**Gecko Travel & Tours**
Effective date: 9 July 2026
Last updated: 9 July 2026
---
## 1. Introduction
Gecko Travel & Tours ("Gecko Travel & Tours", "we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what personal information we collect when you visit **geckotours.co.za** (the "Website"), make a booking, or contact us, how we use and protect that information, who we share it with, and the rights you have.
We process personal information in line with the **Protection of Personal Information Act, 2013 (POPIA)** of South Africa. Because we welcome travellers from around the world, this policy also reflects the principles of the **EU General Data Protection Regulation (GDPR)** and **UK GDPR** for visitors located in those regions.
By using our Website or providing us with your personal information, you acknowledge that you have read and understood this policy.
## 2. Who we are (Responsible Party)
For the purposes of POPIA, the Responsible Party is:
- **Business name:** Gecko Travel & Tours [insert full registered entity name if different]
- **Location:** Plettenberg Bay, Garden Route, South Africa
- **Email:** office@geckotours.co.za
- **Bookings:** bookings@geckotours.co.za
- **Telephone / WhatsApp:** +27 (0)82 325 5620 and +27 (0)82 797 5133
### Information Officer
Our Information Officer is responsible for ensuring we comply with POPIA and for handling any queries about this policy.
- **Information Officer:** [insert name]
- **Email:** office@geckotours.co.za
## 3. Scope of this policy
This policy applies to personal information we collect through the Website, our booking process, our contact channels (email, telephone, WhatsApp and social media), and any related communications. It does not apply to third-party websites or services we link to, which have their own privacy policies.
## 4. What personal information we collect
### 4.1 Information you give us
- **Identity and contact details:** your name, email address, telephone or mobile number, and country of residence.
- **Booking and travel details:** the tour, shuttle or transfer you book, travel dates, number of passengers, pick-up and drop-off points, dietary or accessibility requirements, and any preferences or special requests you share.
- **Communications:** the content of enquiries and messages you send us by web form, email, WhatsApp or social media.
- **Payment information:** payments are processed by our booking provider (Activitar) and their payment partners. We do not store your full card details on our own systems.
### 4.2 Information we collect automatically
When you visit the Website, we and our service providers may automatically collect:
- your IP address and approximate location;
- device and browser type, operating system and language settings;
- the pages you view, links you click, and the date, time and duration of your visit;
- the website or advert that referred you to us; and
- information collected through cookies and similar technologies (see our Cookie Policy).
### 4.3 Information from third parties
We may receive information from booking platforms, advertising and analytics providers (such as Google and Meta), and social media platforms where you interact with our pages or adverts.
## 5. How and why we use your personal information
We process your personal information for the following purposes, relying on the lawful bases shown:
| Purpose | Lawful basis (POPIA / GDPR) |
| --- | --- |
| To respond to your enquiries and provide quotes | Performance of a contract or steps taken at your request; legitimate interest |
| To process and manage your tour, shuttle or transfer bookings | Performance of a contract |
| To send booking confirmations, reminders and service updates | Performance of a contract |
| To take payment through our booking provider | Performance of a contract |
| To improve our Website, services and customer experience | Legitimate interest |
| To measure website traffic and understand how visitors use the site | Consent (analytics cookies); legitimate interest |
| To show and measure adverts, and to build audiences for advertising | Consent (advertising cookies) |
| To send marketing communications where you have opted in | Consent |
| To comply with legal, tax and regulatory obligations | Legal obligation |
| To protect our rights, prevent fraud and secure our systems | Legitimate interest |
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider we need to use it for a related purpose, or the law otherwise permits it.
## 6. Marketing and advertising
We run paid advertising campaigns and use analytics tools to reach travellers and measure how well our campaigns and Website perform. This means trusted third parties may set cookies or use similar technologies on our Website.
### 6.1 Google services
We use **Google Analytics** to understand how visitors use the Website, and **Google Ads** (including conversion tracking and remarketing) to measure our advertising and to show relevant adverts to people who have visited our Website across Google Search, YouTube, and partner sites on the Google Display Network. Google may use cookies and identifiers to do this.
- You can control the adverts Google shows you at **Google Ads Settings** (myadcenter.google.com).
- You can opt out of Google Analytics using the browser add-on at **tools.google.com/dlpage/gaoptout**.
### 6.2 Meta (Facebook and Instagram)
We use the **Meta Pixel** and related tools to measure the performance of our Facebook and Instagram advertising, to build Custom Audiences and Lookalike Audiences, and to show relevant adverts to people who have visited our Website or engaged with our pages.
- You can manage your advert preferences in the settings of your Facebook or Instagram account.
