consent): Sending newsletters, special offers, and event updates. You may unsubscribe at any time.
• To improve our services: Analysing anonymised usage data to improve our website and service offerings.

We process your personal information on the following lawful grounds:

• Contractual necessity: Processing required to fulfil your booking contract with us.
• Legal obligation: Processing required to comply with South African law.
• Legitimate interests: Processing for the purposes of managing our business, preventing fraud, and maintaining security.
• Consent: Processing for marketing communications and photography use, where you have provided explicit consent.

We do not sell, rent, or trade your personal information. We may share your information with the following parties only as necessary to fulfil our services:

• Service providers: Trusted third-party suppliers who assist us in delivering services (e.g., payment processors, email service providers). These parties are bound by confidentiality obligations and may not use your information for any other purpose.
• Legal authorities: Where required by law, court order, or regulatory authority.
• Estate partners: Only with your explicit consent (e.g., sharing contact details with a preferred supplier at your request).

We do not transfer personal information outside of South Africa unless the recipient country has adequate data protection measures in place or we have your consent to do so.

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law:

After the applicable retention period, personal information will be securely deleted or anonymised.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• Secure, encrypted storage of personal data
• Access controls limiting who can view personal information
• SSL/TLS encryption for data transmitted via our website
• Regular review of our security practices

While we take every reasonable precaution, no method of transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

Under POPIA, you have the following rights regarding your personal information:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal information for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to complain: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.

To exercise any of these rights, please contact our Information Officer at matthew@riverside4me.co.za. We will respond to your request within 30 days.

Our website may use cookies and similar tracking technologies to improve your browsing experience and to collect anonymised analytics data. A cookie is a small text file placed on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function properly (e.g., form submissions, session management).
• Analytics cookies: Used to understand how visitors interact with our website. This data is anonymised and aggregated.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

We may send you marketing communications (newsletters, promotions, venue updates) only if you have given us your consent to do so, or where we have a legitimate interest as a previous client.

Every marketing communication will include an unsubscribe link or clear opt-out instructions. You may also request to be removed from our marketing list at any time by contacting us at info@riverside4me.co.za.

Our website may contain links to third-party websites (such as our social media profiles or partner suppliers). These websites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be published on this page with a revised “Last updated” date. We encourage you to review this page periodically.

Material changes will be communicated to clients via email where we hold a valid email address.

If you believe we have not handled your personal information in accordance with POPIA, please contact our Information Officer in the first instance. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa: