Privacy Policy

Menucha is a private guest retreat in Somerset West, Western Cape, South Africa. For privacy matters, contact [email protected].

We process personal information in line with South Africa’s Protection of Personal Information Act (POPIA) and related requirements.

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number, and messages you send in an enquiry or booking conversation.
• Stay details — preferred or confirmed dates, number of guests, and any special requests you share.
• Identity details — nationality, ID or passport number, and a photo of your ID or passport, collected when you book so we know who is staying. The photo is stored privately and is only accessible to the host.
• Check-in acknowledgement — confirmation that you have read the house rules and Guest Agreement (via the Guest Portal).
• Payment information — processed by our payment provider (see below). We do not store full card numbers on Menucha’s own servers.
• Technical data — basic website analytics or logs (such as IP address and browser type) if enabled for security or performance.

We use personal information to:

• Respond to enquiries and confirm availability.
• Manage bookings, payments, deposits, and refunds.
• Share arrival instructions, house rules, and Wi‑Fi access after acknowledgement.
• Communicate about your stay and handle guest support.
• Meet legal, accounting, and tax obligations, and protect the property against fraud or misuse.

We do not sell guest personal information. We do not use your data for unrelated third-party marketing.

Card and other online payments may be processed by Paystack (or another payment service named in your confirmation). Paystack acts as a payment processor and handles card data according to its own security and privacy practices. We receive payment status, reference details, and amounts needed to reconcile your booking — not your full card number.

We may share limited information with service providers who help us operate (for example email, hosting, or payment processing), only as needed for those services. We may also disclose information if required by law or to protect rights, safety, or the property.

We keep enquiry and booking records for as long as needed to manage your stay, resolve disputes, and meet legal or accounting requirements — typically for a reasonable period after check-out, and longer where the law requires. Check-in acknowledgements may be retained as evidence that house rules were accepted for that stay.

Your ID or passport photo and ID number are stored privately and only the host can see them. If you do not complete payment, they are deleted within about a day. For confirmed stays, they are kept for one year (365 days) after check-out so we can deal with any damage claim or dispute, and are then deleted automatically. If there is a problem with your payment, we keep them for up to 30 days while we resolve it with you.

We take reasonable technical and organisational steps to protect personal information. No online transmission is completely secure; please use strong passwords where relevant and avoid sharing access codes publicly.

Under POPIA, you may request access to the personal information we hold about you, ask us to correct inaccurate data, or object to certain processing where the law allows. To exercise these rights, email [email protected]. We may need to verify your identity before responding.

Bookings are made by adults. Guests under 18 may stay only with a responsible adult who is a registered guest. We do not knowingly collect personal information from children for marketing purposes.

See also our Terms & Conditions and Cancellation Policy.

We may update this privacy policy from time to time. The last-updated date at the top of this page reflects the current version.