Privacy Policy

Privacy Policy – C The World

At C The World (“we”, “us”, or “our”), your privacy is extremely important to us.
This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you visit ctheworld.co.za, make a booking, submit an enquiry, subscribe to our newsletters, or interact with us in any way.

We are committed to complying with the Protection of Personal Information Act (POPIA) of South Africa, as well as general best-practice international privacy standards.

---

1. Who We Are

C The World Travel and Tours
Website: https://ctheworld.co.za
Email: info@ctheworld.co.za

We act as the Responsible Party under POPIA for processing your personal information.

---

2. What Personal Information We Collect

We collect information in the following ways:

2.1 Information you provide to us

• Full name & contact details

• Email address / phone number

• Passport details (for travel bookings)

• Billing and payment information

• Emergency contact details

• Dietary, mobility or travel preferences

• Documents submitted for visa support

• Testimonials & reviews

2.2 Information collected automatically

When you browse our site, we may collect:

• IP address

• Browser type & device info

• Pages visited

• Cookies and tracking data

• Session analytics (via Google Analytics or similar)

2.3 Comments

When visitors leave comments, we collect:

• The data entered in the comment form

• The visitor’s IP address

• Browser user agent (for spam detection)

If you use Gravatar, an anonymised hash of your email may be sent to the Gravatar service.
Gravatar’s privacy notice: https://automattic.com/privacy/

2.4 Media Uploads

Avoid uploading images containing EXIF GPS location data. Visitors may download and extract such data.

---

3. How We Use Your Information

We use your personal data to:

• Process travel bookings and reservations

• Issue confirmations, invoices, itineraries, and communication

• Assist with visa documentation

• Respond to enquiries and provide customer support

• Send important updates about tours

• Improve website functionality and user experience

• Send newsletters or promotions (with your consent)

• Comply with legal and safety obligations

Under POPIA, we only process information that is necessary, relevant, and lawful.

---

4. Legal Grounds for Processing (POPIA)

We process your information based on:

• Your consent (e.g., newsletter sign-ups)

• Contractual necessity (e.g., booking a tour)

• Legitimate interest (e.g., improving our services)

• Legal obligations (e.g., assisting with border requirements)

---

5. Cookies

Our site uses cookies to:

• Remember your login details

• Improve loading speed and performance

• Enable analytics

• Personalise your browsing experience

WordPress cookie usage includes:

• Comment convenience cookies (1 year)

• Login cookies (2 days – 2 weeks depending on “Remember Me”)

• Session cookies

• Editor cookies when publishing articles

You may disable cookies in your browser, but certain features may not function correctly.

---

6. Embedded Content

Articles or pages may include embedded content (videos, maps, posts).
These third-party sites may:

• Collect data

• Use cookies

• Track your interaction

• Link this activity to your account on their platform

---

7. Who We Share Your Data With

We only share your data with:

• Trusted travel partners (hotels, airlines, ground operators)

• Payment processors

• Visa support services

• Email service providers (e.g., mailing tools)

• Spam detection tools (e.g., Akismet)

• Website hosting providers

We never sell your personal information.

If you request a password reset, your IP address will appear in the reset email.

---

8. How Long We Retain Your Data

• Comments and their metadata: indefinitely

• Customer booking records: as required by law (typically 5 years)

• User accounts: stored until the user deletes their data

• Analytics data: varies according to provider settings

• Email enquiries: for administrative and customer support purposes

---

9. Your Rights Under POPIA

You have the right to:

• Access your personal information

• Request correction or deletion

• Object to processing

• Withdraw consent (where applicable)

• Request a record of your stored data

• Lodge a complaint with the Information Regulator

South African Information Regulator:
https://inforegulator.org.za
Email: complaints.IR@justice.gov.za

To exercise your rights, contact us at: [insert email]

---

10. How We Protect Your Information

We use:

• SSL encryption

• Secure hosting providers

• Strict access controls

• Data minimisation principles

• Regular security updates

• Password protection and two-factor authentication (where applicable)

---

11. Transfers of Information Outside South Africa

Some service providers (such as email or cloud storage) may store data outside SA.
These transfers comply with POPIA requirements, ensuring adequate protection.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.