Kensington Place Private Collection
Privacy Policy
Kensington Place Private Collection ("Kensington Place", "we", "us") operates Kensington Place Private Hotel at 38 Kensington Crescent, Higgovale, Cape Town, and Kensington Place Villa in Bantry Bay, Cape Town. We respect your privacy and process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and, where it applies to guests from the European Economic Area or United Kingdom, the GDPR and UK GDPR.
This policy explains what personal information we collect through this website and in the course of your stay, why we collect it, who we share it with and the rights you have.
1. Who is responsible
The responsible party is Kensington Place Private Collection. Our Information Officer can be contacted at privacy@kensingtonplace.co.za or on +27 (0)21 424 4744, or by post at 38 Kensington Crescent, Higgovale, Cape Town, 8001.
2. What we collect
- Enquiries and reservations: your name, email address, telephone number, arrival and departure dates, number of guests, the occasion of your stay and any message you send us.
- Bookings made through our booking engine: the engine is operated by SiteMinder (direct-book.com). It collects the details needed to confirm and pay for your room, including payment card data, under its own privacy policy. We receive the reservation details but do not store your full card number.
- During your stay: identification details required by South African law for hotel guests, dietary requirements and preferences you share with us, and CCTV images in public areas of the hotel for security.
- Website usage: if analytics are enabled, anonymised information about how the site is used (pages viewed, approximate location, device type). IP addresses are truncated before storage.
3. Why we use it
- To respond to your enquiry and to make, change or cancel a reservation (performance of a contract, or steps taken at your request before a contract).
- To host you safely and comply with the law, including the obligation to keep a guest register.
- To send you a confirmation and, where you have agreed, occasional news from Kensington Place. You may opt out at any time.
- To improve the website and understand which pages lead to bookings (our legitimate interest in running the business).
4. Who we share it with
We share personal information only where necessary: with SiteMinder for bookings, with our email and web-hosting providers, with payment processors, with professional advisers, and with authorities where the law requires it. We do not sell personal information. Some providers store data outside South Africa; where they do, we rely on their contractual safeguards and, for EEA and UK data, appropriate transfer mechanisms.
5. Cookies and analytics
This website sets no advertising cookies. Our booking engine, which opens in a separate window, uses its own cookies and asks for your consent. If we enable Google Analytics 4 on this site, it is configured with IP anonymisation; you can block it with a browser extension or by declining analytics cookies where offered.
6. How long we keep it
Enquiry details are kept for up to 24 months so we can assist with follow-up requests. Reservation and payment records are kept for five years to meet South African tax and accounting rules. CCTV footage is normally overwritten within 30 days.
7. Your rights
Under POPIA you may ask us what personal information we hold about you, ask us to correct or delete it, object to processing, or withdraw consent you have given. Write to our Information Officer at the address above; we will respond within a reasonable time and in any case within 30 days. If you are not satisfied, you may complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@justice.gov.za.
EEA and UK guests have equivalent rights under the GDPR, including the right to lodge a complaint with their local supervisory authority.
8. Security
We use HTTPS across the site, restrict access to personal information to staff who need it, and keep enquiry records on access-controlled systems. No method of transmission over the internet is completely secure; if you prefer, you are welcome to call us instead.
9. Children
Our website is not directed at children and we do not knowingly collect personal information from anyone under 18 online. Children staying with us are registered by their parent or guardian.
10. Changes
We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be highlighted on this page.