PRIVACY POLICY
730 On Sher
Website: https://730onsher.co.za/
Effective date: 14 August 2026
Last updated: 14 August 2026
1. Introduction
730 On Sher respects the privacy of its guests, prospective guests, website visitors, suppliers and other persons with whom it interacts.
This Privacy Policy explains how 730 On Sher collects, uses, stores, shares and protects personal information and how data subjects may exercise their rights.
This Policy has been prepared principally in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), together with other applicable South African legislation, including the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”).
For purposes of POPIA, the responsible party is:
Responsible Party: 730 On Sher trading as 730 On Sher
Physical Address: 730 Sher Street, Garsfontein, Pretoria, 0042, Gauteng
Email: marsia@730onsher.co.za
Telephone: +27 82 396 2568
Information Officer: Marsia Kuypers
Information Officer Email: marsia@730onsher.co.za
730 On Sher determines the purposes and means by which personal information under its control is processed and is therefore the “responsible party” for that information where POPIA applies.
2. What is Personal Information?
“Personal information” has the meaning assigned to it under POPIA and generally includes information relating to an identifiable natural person and, where applicable, an identifiable juristic person.
Depending on how a person interacts with 730 On Sher, personal information may include:
-
full name and surname;
-
title;
-
identity or passport information where lawfully required;
-
nationality;
-
residential or postal address;
-
telephone or mobile number;
-
email address;
-
booking and reservation details;
-
arrival and departure dates;
-
number and identity of guests;
-
special requests associated with a stay;
-
billing information;
-
transaction and payment information;
-
correspondence with 730 On Sher;
-
complaints, enquiries and feedback;
-
vehicle or parking information where required;
-
emergency contact information where provided;
-
IP address;
-
browser and device information;
-
website usage information;
-
cookie identifiers;
-
security and access records where applicable; and
-
any other information voluntarily provided to 730 On Sher.
730 On Sher endeavours to collect only information that is adequate, relevant and not excessive for the purpose for which it is processed, as required by POPIA.
3. How Personal Information is Collected
Personal information may be collected:
3.1 Directly from you
This may occur when you:
-
make an accommodation enquiry;
-
submit a booking request;
-
make or confirm a reservation;
-
complete a form on the website;
-
contact 730 On Sher by telephone, email, WhatsApp or another communication channel;
-
check in or stay at the property;
-
make a payment;
-
request assistance;
-
submit a complaint or review;
-
subscribe to communications where such functionality is offered; or
-
otherwise voluntarily provide information.
3.2 From third parties
Where lawful and appropriate, information may also be received from:
-
a person making a booking on your behalf;
-
online travel agencies or booking platforms;
-
payment service providers;
-
travel agents;
-
corporate booking contacts;
-
accommodation partners; or
-
other service providers involved in a reservation.
Where POPIA requires notification concerning information obtained from another source, 730 On Sher will take reasonably practicable steps to provide the required information.
3.3 Automatically through the website
Technical information may be collected automatically when the website is used, including:
-
IP address;
-
browser type;
-
device type;
-
operating system;
-
referring website;
-
pages visited;
-
date and time of access;
-
cookie information; and
-
similar technical information.
4. Purposes for Which Personal Information is Processed
730 On Sher may process personal information for one or more of the following purposes:
-
responding to enquiries;
-
checking accommodation availability;
-
creating and administering reservations;
-
confirming bookings;
-
communicating before, during and after a stay;
-
identifying guests where reasonably or legally required;
-
processing or reconciling payments;
-
issuing invoices, receipts or other records;
-
providing accommodation and guest services;
-
arranging access to the property;
-
administering changes and cancellations;
-
processing refunds;
-
handling complaints and disputes;
-
protecting guests, staff, the property and property belonging to others;
-
investigating suspected fraud, theft, damage, misconduct or unlawful activity;
-
maintaining accounting, tax and business records;
-
complying with legal and regulatory obligations;
-
enforcing booking terms;
-
obtaining legal or professional advice;
-
maintaining and securing the website;
-
preventing misuse of systems;
-
analysing website functionality and performance;
-
improving services and guest experience;
-
communicating relevant information about an existing booking; and
-
conducting lawful marketing where permitted.
Personal information will be collected for a specific, explicitly defined and lawful purpose and will not be retained longer than necessary unless continued retention is permitted or required by law.
