01
Who handles your information
Tiro Valley Farms (Pty) Ltd, registration number 2024/292522/07, operates this website and handles the personal information collected for its enquiries, bookings and business operations.
Our address is Portion 19, Farm 393 Doornkloof, Hekpoort, Mogale City, 1739, South Africa. Send privacy questions or requests to hello@tirovalley.africa with “Privacy request” in the subject.
02
Information we collect
- Enquiries and bookings: your name, email, contact number where supplied, requested dates, guest numbers, accommodation choices, messages and booking references.
- Business and portal interactions: account and sign-in details, supplier or application information you submit, and records needed to manage those interactions.
- Transactions and communications: quotes, payment references and status, invoices, and email or SMS communication records.
- Technical information: request times, IP addresses, browser information and operational or security logs. Enquiry records include the source path, browser user-agent and remote IP address.
Provide only information relevant to your request. Do not submit passwords, card details or unnecessary identity or health documents in a general message.
03
Why we use it
We use information to respond to requests, prepare quotes, arrange and administer bookings, manage supplier or application interactions, support portal access, communicate service updates and maintain operational and security records.
The relevant basis depends on the interaction: steps you ask us to take before a contract, performance of an agreement, legal obligations, a legitimate operational purpose where permitted, or consent where required. Required fields identify information needed to handle that request; without it we may be unable to respond or provide the requested service.
Submitting an enquiry does not by itself subscribe you to marketing. Service messages about your enquiry or booking are separate from promotional communications. Contact us if you wish to object to marketing or withdraw consent where consent is the basis for processing.
04
Storage and service providers
The current application stores operational records in the farm’s locally hosted database in South Africa. We use service providers to deliver email and SMS communications. Authorised staff and technical service providers may process information needed to deliver and support these services.
Some pages load Google Fonts or display Google Maps. When these resources load, your browser connects to Google and may disclose technical information such as your IP address. External services may process information outside South Africa under their own terms. This notice does not imply that every provider stores all information locally.
If you use an external payment or other service linked from the website, review that service’s privacy notice before providing information. Information may also be disclosed where required by law or to address a lawful request.
05
Browser storage and mobile use
Portal sign-in uses your browser’s local storage to retain an authentication token and session details. Signing out removes those stored portal values. Clearing browser data also removes local values but does not delete records held by the farm. Use a private device where possible and sign out after using a shared device.
The mobile app stores saved trip details on your device. Its handling of saved plans and requests is described in the mobile privacy notice. Other services embedded in or linked from the website may use their own cookies or storage.
06
Retention and protection
Retention depends on why a record was collected and any applicable booking, accounting, legal or dispute-related requirements. Closing a page, signing out or deleting a saved trip does not delete a submitted enquiry or booking record. This notice does not promise automatic deletion after a fixed number of days.
The website uses HTTPS, and application access controls limit portal operations. No system can guarantee absolute security. Please contact us if you suspect unauthorised access or a disclosure involving your information.
07
Your requests and complaints
You can ask about access to your personal information, correction of inaccurate information, deletion where applicable, or objection to processing. Where processing relies on consent, you may withdraw it; this does not undo processing that was lawful before withdrawal. Some records may need to be retained for a lawful reason.
Email hello@tirovalley.africa, describe your request and include a relevant reference if available. We may need to verify your identity before releasing or changing records. Do not send identity documents until we explain what is necessary and how to provide them.
You may also raise a concern with South Africa’s Information Regulator. Its POPIA forms cover objections and requests for correction or deletion.