PRIVACY POLICY
Greenwood Guides is committed to protecting and respecting your privacy. This policy, along with our website terms of use, outlines how we collect, use, and process any personal data that you provide to us or that we collect from you. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
The rules on the processing of personal data are governed by the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA) in South Africa.
Our Pledge to You:
- To keep your data secure.
- Never to share your data with third parties without your consent.
- To use your data to provide personalized information and improve our services.
- To give you control over your data by allowing you to update, delete, or access it.
1. Definitions
- Data Controller: The person or entity that determines the purpose and means of processing personal data.
- Data Processor: The person or entity responsible for processing data on behalf of the controller.
- Data Subject: The individual whose personal data is being processed.
- Personal Data: Any information that can be used to identify an individual, directly or indirectly, such as a name, email, or IP address.
- Special Categories of Personal Data: Sensitive data, such as health information, racial or ethnic origin, and religious beliefs.
- Processing: Any operation performed on personal data, such as collecting, storing, or using it.
2. Who We Are
Greenwood Guides is the data controller. This means we are responsible for determining how and why your personal data is used. For any questions related to data protection, you can contact us at info@greenwoodguides.com.
3. What Personal Information We Collect
We collect the following types of data:
- Route Purchases: When you purchase one of our travel guides, we collect your name, email address, billing address, and delivery address to process and fulfill your order. This data is stored securely for up to 24 months and then permanently deleted.
- Business Memberships: We collect your name, business name, email, phone number, and payment details to process and manage your membership. Your data will be retained for 6 months after your membership expires and then permanently deleted.
- Newsletter Subscribers: To subscribe to our newsletter, we request your email address, first name, and last name. We only collect this data when you have opted in and provided consent to receive our marketing communications. We retain this data in a secure database. You can opt-out or unsubscribe from our mailing list at any time by following the instructions in the emails we send you. It is your responsibility to unsubscribe if you no longer wish to receive marketing communications from us.
- Payment Information: All payment transactions are securely processed by our payment gateway, Stripe. We do not store any payment card details on our servers. Stripe handles all payment data and ensures that card information is encrypted and securely stored. Stripe is fully PCI-DSS compliant, ensuring your payment information is protected during the transaction process.
4. How We Use Your Data
We use the information you provide to:
- Process orders or memberships.
- Send updates and marketing communications (with your consent).
- Provide personalized recommendations and services.
5. Web Analytics and Cookies
We use cookies and web analytics tools (such as Google Analytics) to collect anonymous information about how visitors use our website. This data helps us improve user experience and tailor our marketing efforts. You may opt out by contacting us.
6. Legal Basis for Processing Your Data
Our legal basis for processing your personal data is your consent when you provide it (e.g., subscribing to newsletters) and the fulfillment of our contractual obligations (e.g., processing orders).
7. Sharing Your Data
Your personal data will never be shared with third parties unless you provide explicit consent or it is necessary to fulfill a contract (such as sharing your payment information with Stripe for secure transactions).
8. Your Rights
Under the GDPR and POPIA, you have the right to:
- Request access to the personal data we hold about you.
- Request corrections to any inaccurate or outdated data.
- Request that your data be deleted when no longer necessary.
- Withdraw your consent to data processing at any time.
9. Data Security
We take the security of your data seriously. All payment information is processed securely by Stripe, which uses encrypted, secure servers. No sensitive payment information is stored by Greenwood Guides.
10. Changes to Our Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email.
11. How to Contact Us
For any questions or concerns about your personal data or this privacy policy, please contact us at info@greenwoodguides.com.