5. Lawful Grounds for Processing
730 On Sher does not rely on consent for every processing activity.
Depending on the circumstances, processing may occur because:
-
the data subject has consented;
-
processing is necessary to conclude or perform a booking or other contract;
-
processing is necessary to comply with a legal obligation;
-
processing protects a legitimate interest of the data subject;
-
processing is necessary for the legitimate interests of 730 On Sher or a third party, where permitted by POPIA; or
-
another lawful basis recognised by POPIA applies.
Where processing is based specifically on consent, consent may generally be withdrawn subject to applicable law and without affecting processing that was lawful before withdrawal.
6. Information Required for a Booking
Certain information is necessary to:
-
identify the person making the booking;
-
communicate regarding the booking;
-
assess availability;
-
process the reservation;
-
receive payment;
-
comply with applicable legal or security requirements; and
-
provide the accommodation service.
Where required information is not provided, 730 On Sher may be unable to process or fulfil the booking.
Providing information that is not necessary for these purposes is generally voluntary.
7. Payment Information
Where electronic or card payments are facilitated through a third-party payment service provider, payment information may be processed directly by that provider.
730 On Sher will only process or retain card or banking information to the extent reasonably necessary, lawful and technically appropriate.
730 On Sher will not intentionally request that guests send complete card security credentials through insecure communication channels.
Where ECTA applies to an electronic transaction, appropriate payment security procedures must be used having regard to accepted technological standards.
8. Cookies and Similar Technologies
The website may use cookies and similar technologies.
Cookies are small data files placed on a user’s device or browser.
Cookies may be used for purposes such as:
-
essential website functionality;
-
security;
-
remembering user preferences;
-
maintaining sessions;
-
website performance;
-
measuring website traffic;
-
understanding how visitors use the website; and
-
improving website functionality.
Where non-essential cookies or third-party analytics tools are used, 730 On Sher will seek to manage them in accordance with applicable privacy requirements.
Users can ordinarily restrict or remove cookies through their browser settings. Blocking essential cookies may affect the operation of certain website features.
9. Direct Marketing
730 On Sher may send marketing communications only where lawful.
Electronic direct marketing is subject to section 69 of POPIA and applicable guidance issued by the Information Regulator.
Where prior consent is required, marketing will not be sent unless the required consent has been obtained.
Where POPIA permits marketing to an existing customer without obtaining new consent, communications will be limited to circumstances permitted by law.
Every electronic marketing communication sent by or on behalf of 730 On Sher should provide a reasonable means of opting out.
A person may request at any time that direct marketing communications cease.
Operational booking communications, payment notices, booking confirmations, security notifications and other communications necessary to fulfil an existing reservation are not treated as optional marketing merely because they are sent electronically.
10. Sharing of Personal Information
730 On Sher does not sell personal information.
Personal information may, where necessary and lawful, be disclosed to:
-
employees or authorised representatives;
-
website hosting and technical service providers;
-
booking system providers;
-
online travel agencies;
-
payment processors;
-
accounting or bookkeeping providers;
-
banks and financial institutions;
-
IT and cybersecurity providers;
-
professional advisers;
-
insurers;
-
contractors or suppliers necessary to provide the booked service;
-
law-enforcement authorities;
-
regulators;
-
courts; and
-
other persons where disclosure is required or authorised by law.
Third parties processing information on behalf of 730 On Sher should only process such information in accordance with lawful instructions and appropriate confidentiality and security requirements.
POPIA specifically requires appropriate safeguards where an operator processes personal information for a responsible party.
11. International Transfers
Some technology, booking, cloud, website, analytics, email or payment service providers may process information outside South Africa.
Where personal information is transferred outside South Africa, 730 On Sher will take reasonable steps to ensure that the transfer is permitted under section 72 of POPIA, including, where applicable, by relying upon:
-
adequate legal protection in the recipient country;
-
a binding agreement providing an adequate level of protection;
-
data-subject consent;
-
necessity for performance of a contract; or
-
another basis permitted by POPIA.
12. Retention of Personal Information
Personal information will not be kept indefinitely merely because it was collected.
Retention periods may vary according to:
-
the purpose for which information was collected;
-
contractual requirements;
-
accounting and tax obligations;
-
statutory recordkeeping requirements;
-
potential legal claims;
-
fraud-prevention requirements;
-
dispute resolution;
-
legitimate business requirements; and
-
consent to longer retention where permitted.
