Hamba Kahle @ Mbazo safari Lodge respects your right to privacy and values our relationship with you, our customer. Our company's success is contingent on our ability to gain and maintain your trust.

Hamba Kahle @ Mbazo safari Lodge (Pty) Limited ("we" or "us" or "our") is committed to preserving your privacy and ensuring that your personal information or personal data ("PI") is gathered and used in a proper, legal, and transparent manner.

The Personal Information under our control will not be disseminated, sold, or shared with third parties for reasons other than those mentioned in this policy. Your Personal Information will never be sold for marketing reasons.

This Policy ("Policy") describes how we collect, utilise, and disclose your PI in accordance with the requirements of the Protection of Personal Information Act, No. 4 of 2013 ("POPIA").

This policy applies to PI that we may process about any individual visiting our online platforms and website, our customers, potential customers, and prospects, as well as any individual whose PI we collect because of a relationship with a customer (such as a reference or beneficiary's information received from a customer). By accessing our website, you consent to the terms of this Policy, as it may be changed from time to time.

This Policy applies to all data subjects ("you", "your") whose PI we collect, regardless of the jurisdiction in which you reside or work, as we are an international retailer.

This Policy applies to all Personally Identifiable Information, whether it was submitted to us through our website or any other form of interactions with you, such as email, telephone, or otherwise (collectively, "Channels"), through or by third parties or systems that collect PI.

This Policy applies to all data subjects ("you", "your") whose PI we collect, regardless of the jurisdiction in which you reside or work, as we are an international retailer.

This Policy applies to all Personally Identifiable Information, whether it was submitted to us through our website or any other form of interactions with you, such as email, telephone, or otherwise (collectively, "Channels"), through or by third parties or systems that collect PI.

When ordering any of our items, registering for or using the website, application, or any of our services, you must agree to all of the conditions of this Policy. By adopting this Policy, you are presumed to have read, understood, agreed to, and accepted its terms.

The minimum age requirement for using our Channels is 18 years old. In accordance with current law, users under the age of 18 are required to get parental or guardian consent. We will provide the same level of protection for any processed PI, regardless of the age of the individual to whom it pertains.

We gather your PI when:

You willingly supply us with information when you engage with us, such as when you make us online inquiries or when you subscribe to our newsletters or consent to receive other messages from us;

Peruse, visit, or participate in our various Channels; register an online profile on our websites or apps to purchase our products; purchase, return, exchange, or enquire about our products and services; agree to the terms and conditions of services that contain provisions governing the use or disclosure of your PI; make general enquiries, lodge complaints, and communicate with us; and

Join us for any of our events.

In some cases, we obtain Personal Information from third parties. We shall only collect Personal Information in this manner for our legitimate business reasons, or when such information is publicly available, or as otherwise permitted by POPI. Examples include information obtained from credit bureaus, fraud agencies, banks, friends, or family members.

We do not collect or store your credit card information used to purchase goods and services. Financial institutions collect this information in accordance with their own privacy policies.

We only use cookies for our legitimate business purposes, as outlined in this policy, and to enhance and simplify your shopping and browsing experience. All such uses comply strictly with POPI.

Cookies are little text files that are kept on your computer or mobile device when you visit a website. Cookies save information such as the identification of the computer or device you used to access our Channels, your server address, domain name, the date and time you visited our Channels, the sites, products, and documentation you accessed or saw, and the internet browser you used.

This is done so that we can:

By better understanding your browsing and purchasing behaviour, we can provide you with more personalised service, communications, and products; track, count, and analyse website visits and usage data; determine product preferences and popularity; and enhance our websites and online shopping experience.

Using your browser, you can quickly delete cookies from your computer or mobile device. For information on how to manage and delete cookies, please consult the "Help" section of your browser. You have the option to disable cookies or to be notified whenever a new cookie is sent to your computer or mobile device. Please be aware that if you disable cookies, you will not be able to utilise all of our functions.

Our website may contain connections to external sites over which we have no control. These websites will have their own privacy policies, which you should consider prior to visiting. We cannot be held liable for the content of linked websites and present them exclusively for the convenience and education of our users.

In addition to the aforementioned, our website employs Google Analytics for tracking and an AMP Client ID for consistent data collection when our website is utilised. The information on how Google uses the data and how to opt out of analytics monitoring may be found at the following page.

https://policies.google.com/technologies/partner-sites

We have contracted with Google to provide online adverts and analytics services on our behalf. We employ anonymous cookies to collect information about a user's previous visits to our website and then use this data to serve relevant retargeting and advertising through third-party suppliers, like Google.

You may opt out of Google Analytics and Google Display Network advertising by visiting the Google Ad Preferences Manager at https://support.google.com/ads/answer/6004245?hl=en.

As indicated before, we use your Personal Information to send you advertising and marketing materials that we feel may be of interest to you. Visit Network Advertising Initiative's ("NAI") educational page at:

http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Using the links below, you can opt out of receiving targeted advertising:

Facebook: https://www.facebook.com/settings/?tab=ads

Google: https://www.google.com/settings/ads/anonymous

Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can also opt out of certain of these services by visiting the Digital Advertising Alliance's opt-out site at http://optout.aboutads.info/.

Please note that we do not alter our Site's data gathering and usage methods in response to your browser's Do Not Track signal.

