Privacy & Cookie Notice

Cloudrift Breakaways (Pty) Ltd, registration number 2026/395651/07, runs Cloudrift and this website. Our address is 236 Stocchi Avenue, Vaalview, Vanderbijlpark, Gauteng 1911.

Our Information Officer, Craig Berman, handles every privacy request, and you can reach them at bookings@cloudrift.co.za.

Enquiries

• When you send an enquiry through our website, by email, by phone or on social media, we collect your name, your contact details, the dates and residence you are interested in and your message.
• If you fill in an enquiry form in one of our adverts on Facebook, Instagram, TikTok or Google, that platform passes the same details to us.
• Our calls are answered by SmartAlex, our voice assistant, which also runs the chat window on this website. For each call it records your name, your number, what you asked about and a summary of the conversation, so our team can follow up.
• Our own records keep the summary of a call and not a full transcript.

Bookings

• When you book through Booking.com, Airbnb or LekkeSlaap, the platform passes us your name, your contact details, your dates and the number of guests.
• When you book with us directly, we record the same details, together with the payments you make and your refundable deposit.
• Every booking is kept in NightsBridge, our booking system, and in our own booking records under a booking reference.

Gate registration

Before you arrive, we ask you to register everyone in your party and every vehicle for the estate gate, and the Gate registration section explains what we collect and why.

Website visits

We only collect information about how you use this website if you accept cookies, as the Cookies section explains.

How we use it

We use these details to answer your enquiry, manage your booking and your stay, take payment, return your deposit and keep the estate secure. We never sell your personal information.

The estate is a private, access-controlled property. The gate team lets in only the people and vehicles registered for each stay, so every booking is registered before the guests arrive.

• We collect the full name of every guest, an ID or passport number for every adult and the age of every child.
• We collect a mobile number and an email address for the lead guest, and a mobile number for any other adult who chooses to give one.
• We collect the make, colour and registration number of every vehicle coming onto the estate.
• We collect details of any dogs or boat you bring, the time you expect to arrive, any early arrival or late departure you ask for, and how you heard about us if you choose to tell us.
• When you accept our Terms and Conditions, we record the name you sign with, the date and time, your IP address and your browser and device, together with a copy of the exact terms you accepted.

We use these details to manage your stay and to let the right people and vehicles through the gate. We do not use them for marketing. We keep ID and passport numbers and vehicle registrations on file for the security of the estate, and the How long we keep it section explains how to ask us to delete them.

• We use your booking and registration details because we need them to carry out your booking, which is our contract with you.
• We also use them to protect the security of the estate, its guests and its neighbours, which is a legitimate interest that POPIA recognises.
• Registration is a condition of every stay and does not rest on your consent, because the gate cannot let anyone in without it.
• We use your enquiry details to answer the enquiry you sent us.
• We send marketing only with your consent, which you give separately for each channel and can withdraw at any time.
• We use analytics and advertising cookies only if you accept them.

These companies handle personal information for us, and only to provide their service to us.

• Supabase runs our database, which is stored in Singapore on Amazon Web Services.
• Vercel hosts this website, and the servers that handle your forms run in Singapore.
• Resend and Brevo deliver the emails we send you.
• Google Workspace runs our bookings mailbox, bookings@cloudrift.co.za.
• NightsBridge is our booking system.
• PayBridge, the payment service built into NightsBridge, and Yoco process card payments.
• SmartAlex answers our calls and runs the chat window on this website.

If you accept cookies, Google (Analytics and Ads), Microsoft Clarity, Meta and TikTok also receive information about your visit, and their own privacy policies apply to how they use it.

If you accept cookies and send us an enquiry, our website also sends Meta your email address, phone number and name in scrambled form (a one-way code called a hash), so that Meta can tell us which of our adverts brought your enquiry.

Booking.com, Airbnb and LekkeSlaap pass bookings to us. They are responsible for the information you give them, and their own privacy notices apply to it.

• Our database and the servers that run this website are in Singapore.
• Our email services, Google, and the analytics and advertising services you accept can process your information in other countries, including the United States and countries in the European Union.
• We only use providers that are bound, by law or by their agreement with us, to protect your information to a standard substantially similar to POPIA, as section 72 of POPIA requires.

• We hold your details in a secure database that only our own website server can read.
• Only the owners and our finance staff can see a full ID or passport number, and other members of our team see only the last four digits.
• The emails our team receives about a registration never contain ID or passport numbers.
• Your browser does not keep a copy of your registration once you have sent it.
• To stop abuse of the forms on our website, we keep a scrambled code made from your internet address, never the address itself, for up to two days.

• We keep ID and passport numbers and vehicle registrations on file for the security of the estate, so we can confirm who has stayed with us and which vehicles were on the property.
• You can ask us to delete them at any time, and we will do so unless we need them for a security incident or a legal claim that is still open.
• Deleting them removes the numbers and registrations only, and your name, the dates of your stay and the terms you signed stay on the record of your booking.
• We keep the record of the terms you accepted, because it is the record of our contract with you.
• We keep booking and payment records for at least five years, because South African tax law requires it.
• We keep call summaries until you ask us to delete them.
• We keep your marketing details until you unsubscribe, and after that we keep only a note that you unsubscribed, so we do not contact you again.
• When we delete information, a copy can remain in our database backups until those backups expire, which happens automatically.

• We only send you marketing if you ask for it, and you choose each channel separately: email, SMS and WhatsApp.
• The marketing boxes on our forms are never ticked for you.
• Every marketing email has an unsubscribe link, and you can also ask us to stop by emailing bookings@cloudrift.co.za.
• If you booked through Airbnb, we will not send you marketing.
• We never sell your details or pass them to another business for its own marketing.

• You can ask us what personal information we hold about you and which third parties have had access to it.
• You can ask us to correct information that is wrong or out of date.
• You can ask us to delete your information, and we will do so unless we need it for an open security incident, a legal claim or a record the law requires us to keep.
• You can object to how we use your information, and you can withdraw your marketing consent at any time.

To make a request, email bookings@cloudrift.co.za with your name and, if you have one, your booking reference, which looks like CR26-0001. We may ask you to confirm who you are before we act on it, and we reply within 30 days.

If you are unhappy with how we have handled your information, you can complain to the Information Regulator at inforegulator.org.za.

• The site stores your cookie choice in your browser so it does not ask you again.
• If you accept, the site can load analytics and advertising tags from Google (Analytics and Ads), Microsoft Clarity, Meta and TikTok.
• If you accept, our own visit counter also records the pages you view, the site that sent you, the type of device you use and your approximate location.
• If you decline, none of these load, and the site works in exactly the same way.
• Vercel, which hosts the site, counts page visits and measures page speed without cookies and without identifying you.
• Pages with a map show it from Google Maps, and Google's own privacy policy applies to that map.
• You can change your choice at any time by clearing this site's data in your browser, and the site will ask you again.

This is version 2026-10 of our privacy notice, published in October 2026. When we change how we use your information, we update this notice and change its version and date.