POPIA policy

Our role and scope

FlightsMzansi is the responsible party for personal information it determines how and why to process. A flight-search, accommodation, car-hire or booking provider is separately responsible for information submitted directly to its service.

This policy applies to website visitors, enquiries, editorial correspondence, security logs and consent choices. It does not replace a booking provider’s privacy notice.

Eight conditions for lawful processing

We apply accountability, processing limitation, purpose specification, further-processing limitation, information quality, openness, security safeguards and data-subject participation. We seek to collect only information reasonably necessary for a stated and lawful purpose.

Purposes and lawful grounds

Information may be processed to operate and secure the website, remember consent, answer an enquiry, maintain records, investigate misuse, meet legal duties and—only where lawfully permitted—measure or improve the service.

• Consent, where a genuine choice is required
• Performance of an agreement or steps requested by the user
• Compliance with a legal obligation
• A legitimate interest that does not unjustifiably override privacy rights

Data minimisation and retention

Do not send passport numbers, identity documents, bank-card details or booking credentials through general contact channels. Records are retained only for the purpose, legal obligation, dispute period or security need that justifies them, after which they are deleted, de-identified or securely archived.

Operators, transfers and safeguards

Hosting, security, analytics and affiliate providers may act as operators or independent responsible parties. Where information is transferred outside South Africa, appropriate contractual, legal or consent-based safeguards must apply as required by POPIA.

Security safeguards and compromises

Reasonable technical and organisational measures are used to protect personal information against loss, damage, unauthorised destruction, unlawful access or processing.

Where a security compromise affects personal information, FlightsMzansi will investigate, contain and document the incident and notify the Information Regulator and affected data subjects as required by POPIA. Operators must notify FlightsMzansi promptly when they become aware of unauthorised access affecting information processed for us.

Your rights

Subject to POPIA, you may ask whether we hold your personal information, request access or correction, object to certain processing, request deletion where lawful, withdraw consent, or complain to the Information Regulator. Identity may be verified before a request is actioned.

Information Officer and complaints

Send a privacy request through the contact page and mark it for the Information Officer. You may also approach South Africa’s Information Regulator. Nothing in this policy limits a right or remedy that cannot lawfully be limited.

Contact and interpretation

Questions, rights requests and notices may be submitted through the contact page. These provisions must be read with applicable South African law; no clause excludes a statutory right or remedy that cannot lawfully be excluded.