Menu
Policies

Privacy Policy

Cape Outdoors Tours (Pty) Ltd trading as Cape Town Tandem Paragliding · Last updated: 30April 2026

This Privacy Policy explains how Cape Outdoors Tours (Pty) Ltd, trading as Cape Town Tandem Paragliding (“CTTP”, “we”, “us”, “our”), collects, uses, shares, and protects your personal information. We are committed to handling your personal information lawfully and in accordance with the Protection of Personal Information Act, 2013 (“POPIA”) and other applicable South African law.

This Policy should be read together with our Terms & Conditions and Refund & Cancellation Policy.

1. Who We Are

The Responsible Party (data controller) for the personal information described in this Policy is:

2. What Personal Information We Collect

We collect personal information directly from you, automatically when you interact with our website, and occasionally from limited third-party sources. The categories below describe what we collect at each touchpoint.

2.1 Booking and Contact Information

Collected when you book a flight, request information, or send us an enquiry:

  • Full name
  • Email address
  • Phone and/or WhatsApp number
  • Flight date, time, and group details
  • Gift voucher details, where applicable
  • Any message or enquiry content you send to us

2.2 Indemnity and Identity Information

Collected on the day of the flight via our indemnity form:

  • Date of birth
  • Identity number or passport number
  • Signature
  • For minors: name, contact details, and signature of a parent or legal guardian

2.3 Health, Safety, and Special Personal Information

Information relating to your health and physical condition is treated as special personal information under POPIA and is subject to additional protections.

We collect:

  • Body weight (required for safe tandem flight planning and pilot pairing)
  • Disclosed medical conditions, recent injuries or surgeries, pregnancy, and any disability that may affect your ability to participate safely
  • Emergency contact details

By signing the indemnity and disclosing this information, you provide your express consent to its processing for the purposes set out in this Policy. You may withdraw consent at any time, but doing so means we may be unable to allow you to participate in the activity.

This information is shared only with the pilot conducting your flight and, where strictly necessary, with our insurer, emergency services, or aviation regulators following an incident.

2.4 Payment Information

Payments are processed by our third-party payment providers (currently Paystack, PayGenius, and Yoco). Card and account details are entered directly with these providers and are not stored by CTTP. We retain transaction records (amount, date, payment method, reference number, masked card descriptor) for accounting, refund, and reconciliation purposes.

2.5 Photos and Videos Captured During Your Flight

Tandem paragliding flights are typically photographed and filmed using cameras mounted on the wing or pilot. The following applies to that media:

  • Image of an identifiable person is personal information. We treat your in-flight media as personal information and process it in line with this Policy.
  • How it is collected and delivered. Where you have purchased media as an optional add-on, the captured files are delivered to you after the flight (typically by direct transfer to your phone or via a cloud share link).
  • Direct transaction with the pilot. As set out in clause 10 of our Terms & Conditions, the supply of media is a direct transaction between you and the pilot. The original files may be held on the pilot’s personal device or storage media before delivery.
  • Retention. Original media files captured during your flight are retained for a limited period sufficient to allow delivery and re-supply if needed, and are then deleted. [Confirm the period — e.g. 30 / 60 / 90 days.]
  • Use in marketing. CTTP and its pilots may use selected photographs and video footage from flights for marketing, social media, and promotional purposes. If you do not wish for your image to be used in this way, please notify your pilot or CTTP staff before your flight, or contact us at info@paraglide.co.za at any time to request that we remove your image from current marketing material.
  • Public airspace. Paragliding takes place in public airspace and from public launch sites. You may also appear incidentally in photographs or video taken by the public, other operators, or news media, over which CTTP has no control.

2.6 Marketing Preferences

If you have consented to receive marketing communications from us, we record your preferences and the date and method of consent.

2.7 Website and Technical Information

When you visit www.paraglide.co.za, certain information is collected automatically:

  • IP address
  • Browser and device type
  • Pages visited, time on site, and referral source
  • Cookies and similar technologies (see clause 8)
  • Google Tag Manager
  • Google reCAPTCHA
  • Akismet

3. How We Collect Your Information

  • Directly from you — via booking forms, contact forms, checkout, the indemnity form, email, phone, and WhatsApp.
  • Automatically — through cookies, server logs, and analytics tools when you visit our website.
  • From third parties — review platforms (e.g. Google Business Profile, Tripadvisor) where you have voluntarily posted content; gift voucher purchases made on your behalf by another person; and payment providers, who confirm transaction outcomes to us.

