Privacy Policy

Who we are and what this covers

Riva One (operated by RIVA ONE (PTY) LTD, 1 Stern Close, Camps Bay, Cape Town, 8005, South Africa) is the data controller responsible for the personal information collected through our website, booking process, and during your stay.

By using our website or making a booking, you acknowledge that your personal information will be handled in accordance with this policy.

Information we collect

• Contact details: name, email address, telephone number, postal address
• Booking information: arrival/departure dates, suite preferences, special requests
• Identity documentation: passport or ID recorded at check-in as required by South African law
• Payment details: processed securely, not stored beyond what is required by law
• Communication records and technical data (IP address, browser type, basic analytics)

When we collect it

• When you make or enquire about a reservation
• When you check in and present identity documentation
• When you correspond with us by any channel
• When you sign up for our newsletter
• Automatically, via cookies, when you visit our website

How we use it

• To fulfil your reservation
• To comply with legal obligations (South African law requires recording guest ID documents)
• To communicate with you
• To improve our service
• To send marketing communications, only with your explicit consent
• To prevent fraud

Who we share it with

We do not sell or trade your personal information. We may share it with payment processors, booking platform providers, service providers bound by data agreements, and legal authorities where required by law.

Cookies

• Strictly necessary cookies: required for the site to function
• Analytics cookies: help us understand site usage
• Marketing cookies: used only with your consent

Security

We take commercially reasonable precautions to protect your personal information, including access controls and encryption of payment data. No method of transmission over the internet is entirely secure.

Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Your rights

Under the Protection of Personal Information Act (POPIA), you have the right to access, correct, or request deletion of your personal information, object to marketing processing, withdraw consent, and lodge a complaint with the Information Regulator of South Africa.

Children

Our website is not directed at children under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.