Glass Castle Luxury Properties Glass Castle Luxury Properties
Book a stay Book

Legal

Privacy and POPIA notice

This notice sets out how Glass Castle Luxury Properties handles your personal information under the Protection of Personal Information Act, 4 of 2013 (POPIA). It covers enquiries, bookings, and stays across all five properties at High Riding. Current version dated 14/07/2026.

1. Responsible party

AutoHive Marketing (Pty) Ltd, reg 2025/756077/07, trading as Glass Castle Luxury Properties, of High Riding Country Estate, Plot 50 High Riding Road, Sir Lowry's Pass, Somerset West, 7135.

The responsible party for all personal information processed through this site is AutoHive Marketing (Pty) Ltd. The Information Officer is Odendaal Oosthuizen. You can reach the Information Officer by email at Mr.bee@autohive.co.za.

2. What this notice covers

This notice applies to personal information you give us when you send an enquiry, request availability, or make a booking for any Glass Castle property. It applies alongside our terms of stay and any separate agreement you sign with us.

3. The personal information we process

When you enquire or book, we process the following categories of personal information:

  • Your name, email address and mobile number, used to reply to you and manage your booking.
  • Your requested check-in and check-out dates, number of guests, and the property you are interested in.
  • Any message you send us through the enquiry form or by WhatsApp, email or phone.
  • Booking and stay records held in Hostaway, our booking management partner, once a booking is confirmed.
  • Billing information, processed by our payment partner. We do not store full card details.

4. Lawful basis for processing

We process your information under Section 11 of POPIA on three lawful bases:

  • Contract. To respond to your enquiry and to arrange, confirm and honour your stay.
  • Consent. For any optional marketing, which we send only if you ask us to.
  • Legitimate interest. To keep a record of enquiries and bookings for security, accounting and dispute resolution.

5. How we store your information

Enquiries submitted through this site are stored in our database hosted on Supabase, in the AWS London eu-west-2 region. Information is encrypted at rest using AES-256 and in transit using TLS 1.3. Access is protected by row-level security policies. No enquiry record is publicly accessible. Confirmed bookings and calendars are managed in Hostaway under its own security controls.

6. Who can see your information

Your information is seen only by the BeeHive Keeper and a strictly limited team at Glass Castle Luxury Properties, for the operational purpose of answering your enquiry and completing your booking. We do not use your information for any other purpose. We never share or sell it.

7. Retention

We keep enquiry records for up to 24 months from your last contact, after which they are deleted. Booking and payment records are kept for the period required by South African tax and accounting law, which is five years. You may ask us to delete your enquiry record sooner, and we will action that request within 7 working days unless the law requires us to keep it.

8. Your rights as a data subject

Under POPIA Sections 23 to 25 you have the right to:

  • Access. Receive confirmation of what personal information we hold and a copy of it, free of charge, within 30 days.
  • Correction. Request that we correct any inaccurate personal information.
  • Deletion. Request that we delete your personal information. We will action this within 7 working days at no cost, unless the law requires us to keep it.
  • Object. Object to any processing, including direct marketing.
  • Complain. Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise any of these rights, email Mr.bee@autohive.co.za with the subject line “POPIA request” and your name. The Information Officer will respond within 7 working days.

9. Cross-border processing

Enquiry records are stored within the European Union (AWS London eu-west-2). This region is recognised as providing adequate protection under POPIA. Standard Contractual Clauses are in place between us and Supabase as our operator.

10. Security incident notification

If a security compromise affects your personal information, we will notify both you and the Information Regulator as soon as reasonably possible after we become aware of it, in line with Section 22 of POPIA.

11. Updates to this notice

We may update this notice from time to time. The current version is dated 14/07/2026. Material changes will be posted on this page at least 14 days before they take effect.

12. Contact

Information Officer: Odendaal Oosthuizen. Email Mr.bee@autohive.co.za or call +27 82 291 1854.

High Riding Country Estate, Plot 50 High Riding Road, Sir Lowry's Pass, Somerset West, 7135

Information Regulator (South Africa): inforegulator.org.za, JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001.