Privacy Policy

We collect the details you give us when you enquire about a safari, and we pass those details to the tour operator you enquired with. We do not sell your information to anyone, and we do not send you marketing unless you ask us to.

The rest of this page sets out the detail, including your rights under South Africa's Protection of Personal Information Act.

Safari Trip Finder is operated by Guudwork Marketplace (Pty) Ltd (registration number 2026/227309/07), trading as Safari Trip Finder, a company registered in South Africa and the responsible party for the personal information described here.

You can reach us at hello@safaritripfinder.com.. Our Information Officer can be contacted at the same address.

If you enquire about a safari

• Your name
• Your email address
• Your phone number, if you provide one
• The country you are travelling from, if you provide it
• Your travel dates, group size, and the message you write
• Which tour and operator you enquired about

If you list tours as an operator

• Your name and email address
• Your company name, contact details, website and location
• The tour content you upload, including photographs
• A record of credits purchased and used

Automatically

• Basic usage information such as which pages were viewed
• A cookie storing your preferred display currency
• A session cookie if you sign in as an operator

We do not collect payment card details. No card payments are processed on this platform.

• To pass your enquiry to the operator. This is the whole purpose of the platform. Without your contact details the operator cannot reply to you.
• To confirm you are a real person. We email you a short code before your enquiry is sent. This protects operators from fake enquiries and protects you from having your address misused.
• To run operator accounts. Sign-in, credit balances and enquiry records.
• To improve the platform. Understanding which tours and destinations people look at.

The operator you enquired with. When you submit an enquiry and confirm your email, your name, email address, phone number and message are sent to that operator so they can reply. This is the point of the enquiry, and by submitting it you are asking us to do this.

We share your details with that operator only. Not with other operators, and not with anyone who has not received your enquiry.

Service providers. We use third parties to run the platform:

• Supabase, for our database and authentication
• Resend, for sending email
• Vercel, for hosting
• Cloudflare, for our domain and email routing

These providers process data on our instruction. Some are located outside South Africa, which means your information may be transferred abroad. We only use providers who apply appropriate safeguards.

We never sell your personal information.

Operators pay us to receive enquiries. To be completely clear about what that means: they are paying for access to an enquiry that you chose to send them. We are not selling your details on an open market, and no operator can obtain your information unless you enquired with them specifically.

• Enquiries: kept for three years, so operators have a record of past clients and we can resolve any dispute.
• Unconfirmed enquiries: deleted after 48 hours if you never confirm your email.
• Verification codes: expire after 10 minutes and are stored in hashed form, never as plain text.
• Operator accounts: kept while the account is open, and for five years afterwards where financial records require it.

Access to personal information is restricted at the database level, not only in the interface. An operator can only see enquiries sent to them, and contact details are withheld until the enquiry has been delivered to them.

• All traffic is encrypted in transit
• Passwords are hashed and we never see them
• Verification codes are stored hashed
• Access controls are enforced by the database, not the application
• Administrative actions are logged

No system is completely secure. If a breach occurs that is likely to harm you, we will notify you and the Information Regulator as POPIA requires.

Under POPIA you may:

• Ask what personal information we hold about you
• Ask us to correct anything that is wrong
• Ask us to delete your information, where we are not required to keep it
• Object to us processing your information
• Complain to the Information Regulator

To exercise any of these, email hello@safaritripfinder.com. We will respond within 30 days.

One limitation worth stating plainly: once your enquiry has been sent to an operator, they hold a copy of your details independently. We can delete our record, but you would need to contact the operator directly about theirs.

We use very few:

• A cookie remembering whether you view prices in rand or dollars
• A session cookie if you sign in as an operator

We do not use advertising cookies or third-party tracking pixels.

This platform is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has given us their information, contact us and we will remove it.

If we change this policy we will update the date at the top. If the change is significant and affects how we use information we already hold, we will email operators directly.

If you are unhappy with how we have handled your information, you may complain to South Africa's Information Regulator. Their contact details are published on the Regulator's website.