Prime Lodges (Pty) Ltd · Last updated: 3 November 2026

​

1. Who we are:

• Prime Lodges (Pty) Ltd (“Prime Lodges”, “we”, “us”) manages short-term lodge rentals for owners in Mabalingwe Nature Reserve, Zebula Golf Estate & Spa and Elements Private Golf Reserve. We are the “responsible party” under the Protection of Personal Information Act 4 of 2013 (POPIA) for the personal information described in this policy.

• Company: Prime Lodges (Pty) Ltd, registration number 2023/516415/07

• Address: 7 Basson Street, Modimolle, Limpopo, 0510

• Website: www.primelodges.co.za

• Information Officer: Tiaan Botes · tiaan@primelodges.co.za · (+27) 083 768 1184

​

We respect your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it and what your rights are.

​

2. Who this policy covers:

• guests and bookers, including those who book through a booking platform;

• other guests and visitors named on a booking;

• lodge owners who use our rental management service;

• people who contact us, request a quote or subscribe to our updates; and

• visitors to our website.

​

Property sales: Property sales are handled through eXp and not by Prime Lodges. If you enquire about a property for sale, your details may be passed to eXp, which handles them under its own privacy policy. (https://www.agnt.inc/privacy-policy)

​

3. Personal information we collect:

​

Guests and bookers:

• name, ID or passport number, phone number, email address, physical address and company name (if applicable);

• your signature on our Terms and Conditions;

• the names of the other guests and the number (and ages) of children;

• vehicle registration numbers;

• banking details (to refund deposits and cancellations) and proof of payment;

• your booking history and communications with us (email, WhatsApp, phone); and

• records of complaints, damage, incidents or breaches of our terms.

​

Lodge owners:

• name, contact details, ID or company registration number, banking details (where we make payments to you), details of your lodge and your communications with us.

​

Enquiries and subscribers:

• name, email address, phone number and the content of your message.
   

Website visitors:

• IP address, device and browser information, pages visited and cookie data.

​

We do not ask for special personal information such as health, religion or biometric information. If we record an incident, we record only what is needed.

​

4. How we collect it:

• directly from you through our website forms, the signature and Guest Information Forms, WhatsApp, email and phone;

• from booking platforms (such as Booking.com, Airbnb and LekkeSlaap) when you book through them;

• from Estates, for example gate access records or reports of incidents and fines;

• automatically through cookies and analytics when you use our website;

​

5. Why we use your information:

​

We use your personal information only for the following purposes, and for purposes closely related to them. For each, the legal ground under POPIA is shown in brackets.

• to process bookings, payments, refunds and deposits and to run your stay (performing our contract with you);

• to register guests and vehicles with Estate gates and arrange access, and to give details to the lodge owner and the caretaker or cleaner (performing our contract and our legitimate interests);

• to enforce our terms, assess damage and deal with complaints and disputes (legitimate interests and performing our contract);

• to protect people, wildlife and property, including through CCTV and our blocked-guest list (legitimate interests);

• to comply with the law, including tax, accounting and record-keeping (legal obligation);

• to improve our website and services (legitimate interests); and

• to send you updates and marketing if you have subscribed (your consent).

​

6. Children:

We collect only the number and ages of children, for lodge capacity and safety. This information is given to us by the Booker, who confirms they are the parent, guardian or other competent person and consents on the child’s behalf. We do not market to children.

​

7. Who we share your information with:

• The Estate: we share guest and vehicle details through the dedicated resort access apps used by the Estate gates.

• The lodge owner: the owner of the lodge you book.

• Caretakers and cleaners: so they can welcome you, hand over keys and clean the lodge.

• Service providers: website hosting and forms (Wix), analytics (Google), messaging (WhatsApp) and our social media platforms (Facebook, Instagram, TikTok and YouTube).

• Booking platforms: where you book through them.

• Banks and professional advisers: to process payments and meet our legal obligations.

• Authorities: the police, courts and other authorities where the law requires it or to protect our rights.

​

We do not sell your personal information. We expect everyone we share it with to keep it secure and use it only for the purpose we shared it.

​

8. Transfers outside South Africa:

Our website and some of our tools are provided by international companies (such as Wix, Google, Meta, TikTok and WhatsApp), which may store or process information outside South Africa. We use providers that have appropriate data protection commitments, as POPIA requires.

​

9. CCTV:

Some lodges have CCTV cameras. We use them only for security and to investigate incidents, damage or breaches of our terms. Cameras are not placed in bedrooms or bathrooms. Footage is accessed only by authorised people and may be shared with Estate security or the police where needed. Our Booking Terms & Conditions tell guests that CCTV is used at some lodges.

​

10. Blocked-guest list:

We keep a list of bookers and guests whose stays were ended for serious breaches of our Booking Terms & Conditions, for example parties, serious damage, or unsafe or illegal behaviour.

• What we record: name, ID number, contact details, the date and the reason.

• Why: to decline future bookings and to protect owners, other guests, staff and wildlife (our legitimate interests).

• Who sees it: us, and the lodge owner or Estate only where necessary.

• How long: for as long as there is a legitimate need, and we review the list from time to time.

• Your rights: if you think you were listed in error, contact our Information Officer and we will review it.

​

11. How we protect your information:

We take reasonable technical and organisational steps to protect your personal information from loss, misuse and unauthorised access. Our records are kept in files with access limited to people who need them, and our website runs on Wix’s secure platform. No system is completely secure. If a security breach is likely to harm you, we will notify you and the Information Regulator as POPIA requires.

​

12. How long we keep it:

• Booking, payment and signed-terms records, and Guest Information Forms: 5 years after your stay (tax and accounting requirements), then securely destroyed or de-identified.

• Enquiries that did not become bookings: only as long as needed to respond, then deleted.

• Marketing subscribers: until you unsubscribe.

• CCTV footage: only as long as needed for security purposes, unless it is needed for an incident or dispute.

• Blocked-guest list: see section 10.

​

We may keep information longer where the law requires or where it is needed for a dispute.

​

13. Your rights:

Under POPIA you may:

• ask whether we hold your personal information and ask for a copy;

• ask us to correct or delete it;

• object to us processing it;

• withdraw your consent (this does not affect processing done before you withdrew); and

• object to direct marketing.

​

Send your request to our Information Officer (details in section 1). We may need to verify your identity, and we will respond within a reasonable time. We may refuse to delete information we are legally required to keep or need for a dispute.

You also have the right to complain to the Information Regulator. Their contact details are on their website: https://inforegulator.org.za.

​

14. Direct marketing and photos:

We send marketing messages only to people who have subscribed or opted in, or as POPIA otherwise allows. You can opt out at any time by replying “unsubscribe” or emailing us. We do not post photos of guests on social media. If we ever want to, we will ask for your consent first.

​

15. Cookies, analytics and social media:

Our website is built on Wix and uses cookies to work properly and, through Google Analytics, to understand how visitors use it. You can control cookies in your browser settings. Our website links to our Facebook, Instagram, TikTok, YouTube and WhatsApp pages. Those platforms have their own privacy policies and we are not responsible for them.

​

16. Changes to this policy:

We may update this policy from time to time. The date at the top shows when it was last changed.

​

17. Contact and complaints:

If you have a question, a request or a complaint about your personal information, please contact our Information Officer, Tiaan Botes, at tiaan@primelodges.co.za or (+27) 083 768 1184. We will try to resolve it first. You may also complain to the Information Regulator at any time.