We respect your privacy. This policy explains how we handle personal information under the Protection of Personal Information Act, 2013 (POPIA).
Who is responsible
Victoria Haus Boutique Guest House is operated by Villa Consano (Pty) Ltd (registration number 2023/119210/07, VAT number 4460316617), 16 Oak Avenue, Kenilworth, Cape Town, 7708, South Africa. We are the responsible party for the personal information described here.
For any privacy question or request, email reservations@villaconsano.co.za.
What we collect
- Contact and booking details: name, email address, phone number, dates, guests and special requests.
- Identity details where needed for check-in and safety, such as an identity document or passport number.
- Payment details: payments are processed by Paystack. We receive confirmation of payment and limited card information, never your full card number.
- Messages you send us by email, WhatsApp or phone.
- Basic technical information needed to run this website securely, such as your browser type and IP address in server logs.
How we use it
- To take and manage your booking, prepare for your stay and look after you while you are here.
- To process payments and refunds and keep accounting and tax records.
- To answer your questions and requests.
- To meet our legal obligations and protect our guests, staff and property.
- To send you news or offers, only if you agree. You can unsubscribe at any time.
Who we share it with
We share only what is needed with service providers who help us run the guest house, such as our booking system (Little Hotelier), our payment provider (Paystack), booking websites you choose to book through, our email and IT providers, and Google Analytics if you opt in to optional website analytics. They must keep it confidential and secure. We do not sell personal information.
Some providers store information outside South Africa. When this happens, we make sure it is protected to a standard at least equal to POPIA.
How long we keep it
We keep booking and payment records for as long as the law requires, usually five years for tax purposes, and other information only as long as we need it for the purposes above.
Keeping it safe
We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. This website uses an encrypted connection.
Cookies
Essential website functions and your saved analytics preference work without optional analytics. If you choose Accept analytics, we use Google Analytics 4 to understand visits and which booking or contact links people use. Analytics stays off until you opt in and respects browser Global Privacy Control and Do Not Track signals.
We send fixed page titles, page addresses without querystrings or fragments, the referring website's origin and the type of booking or contact link selected. We do not include enquiry text, form fields, names, email addresses or phone numbers in these analytics events. Google may process device and browser information and analytics identifiers, including outside South Africa. Advertising personalisation and Google Signals are disabled.
Cookie preferences in the footer lets you change your choice at any time. Accept analytics and Reject non-essential are both remembered for 180 days in essential local storage named vc.analytics.consent.v1, with the choice, timestamp, expiry and notice version. Closing the initial notice or pressing Escape saves a rejection, not consent. Closing reopened preferences preserves your saved choice. Clearing browser storage, expiry or a material change to the analytics purpose can require a fresh choice. Browser privacy signals and a Google Analytics opt-out keep analytics off. If we cannot save your preference, analytics stays off. Withdrawing consent disables collection, removes accessible _ga and _ga_SZMDZV5Y25 cookies and reloads this page to unload Google Analytics. It does not erase information already received. These first-party Google cookies distinguish visitors and preserve session state; we configure them to expire after 60 days without automatic renewal. Your browser may shorten this lifetime. Detailed event data is retained for two months; the current user-data retention setting is fourteen months.
Booking links take you to the separately hosted Little Hotelier / SiteMinder booking engine at direct-book.com. Our booking and payment providers have their own cookies and privacy notices; this website preference does not control storage or tracking on those other domains. Map and WhatsApp links also take you to external services. No booking engine, map, video or social-media widget is embedded on this website. Declining website analytics does not prevent you from making an enquiry or booking.
Your rights
- Ask whether we hold personal information about you and request a copy.
- Ask us to correct or delete information that is inaccurate, out of date or no longer needed.
- Object to our use of your information, including for direct marketing.
- Complain to the Information Regulator of South Africa at complaints.IR@inforegulator.org.za or www.inforegulator.org.za.
Changes
We may update this policy from time to time. The latest version is always on this page.
We look forward to welcoming you.
Check live availability, or send us a message with any question before you book.