Privacy Policy

Highline Tours and Travel respects your privacy. This notice explains how we handle personal information when you visit highline.co.za, contact us or ask us to arrange travel, in accordance with South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA).

Who is responsible for your information

Responsible party: Highline Travel Services (Pty) Ltd (registration number 2015/390933/07), trading as Highline Tours & Travel.
Physical address: 90 Bagley Terrace, Valeriedene, Johannesburg, 2195.
Information Officer: Frikkie Reynders — info@highline.co.za.
General enquiries: info@highline.co.za or +27 12 667 3656.

Information we collect and its sources

When you contact us, we receive the details you provide, including your name, email address, phone number and message. Travel enquiries and bookings may require traveller names, contact details, dates, itinerary preferences, passport or visa details, payment or billing information, and relevant accessibility or dietary requirements. We request only information needed for the service. Special personal information and children’s information require an applicable lawful basis and, where required, appropriate consent.

Information may come directly from you or, where appropriate and lawful, from your travel agent, employer, booking organiser, authorised representative or travel suppliers. Website hosting and security systems may record technical information such as IP addresses, browser details and access logs.

Why and on what basis we use information

We use information to respond to enquiries, prepare quotations, arrange and administer travel, communicate booking updates, maintain accounts and records, protect our website and meet legal obligations. Depending on the activity, processing is based on your consent, steps to enter into or perform a contract, a legal obligation, or a legitimate interest recognised by POPIA.

Making a general enquiry is voluntary. If information necessary for a quotation or booking is not provided, we may be unable to provide the requested service. We will identify required information when requesting it.

Who receives information

Where necessary for the stated purposes, information may be shared with relevant accommodation providers, transport operators, guides, destination partners, booking providers, professional advisers, and providers of hosting, IT, security and communications services. Disclosures to authorities are made where legally required or otherwise lawfully permitted. Service providers acting on our instructions must protect information and use it only for authorised purposes.

International travel and transfers

Travel arrangements and technology services may require information to be sent outside South Africa. Before a transfer, we must establish an appropriate basis under POPIA, such as adequate protection through applicable law or a binding agreement, your consent where appropriate, or another permitted ground.

Cookies and third party services

Cookies are small files stored on your device. Our website runs on WordPress and uses tools for contact forms, newsletter subscriptions and site security. Cookies and similar technologies may support essential functions, security and user preferences. Our contact forms use Caldera Forms, and our newsletter sign-up uses Mailchimp for WordPress. If you follow a social-media or other external link, that service may use its own cookies and process information under its own privacy notice. You can manage cookies through your browser; restricting necessary cookies may affect website functions. Links to other websites are governed by those sites’ own privacy notices.

Marketing choices

Electronic direct marketing must comply with POPIA’s consent and applicable existing-customer requirements. You may object to direct marketing at any time or use an unsubscribe option provided in a marketing message. If you choose to subscribe to our newsletter, we use your email address to send the updates you request. You can unsubscribe using the link in a newsletter or by contacting info@highline.co.za.

Security and retention

We must apply reasonable technical and organisational safeguards appropriate to the information and risks, and address security compromises as required by law. No internet transmission or storage system is completely secure. We retain enquiry and booking records only as long as necessary or required by law. When information no longer needs to be retained, it must be securely deleted, destroyed or de-identified.

Access to records

Our PAIA Manual explains how to request access to company records.

Your rights

Subject to POPIA and applicable exceptions, you may ask whether we hold your personal information, request access, request correction or deletion, object to processing, and withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing. You may also object to direct marketing. Contact our Information Officer using the details above. We may request reasonable proof of identity; any applicable access procedure or lawful fee will be explained.

Complaints

You may raise a concern with us or lodge a complaint with South Africa’s Information Regulator. Current complaint channels and contact details are available at inforegulator.org.za.

Updates

We may revise this notice when our practices or legal requirements change. The current published version will display its effective date.
Effective date: 13 November 2026.