POPIA NOTICE
Privacy notice
Last updated: 2 August 2026
This notice explains how Langezandt Retreat Holdings (Pty) Ltd (“we”, “us”), trading as Langerust, processes personal information when you use langerust-struisbaai.co.za or send a stay enquiry. We aim to handle information carefully and in line with South Africa’s Protection of Personal Information Act, 2013 (POPIA).
1. Who is responsible
The responsible party is Langezandt Retreat Holdings (Pty) Ltd, trading as Langerust, 3067 Murex Street, Langezandt Fishermen's Village, Struisbaai, Western Cape, South Africa.
For privacy questions or data-subject requests, contact the Information Officer, Langezandt Retreat Holdings (Pty) Ltd via the same channel you use for booking enquiries (the website enquiry form on this site). Please mark the subject clearly (for example, “Privacy request”).
2. What we collect
When you submit the enquiry form, we may process:
- Name
- Email address
- Phone number (optional)
- Number of guests
- Preferred arrival and departure dates
- Any message or notes you choose to include
Our hosting and reverse-proxy infrastructure may also process technical data such as IP address, browser type, and request timestamps in server logs, for security and reliable operation of the site.
3. Why we process your information
- To respond to your stay enquiry and provide availability or a quote
- To communicate with you about a possible or confirmed booking
- To prevent spam and abuse of the form
- To operate and secure the website
We process this information because you asked us to respond (steps towards a possible booking) and/or because we have a legitimate interest in handling genuine guest enquiries for Langerust.
4. Who receives your information
- Our team — people who handle Langerust enquiries and bookings (via the secure email addresses we configure for this purpose).
- Resend — email delivery operator that transmits form submissions from our server to those inboxes.
- Hosting / infrastructure providers — who run the website and related servers (including TLS termination).
- Google LLC (Google Analytics 4) — only if you accept analytics cookies; used to measure site traffic and usage (see section 9).
We do not sell your personal information.
5. Cross-border processing
Some operators (for example Resend, Google Analytics when accepted, and certain hosting or content services) may process information outside South Africa. Where that happens, we rely on reputable providers and their contractual and security terms. By using the enquiry form you understand that your details may leave South Africa for the purpose of delivering and handling your message. Analytics data is only sent to Google if you opt in via the cookie banner.
6. How long we keep information
We keep enquiry-related information only as long as needed to handle your request and any related booking, and for ordinary business records. As a guide, this is typically up to 24 months after last contact, unless a longer period is required for a booking, legal, or accounting reason. We then delete or archive messages according to our internal practice.
7. Your rights under POPIA
Subject to POPIA and applicable law, you may request to:
- Access the personal information we hold about you
- Correct or update inaccurate information
- Delete information, or object to certain processing, where applicable
- Lodge a complaint with the Information Regulator (South Africa)
To exercise your rights, use the enquiry form and clearly describe your request. We may need to verify your identity. We aim to respond within a reasonable time (generally within one month, or as required by law).
Information Regulator (South Africa): inforegulator.org.za
8. Security
We use HTTPS for the website, keep the email-sending API key on the server only (not in the browser), limit who receives enquiry emails, and apply practical safeguards such as form size limits and basic spam resistance. No method of transmission is completely secure; please avoid sending unnecessary sensitive details (for example full payment card numbers) in the free-text message field.
9. Cookies and third-party assets
Essential: the site needs basic technical operation (for example TLS and form
submission). We store your analytics choice in the browser (localStorage key
langerust_analytics_consent) so we can remember Accept or Decline.
Analytics (optional): with your consent we load
Google Analytics 4 (measurement ID G-M6BQ722HE9). Google may set
cookies or use similar technologies and process usage data (for example pages viewed, approximate
location, device/browser type). We configure IP anonymisation where supported and do not use
Google Analytics for advertising personalisation on this site. You can change your choice any time
via Cookie settings in the site footer (or the control on this page).
Pages may also load fonts or CSS from third-party content networks (for example Google Fonts and the Tailwind CSS CDN), which can receive technical request data such as your IP address, independent of the analytics opt-in.
Review or change cookie settings
10. Children
The site is aimed at adults arranging holiday accommodation. Please do not submit personal information of children through the form except where it is necessary for a booking (for example guest numbers) and you are authorised to provide it.
11. Changes
We may update this notice from time to time. The “Last updated” date at the top will change when we do. Continued use of the enquiry form after an update means the revised notice applies to new submissions.
12. Contact
Questions about this notice or your personal information: use the Langerust enquiry form and mark the message as a privacy matter.