Privacy notice

Who this notice covers

FlightsMzansi controls information collected through its own pages, consent mechanism, security systems and direct correspondence. Embedded flight, hotel, car-hire and affiliate providers separately control information submitted directly to their services.

Information that may be processed

FlightsMzansi seeks to process only information reasonably necessary for a defined purpose.

• Technical and security data such as IP address, browser, device, requested URL, timestamps and suspected misuse.
• Consent choices stored in the browser.
• Permitted referral and interaction data when affiliate technology is accepted or an external link is followed.
• Information voluntarily supplied in an enquiry, correction or rights request.

Why information is used

Information may be used to deliver and secure the website, remember privacy choices, answer correspondence, attribute permitted referrals, prevent misuse, maintain lawful records and comply with legal duties. Processing requires an appropriate basis under POPIA.

Sensitive information

Do not send passport scans, identity numbers, payment-card details, passwords, booking credentials or one-time PINs through general contact channels.

Cookies and optional tools

Essential storage may remember consent or support security. Optional affiliate or analytics technology is governed by the consent mechanism where consent is required. See the cookie policy for controls.

Sharing and cross-border processing

Hosting, security, communication and affiliate providers may process limited information where necessary for their role. Cross-border transfers must rely on a safeguard recognised by POPIA.

Retention and security

Records are retained only for the purpose, legal duty, security need or dispute period that justifies them, then deleted, de-identified or restricted. Reasonable technical and organisational safeguards are used.

Security compromises

Where unauthorised access to personal information triggers POPIA obligations, FlightsMzansi will investigate, mitigate and notify the Information Regulator and affected data subjects as required by law.

Your POPIA rights

Subject to lawful limitations, a data subject may request confirmation, access, correction or deletion; object to certain processing; withdraw consent; and complain to the Information Regulator. Identity may be verified before acting.

Children and external services

The editorial site is intended for adults planning travel. A parent or guardian should manage enquiries involving a child. External providers apply their own privacy and booking terms.