Processing involves collecting, releasing, and merging your personal data with other personal information. We gather and process your PII for the following purposes: -

provide our goods and services to you; communicate with you about new product features, personalised products, services, offers and events that we believe may be of interest to you; analyse, develop, continually improve and enhance the use, functionality and performance of our websites and apps, products and services to manage the security of our sites, networks and systems; comply with applicable laws, including our obligations to make disclosures to authorities, resolving disputes and enforcing our agreements; and comply with applicable laws, including our obligations to make disclosures to

We will not use your PI for any purpose other than that for which it was provided or collected, and consistent with our legitimate interests and legal obligations.

We may grant access to or share some of your PI with the following parties where necessary and for the purposes for which it was provided or collected:

our affiliates, other divisions or companies within the group of companies to which we belong, in order to provide joint content and services such as registration for transactions and customer support, and to help detect and prevent potentially illegal acts and violations of our policies; our merchandise suppliers, service providers, auditors, constants and agents if they are required by contract to process it for us or to provide services for or to us, including product delivery; our merchandise suppliers, service providers, auditors, constants and agents if they are required under contract to process

Your PI will be processed primarily in South Africa, where our support centre is located; however, certain PI may be transferred to countries outside of South Africa, such as when we use cloud-based software services; in such cases, we will ensure that the appropriate security measures are in place with respect to the processing and storage of your PI.

In the case of a reorganisation, merger, sale, joint venture, assignment, transfer, or other type of transaction of all or a portion of our business, assets, or stock, we may share PI with third parties.

We may provide access to or share your PI as required by law, court order, or other lawful reasons, where we believe in good faith that disclosure is necessary to protect our rights, protect your or others' safety, investigate fraud, or respond to government requests, including those from public and government authorities.

When we share or provide access to your PI with third parties, they are contractually prohibited from using or disclosing information except as required to execute services on our behalf or to comply with legal requirements.

We aim to ensure the accuracy and currency of your Personal Information. You may request that we update, correct, or remove your personal data. We will demand a copy of your identification to verify your identity before making any changes to your personal information. We would appreciate it if you would maintain the accuracy of your personal information.

You have the right to seek access to the Personal Information we maintain about you. You must contact us directly or send an email to the address listed below. If our company operations and/or the law need and/or permit us to release it to you, we will do so within a reasonable amount of time after receiving your request.

We will retain your PI for varying lengths of time depending on the use or purpose for which it was submitted or collected, as well as your marketing, recruitment, and other correspondence preferences.

Once the relevant purpose has been met, we will delete your Personal Information unless applicable law requires us to preserve a copy of such information. For statistical purposes, we may retain Personal Information in an anonymized manner forever, at which point it ceases to be Personal Information. This policy also applies to the retention of your Personal Information.

We take the security of personal information extremely seriously and do our utmost at all times to comply with applicable data protection legislation. We protect the integrity and confidentiality of your personally identifiable information that is in our custody and under our control by using reasonable technical and organisational safeguards to prevent its loss, misuse, unauthorised access, or unlawful processing. We only grant access to PI to those workers who require it to perform their job duties. In doing so, we consider commonly accepted information security policies and processes in the industry.

Our security processes and regulations include:

Access to personal information; Secure communications; Security when subcontracting operations or functions; Retention and disposal of information.

Acceptable utilisation of personal data;

concerns of governance and regulation;

Monitoring access to and utilisation of sensitive data; investigating and responding to security incidents.

When we enter into a contract with a third party, we apply necessary security, privacy, and confidentiality obligations to protect the security of the personal information for which we remain responsible.

We shall guarantee that anybody to whom we disclose your personal information agrees to protect it to the same extent that we are required to.

You have the right, on reasonable reasons, to object to our processing of your Personal Information, including for direct marketing purposes. If you object, we shall stop processing your Personal Information, unless the Personal Information Protection and Electronic Documents Act or another applicable law permits its ongoing use.

If we have reasonable grounds to believe that your PI has been accessed or acquired by an unauthorised party, we shall, as soon as is reasonably possible and as required by law, notify the appropriate regulator and you, unless we are unable to identify the PI that has been unlawfully accessed.

We are not responsible for the privacy policies or practises of any connected or third-party websites and make no representations or assurances regarding them.

CHANGES TO THIS PRIVACY POLICY

This privacy policy goes into effect on July 1, 2022. The most recent version of our Privacy Statement is always accessible on our website. We may need to alter or modify our Policy from time to time, and we will tell you via the channels we regularly use to communicate of any significant changes.

DISPUTE RESOLUTION OR COMPLAINT FILING

For more information about our privacy policies, if you have concerns, or if you would like to make a complaint, please contact us by e-mail at info@mabzolodge.co.za or by letter at the address listed below:

Hamba Kahle @ Mbazo safari Lodge

[Regarding Privacy Officer Compliance]

24. Mbazo, Black rhino reserve, Pipelinesberg, South Africa

We will investigate your concerns and attempt to resolve any complaints regarding the protection of personally identifiable information, as outlined in this Policy and applicable legislation.

We will respond to your request in accordance with applicable data protection regulations. However, the rights outlined in this Policy are not absolute; they are not always applicable, and exceptions may apply. We will request that you verify your identification and/or provide us with information to better comprehend your request. If we cannot accommodate your request, we will explain why.

The following contact information may be used to file a complaint with the Information Regulator (South Africa):

Pretoria's address is the SALU Building at 316 Thabo Sehume Street.

Telephone number: 012 406 4818

Fax number: 086 500 3351

Email: inforeg@justice.gov.za

Policy current as of 01/06/2021