Privacy notice.

When you submit a guest-house enquiry, we collect the information you provide, including your name, email address, phone number, preferred check-in and check-out dates, number of guests and any additional information included in your message.

Please do not submit identity numbers, passport details, financial information, medical information or other sensitive information through the enquiry form.

We also temporarily process technical information needed to protect the form, including the requester's IP address for rate limiting and security-related information processed through Cloudflare Turnstile.

We use personal information to:

• Receive and respond to guest-house enquiries.
• Check requested dates and communicate about possible accommodation.
• Send an acknowledgement that the enquiry was received.
• Prevent spam, automated abuse and excessive form submissions.
• Maintain records where reasonably necessary for operational, accounting, legal or security purposes.

Submitting an enquiry does not create or confirm a reservation.

Enquiry details are sent to Zemara's business inbox using Resend. Resend also sends an acknowledgement to the email address supplied by the visitor.

The website does not currently save guest-house enquiry submissions as Sanity documents. Sanity is used to manage public website content such as rooms, menu items and business information.

We use service providers to operate and protect this website, including:

• Vercel for website hosting and server request processing.
• Resend for delivering enquiry and acknowledgement emails.
• Cloudflare Turnstile for detecting automated and abusive submissions.
• Sanity for managing public website content.

These providers may process information using infrastructure located outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use providers with appropriate privacy and security protections.

General or unsuccessful guest-house enquiries are normally retained for no longer than 12 months after the enquiry has been resolved.

Where an enquiry leads to an actual stay, relevant records may be retained for longer where necessary for reservation, accounting, tax, contractual or other legal requirements.

Security and rate-limiting information is kept only for as long as reasonably necessary for those security purposes.

We do not sell personal information. We share it only with personnel and service providers who need it to respond to the enquiry, operate the website, deliver emails, provide security or comply with applicable law.

We use reasonable technical and organisational safeguards to protect personal information. These include server-side validation, spam protection, rate limiting, restricted environment variables and encrypted HTTPS connections in production.

No internet transmission or storage system can be guaranteed to be completely secure.

Subject to POPIA and any applicable legal limitations, you may ask Zemara to:

• Confirm whether we hold personal information about you.
• Provide access to your personal information.
• Correct inaccurate, incomplete or outdated information.
• Delete information that we are no longer authorised or required to retain.
• Consider an objection to particular processing.

To make a request, email bookings@zemara.net. We may need to verify your identity before releasing or changing personal information.

Please contact Zemara first so that we can try to resolve your concern.

You may also complain to South Africa's Information Regulator if you believe your personal information has been processed unlawfully.

Visit the Information Regulator contact page or consult its official POPIA complaint forms.

Links to services such as WhatsApp, Google Maps and Uber Eats lead to third-party websites or applications. Their own privacy notices apply after you leave the Zemara website.

We may update this notice when our website, service providers or information-handling practices change. The latest version and update date will appear on this page.