Skip to content
Check availability

Bookings: 082 573 0388
Hostess: 082 452 0950

Legal

Privacy Policy

Last updated 7 September 2026.

Who we are

Ibis River Retreat ("we", "us") is the responsible party for the personal information collected through this website under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA). Where the EU General Data Protection Regulation (GDPR) applies to you, we are the data controller.

16 Vlakfontein, R512/Malibongwe, Gauteng, 0240, South Africa.
Information Officer: Ilse Klemm — info@ibisriverretreat.co.za / 082 452 0950

What we collect and why

When you send us an enquiry or booking request through a form on this site we collect:

  • your name, email address and phone number;
  • your message and, where given, your preferred dates, cottage or spa treatment;
  • your IP address and browser user-agent, recorded automatically for abuse prevention.

We use this to answer you, make and manage your booking, and protect the site from spam. We rely on your consent (you choose to submit the form) and on the steps needed to conclude a booking with you. Without this information we cannot respond to your enquiry.

Your enquiry is emailed to us through Resend and an alert is sent to our phones through BulkSMS. A copy is stored in a Cloudflare D1 database for up to 24 months, after which it is deleted. Cloudflare's servers may be located outside South Africa; Cloudflare is bound by contractual data-protection terms that provide protection comparable to POPIA, as section 72 of POPIA requires.

Bookings completed on NightsBridge are subject to NightsBridge's privacy policy.

Bot protection — Cloudflare Turnstile

Our forms are protected by Cloudflare Turnstile, which runs in the background without a visible challenge. To tell people apart from bots, Turnstile processes your IP address, TLS fingerprint, browser User-Agent header and our Turnstile site key. Cloudflare states that it cannot directly identify individuals from these signals and uses them only to detect and block bots. See the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

Cookies and third-party content

We set no advertising or tracking cookies of our own. Some pages load content from third parties, which receive your IP address and may set their own cookies:

Sharing

We never sell your personal information. It is shared only with the service providers named above, who process it on our behalf, and where the law requires us to disclose it.

Your rights

You may ask us to confirm what personal information we hold about you, to correct or delete it, to stop processing it, or to withdraw your consent. Email info@ibisriverretreat.co.za and we will respond within a reasonable time. If you are unhappy with our response you may complain to the Information Regulator of South Africa (complaints.IR@inforegulator.org.za) or, if you are in the EU or UK, to your local supervisory authority.

Security

This site is served over HTTPS and protected by Cloudflare. Access to stored enquiries is limited to the owners of Ibis River Retreat.

Changes

We may update this policy from time to time. The latest version is always published on this page with its date.