When information is no longer required and there is no lawful reason to retain it, it will be destroyed, deleted or de-identified in an appropriate manner.
POPIA requires personal information not to be retained longer than necessary except where a recognised lawful basis for further retention exists.
13. Security of Personal Information
730 On Sher will take reasonable and appropriate technical and organisational measures designed to protect personal information under its control against:
-
loss;
-
damage;
-
unauthorised destruction;
-
unlawful access;
-
unauthorised disclosure;
-
unauthorised alteration; and
-
unlawful processing.
Measures may include, where appropriate:
-
access controls;
-
authentication controls;
-
password management;
-
website security;
-
system updates;
-
backups;
-
limiting information access;
-
staff confidentiality requirements;
-
appropriate agreements with operators; and
-
security monitoring.
No internet-based system can guarantee absolute security.
14. Security Compromises
Where there are reasonable grounds to believe that personal information under the control of 730 On Sher has been accessed or acquired by an unauthorised person, 730 On Sher will deal with the incident in accordance with section 22 of POPIA.
This may include notifying:
-
the Information Regulator; and
-
affected data subjects,
as soon as reasonably possible, subject to any lawful delay.
The Information Regulator has confirmed that POPIA does not establish a minimum risk threshold below which a responsible party may simply elect not to report a security compromise.
15. Your Rights
Subject to POPIA and any applicable exceptions, a data subject may have the right to:
-
know whether 730 On Sher holds personal information about them;
-
request access to personal information;
-
request correction of inaccurate information;
-
request deletion or destruction where legally appropriate;
-
object to processing in circumstances permitted by law;
-
object to direct marketing;
-
withdraw consent where processing depends on consent;
-
request information regarding the identity of third parties who have had access to personal information where applicable; and
-
lodge a complaint with the Information Regulator.
A request may be subject to identity verification and any procedure prescribed under POPIA or PAIA.
16. Correction and Deletion Requests
Requests for correction or deletion may be sent to:
Information Officer: Marsia Kuypers
Email: marsia@730onsher.co.za
730 On Sher may require sufficient information to verify the identity of the requester and identify the relevant records.
A request does not automatically require deletion where 730 On Sher is required or permitted by law to retain the relevant information.
17. Children’s Personal Information
730 On Sher does not intentionally use its website to collect children’s personal information independently from a competent person where such consent or authority is legally required.
Where information relating to a child is necessary in connection with an accommodation booking, it should ordinarily be provided by or with the authority of a parent, guardian or other competent person.
Such information will be processed only to the extent permitted by POPIA or another applicable law.
18. Third-Party Websites and Booking Platforms
The website may contain links to third-party websites or booking services.
730 On Sher does not control the privacy practices of independent third parties.
Where a guest makes a booking through an external platform, that platform may process personal information as an independent responsible party under its own privacy policy.
Guests should review the applicable third-party privacy terms before providing information.
19. Accuracy of Information
Guests and users are requested to provide information that is accurate, complete and current.
730 On Sher may take reasonably practicable steps to ensure that personal information is complete, accurate, not misleading and updated where necessary, having regard to the purpose for which it is processed.
20. Complaints
Privacy concerns should first be submitted to:
730 On Sher – Information Officer
Email: marsia@730onsher.co.za
Telephone: +27 82 396 2568
A data subject also has the right to approach the South African Information Regulator.
Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg
Telephone: 010 023 5200
Email: enquiries@inforegulator.org.za
The Regulator also provides online services for POPIA complaints and related matters.
21. Changes to this Policy
730 On Sher may amend this Privacy Policy from time to time to reflect:
-
legal developments;
-
changes to services;
-
changes in processing activities;
-
technology developments; or
-
operational requirements.
The current version will be published on the website together with the date on which it was last updated.
Material changes will not retrospectively legitimise processing that was unlawful when undertaken.
22. Contact
Questions concerning this Privacy Policy or the processing of personal information may be directed to:
730 On Sher
Legal entity: 730 On Sher
Physical address: 730 Sher Street, Garsfontein, Pretoria, 0042, Gauteng
Telephone: +27 82 396 2568
Email: marsia@730onsher.co.za
Information Officer: Marsia Kuypers
Information Officer email: marsia@730onsher.co.za