### 6.3 Managing advertising cookies
You can opt out of interest-based advertising from many providers at once through:
- **Your Online Choices:** youronlinechoices.eu (Europe / UK)
- **Network Advertising Initiative:** optout.networkadvertising.org
- **Digital Advertising Alliance:** optout.aboutads.info
You can also refuse or delete advertising and analytics cookies through the cookie banner on our Website or your browser settings. See our Cookie Policy for full details.
### 6.4 Direct marketing
We will only send you marketing emails or messages where you have agreed to receive them, or where the law otherwise allows it. Every marketing message includes a way to unsubscribe, and you can withdraw your consent at any time by contacting us at office@geckotours.co.za.
## 7. Cookies and similar technologies
Our Website uses cookies and similar technologies to make the site work, to remember your preferences, to analyse traffic, and to support advertising. You can accept or decline non-essential cookies through the cookie banner when you first visit, and change your choice at any time. Please read our separate **Cookie Policy** for detailed information about the cookies we use and how to control them.
## 8. Who we share your information with
We do not sell your personal information. We share it only where necessary, with the following categories of recipients (referred to as Operators under POPIA):
- **Booking and payment provider:** Activitar and its payment partners, to manage bookings and process payments.
- **Website hosting and technical providers:** to host and maintain the Website.
- **Analytics and advertising providers:** Google and Meta, as described in section 6.
- **Communication providers:** email and messaging services (including WhatsApp) used to correspond with you.
- **Accredited guides and suppliers:** where necessary to deliver a tour, shuttle or transfer you have booked (for example, accommodation providers on multi-day tours).
- **Professional advisers and authorities:** where required to comply with the law, respond to lawful requests, or protect our rights.
Where we appoint an Operator to process personal information on our behalf, we require them to do so securely and only on our instructions.
## 9. Cross-border transfers
Some of our service providers, including Google, Meta and Activitar's infrastructure partners, may store or process personal information outside South Africa, including in the United States and the European Union. Where we transfer personal information across borders, we take reasonable steps to ensure it is protected in a manner consistent with POPIA (section 72) and applicable data protection law, for example by relying on providers who are subject to laws or agreements that offer an adequate level of protection.
## 10. How long we keep your information
We keep personal information only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, tax and reporting obligations. Booking and financial records are generally retained for the period required by South African law. Enquiries that do not lead to a booking are kept for a reasonable period and then deleted. Marketing information is kept until you unsubscribe or withdraw consent.
## 11. How we protect your information
We use appropriate technical and organisational measures to safeguard your personal information against loss, unauthorised access, alteration or disclosure. These include secure hosting, access controls and the use of reputable service providers. No method of transmission over the internet is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.
## 12. Your rights
Subject to applicable law, you have the right to:
- **access** the personal information we hold about you;
- **correct or update** information that is inaccurate or incomplete;
- **request deletion** of your personal information where there is no legal reason for us to keep it;
- **object** to processing based on legitimate interests or direct marketing;
- **withdraw consent** at any time where we rely on consent (this does not affect processing carried out before withdrawal);
- **restrict** or object to certain processing; and
- **lodge a complaint** with a supervisory authority.
To exercise any of these rights, please contact us at office@geckotours.co.za. We may need to verify your identity before acting on your request, and we will respond within the timeframes required by law.
## 13. Children's privacy
Our Website and services are intended for adults. We do not knowingly collect personal information from children without the consent of a parent or guardian. Where a booking includes minors, we rely on the responsible adult making the booking to provide any necessary details and consent.
## 14. Third-party links
Our Website may contain links to third-party websites, such as Activitar, TripAdvisor, and our social media pages. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.
## 15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be available on this page, with the effective date shown at the top. Where changes are significant, we will take reasonable steps to bring them to your attention.
## 16. Complaints
If you have any concern about how we handle your personal information, please contact our Information Officer first at office@geckotours.co.za so we can try to resolve it.
You also have the right to lodge a complaint with the **Information Regulator (South Africa):**
- **Website:** inforegulator.org.za
- **POPIA complaints email:** POPIAComplaints@inforegulator.org.za
- **General enquiries:** enquiries@inforegulator.org.za
- **Physical address:** JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
- **Postal address:** P.O. Box 31533, Braamfontein, Johannesburg, 2017
Visitors in the EU or UK may also complain to their local data protection authority.
## 17. Contact us
If you have any questions about this Privacy Policy or your personal information, please contact us:
- **Email:** office@geckotours.co.za
- **Bookings:** bookings@geckotours.co.za
- **Telephone / WhatsApp:** +27 (0)82 325 5620 or +27 (0)82 797 5133
