Sunset Waves logo

Privacy Policy

Last updated: 28 September 2026

Sunset Waves ("we", "us") offers two self-catering units, Sunset Dunes and Sunset Sands, at 6 Bosduif Avenue, Cape Town, South Africa. This policy explains what personal information we collect through this website and when you contact or stay with us, why we collect it, and your rights. We follow South Africa's Protection of Personal Information Act (POPIA). For guests in the European Union or United Kingdom, we also respect your rights under the GDPR.

Who is responsible for your information

Sunset Waves is the responsible party for your personal information. You can reach us at glendameifels@gmail.com or +27 78 049 6254 with any question about this policy or your information.

What we collect

When you send an enquiry through the website: your name, email address, phone number (if you give it), the dates you're interested in, the number of guests and your message.

When you contact us by email, phone or WhatsApp: the details you choose to share with us.

When you book and stay with us: the details we need to manage your booking and your stay, such as your name, contact details, dates, number of guests and payment records.

When you browse the website: basic technical information, such as the pages you visit, the type of device and browser you use, and your approximate location (country) based on your internet address. We do not collect your exact location.

How we use it

  • To reply to your enquiry and give you prices and availability.
  • To take, manage and confirm your booking, and to look after you during your stay.
  • To keep records we are required to keep, for example for tax and accounting.
  • To show prices in the right currency. Visitors outside South Africa see prices in euro.
  • To understand how the website is used and keep it working well and securely.

We only use your information for these purposes. We do not sell it, and we do not send you marketing messages unless you ask us to.

Cookies and similar technologies

The website uses a small number of cookies and similar browser storage:

  • Necessary: remembering that you've seen our cookie notice, your light or dark display choice, and your country so we can show the right currency.
  • Analytics: Google Analytics, loaded through Google Tag Manager, sets cookies to help us understand how visitors use the site, such as which pages are popular. These cookies are only set after you press OK on our cookie notice. Vercel Web Analytics and Speed Insights measure visits and page speed without cookies.
  • Embedded content: the map (Google Maps) and video (Vimeo) on our pages come from those companies, which may set their own cookies when you view them.

You can block or delete cookies in your browser settings. The website will still work, although some embedded content may not.

Who we share it with

We share your information only with service providers that help us run the website and our business, and only as much as they need:

  • Vercel (website hosting and analytics)
  • Prisma (database hosting for enquiries)
  • Resend (sends enquiry notifications to our inbox)
  • Google (email, Tag Manager, Analytics and Maps)
  • Vimeo (video)

Some of these providers store information outside South Africa, for example in the United States or European Union. We use providers that protect personal information to a standard comparable to POPIA. We may also share information where the law requires it.

How long we keep it

We keep enquiries for up to 24 months so we can follow up and help with future stays, and then delete them. If you book with us, we keep booking and payment records for as long as the law requires, usually five years for tax purposes.

Keeping it safe

We take reasonable steps to protect your information against loss, misuse and unauthorised access. Access to enquiries is limited to us, behind a password-protected admin area, and the website uses an encrypted (HTTPS) connection.

Your rights

You have the right to:

  • ask what personal information we hold about you and get a copy of it;
  • ask us to correct or delete it;
  • object to how we use it, or withdraw your consent at any time;
  • complain to the regulator if you're unhappy with how we handle it.

To use any of these rights, email us at glendameifels@gmail.com. We will respond within a reasonable time, and within 30 days where possible.

In South Africa you can complain to the Information Regulator. Guests in the European Union or United Kingdom can also complain to their local data protection authority.

Children

Our website is not aimed at children, and we do not knowingly collect information from anyone under 18 without a parent's or guardian's consent.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.