Your information
Privacy Policy
Whytebank Chase respects your privacy and handles personal information responsibly, transparently and in accordance with South Africa’s Protection of Personal Information Act, 2013 (“POPIA”).
Last updated: 29 July 2026
01
Who is responsible for your information
Whytebank Chase is the responsible party for personal information processed through this website and in connection with enquiries made through it.
Whytebank Chase
Richard Morgan
Mankazana Valley, Eastern Cape, South Africa
+27 73 023 3799
Contact Whytebank Chase
02
Information we collect
We collect information that you choose to provide when you make an enquiry. This may include:
- your name, email address, telephone or WhatsApp number and country of residence;
- preferred and alternative travel dates and the number of guests;
- riding experience, interests and selected activities; and
- any message or special requirements you include.
Our hosting environment may also record limited technical information, such as your IP address, browser type, device information, requested pages and access times, for security, diagnostics and reliable website operation.
To reduce form abuse, the enquiry form creates a one-way identifier derived from your IP address. It is used only to limit repeated submissions and expires after five minutes.
03
How and why we use your information
We use personal information only where there is a lawful reason to do so. Depending on the circumstances, we use it to:
- respond to your enquiry and discuss availability, travel preferences and possible arrangements;
- take steps at your request before entering into a booking or other agreement;
- operate, protect and improve the security and reliability of the website;
- maintain records required for administration, accounting, dispute resolution or legal compliance; and
- protect the legitimate interests, rights and safety of Whytebank Chase, our guests and others.
The enquiry form asks for your consent before submission. You may withdraw that consent, but this will not affect processing that was lawful before withdrawal and may prevent us from continuing with your enquiry.
We do not sell personal information and do not use enquiry details for unrelated automated decision-making.
04
Sharing and service providers
Enquiry details are not saved as form entries in the WordPress database. They are sent by email to the authorised Whytebank Chase recipient. Website hosting, email-delivery and IT service providers may process limited information on our behalf where necessary to provide and secure their services.
We may also disclose information where required by law, a court or competent authority, or where reasonably necessary to establish, exercise or defend legal rights.
Google Maps
The Contact page includes an embedded Google map. When that page loads, Google may receive technical data such as your IP address, device and browser information and may use cookies or similar technologies under its own terms and privacy policy. You can avoid loading the embedded map by not visiting the Contact page, or open the supplied location directly in your preferred mapping service.
Some service providers may process information outside South Africa. Where this occurs, we take reasonable steps to use providers and arrangements that offer an appropriate level of protection in accordance with applicable law.
06
Retention and security
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to manage a prospective or confirmed booking, and to meet applicable legal, accounting or dispute-resolution requirements. Enquiry emails and related correspondence are reviewed periodically and deleted or anonymised when they are no longer required. Hosting and security logs are retained according to the relevant provider’s operational and security schedules.
We use reasonable technical and organisational safeguards designed to protect information against loss, misuse, unauthorised access, alteration or disclosure. No internet transmission or storage method can be guaranteed to be completely secure.
07
Your rights
Subject to POPIA and other applicable law, you may ask us to:
- confirm whether we hold personal information about you and request access to it;
- correct or update inaccurate, incomplete or outdated information;
- delete information that we are no longer permitted or required to retain;
- object to certain processing or request that processing be restricted; and
- withdraw consent where processing is based on consent.
We may need to verify your identity before acting on a request. Some rights are subject to lawful exceptions, including information that must be retained for legal or contractual purposes.
Children’s information
This website is not directed at children. A parent or legal guardian should provide any information relating to a person under 18 as part of a family or group enquiry.
08
Contact and complaints
For a privacy request, question or complaint, contact Richard Morgan using the details above or through our Contact page. Please provide enough information for us to understand and respond to your request.
If you believe your personal information has been handled unlawfully and we have not resolved your concern, you may lodge a complaint with the Information Regulator of South Africa.
Changes to this policy
We may update this policy when our services, website technology or legal obligations change. The latest version will always be published on this page with its updated date.