GDPR Compliance

Last Updated: July 2026

Our Commitment to Data Protection

While summit-caribou operates primarily in South Africa, we recognize the importance of data protection principles established by the General Data Protection Regulation. We apply similar standards to all personal data we process, regardless of the data subject's location.

Lawful Basis for Processing

We process personal data based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to provide the accommodation selection services you have requested.
• Legitimate Interest: We process data to improve our services and maintain business operations, balanced against your rights and freedoms.
• Consent: For certain communications and optional services, we rely on explicit consent which you can withdraw at any time.

Data Subject Rights

Under data protection principles, you have the following rights:

• Right to Access: Request confirmation of what personal data we hold about you and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data when it is no longer necessary for the purposes collected.
• Right to Restrict Processing: Request limitation on how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

How to Exercise Your Rights

To exercise any of these rights, send a written request to [email protected]. We will respond within 30 days of receiving your request. We may need to verify your identity before processing certain requests.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Consultation records are typically retained for three years after the last service interaction.

International Data Transfers

Your personal data is processed and stored within South Africa. If we need to transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

Data Protection Officer

For questions specifically related to data protection and privacy, you can contact our data protection representative at [email protected].

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.