Privacy policy

Draft pending review. This policy describes our actual data practices, but the operator must confirm the bracketed company details and have the wording checked before launch.

The Hot Tub Collection ("we", "us") is a curated directory of hot-tub holiday stays in South Africa. We are a discovery and referral service: we do not take bookings or payments. This policy explains how we handle your personal information, in line with the Protection of Personal Information Act (POPIA).

Who we are

Responsible party: [registered entity name and registration number]. Address: [physical address]. Information Officer: [name and email]. You can reach us about privacy at [privacy contact email].

What we collect

• Enquiry details you submit on a stay: your name, email address, phone number, dates and message, plus your consent to be contacted.
• On-device only (never sent to us): your saved stays and recently-viewed list, and your cookie choice. See our cookie policy.
• Aggregate usage, only if you accept optional analytics. This is not used to identify you.

How we use it

We use enquiry details for one purpose: to pass your question to the host of the stay so they can reply to you directly. We do not sell your information or use it for advertising. When you choose to book, you continue on the host's NightsBridge page; their own terms and privacy practices apply there.

Who we share it with

The host of the stay you enquire about, and our service providers acting on our instructions: Supabase (database and storage), Resend (email delivery), Vercel (hosting), Mapbox (maps, only if you accept) and Google Analytics (aggregate usage, only if you accept). We require them to protect your information.

Keeping and deleting it

We keep enquiries only as long as needed to handle them and for a reasonable period after, then delete them. You may ask us to access, correct or delete your information at any time using the contact above.

Your rights

Under POPIA you can object to processing, ask for a copy of your information, ask us to correct or delete it, and complain to the Information Regulator of South Africa.