4. Why We Collect It and Lawful Basis

PurposeLawful basis
Managing your booking, processing payment and refundsPerformance of a contract
Conducting your flight safely (weight, health, pilot pairing)Performance of a contract; explicit consent for special personal information
Indemnity, incident records, and insuranceLegal obligation; legitimate interest
Tax and accounting recordsLegal obligation (e.g. SARS, 5-year retention)
Aviation regulatory reporting (typically only following an incident)Legal obligation
Website security, fraud prevention, and anti-spamLegitimate interest
Analytics and service improvementLegitimate interest; consent (where the cookie banner requires it)
Marketing emails and promotional use of mediaConsent

5. Who We Share Your Information With

We do not sell your personal information. We share it only with the following recipients, and only to the extent reasonably necessary:

RecipientPurpose
Paystack, PayGenius, YocoPayment processing and refunds
PiGi (our booking and operations platform)Storing and managing booking, indemnity, and operational records
WhatsApp / MetaMessaging where you contact us via WhatsApp
Email and communications providersSending booking confirmations, reminders, and (with consent) marketing emails
Hosting and cloud storage providersWebsite hosting, file storage, and backups
Analytics, anti-spam and security providersSite performance, fraud prevention, and bot protection
Insurers and professional advisorsInsurance claims, accounting, legal advice
SACAA, SAHPA, emergency services, law enforcementWhere required by law or following an incident

Placeholder — confirm and add any specific named services you use (e.g. hosting provider such as DigitalOcean, email provider such as Google Workspace / Gmail SMTP, review platforms such as Trustindex, advertising platforms such as Google Ads or Meta).

6. Cross-Border Transfers

Several of the service providers listed above operate outside South Africa, including in the United States and the European Union. Where personal information is transferred across borders, we take reasonable steps to ensure that it is protected to a standard comparable to POPIA, by:

  • Choosing providers that are subject to laws or rules providing an adequate level of protection (such as the GDPR or equivalent), or
  • Relying on contractual safeguards such as Standard Contractual Clauses or each provider’s data processing terms.

By using our services or our website, you acknowledge that your personal information may be transferred outside South Africa for these purposes.

7. How We Protect Your Information

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure. These include:

  • Encryption of website traffic in transit (HTTPS/TLS)
  • Hashing of passwords for any account-based access
  • Role-based access controls within our booking system
  • Encrypted backups
  • Use of reputable third-party providers for payment, hosting, and communications

If we become aware of a security compromise that affects your personal information, we will notify the Information Regulator and, where required by POPIA, affected data subjects, as soon as reasonably possible.

8. Cookies and Website Tracking

We use cookies and similar technologies on our website. Cookies are small files placed on your device that allow a site to remember information about your visit.

The categories of cookies we may use include:

  • Strictly necessary: session, cart, login, and security cookies that the site needs to function.
  • Functional: language and preference cookies.
  • Analytics: Google Analytics (and similar) to understand how visitors use the site.
  • Marketing / conversion: tags from advertising platforms (e.g. Google Ads, Meta) to measure campaign performance.
  • Anti-spam / security: Google reCAPTCHA and similar tools.

Placeholder — confirm exactly which of the above are in use on www.paraglide.co.za. POPIA requires consent for non-strictly-necessary cookies. If you do not currently use a cookie consent banner, this is worth adding before publishing this policy.

9. How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, and to satisfy our legal, accounting, and regulatory obligations. Indicative retention periods:

  • Booking and invoicing records: 5 years (SARS minimum)
  • Indemnity and incident records: for the duration of the relevant prescription / insurance limitation period
  • Customer accounts: until you request deletion
  • Marketing list: until you unsubscribe or withdraw consent
  • Server logs: typically up to 30 days
  • In-flight photos and video originals: generally deleted directly after you receive them and we verify successful transfer

10. Marketing Communications

We send marketing communications only where this is permitted by law.

  • Existing customers may receive marketing about similar services to those you have booked, on the basis of POPIA’s “soft opt-in” provisions, and may unsubscribe at any time.
  • Other recipients will only be added to our marketing list with their express consent.
  • Every marketing email contains a clear unsubscribe link, and you may also opt out at any time by emailing info@paraglide.co.za.

11. Children and Minors

Our minimum age for participation is 14 years (see our Terms & Conditions). Anyone under 18 is a minor under South African law. Where a participant is a minor, we collect personal information from a parent or legal guardian, who must consent to the booking, complete and sign the indemnity, and consent to the processing of the minor’s personal information for the purposes set out in this Policy.

12. Your Rights

Subject to the requirements of POPIA, you have the following rights in respect of your personal information:

  • Access — request confirmation of what personal information we hold about you, and a copy of it.
  • Correction — request correction or completion of inaccurate or incomplete information.
  • Deletion — request deletion of personal information, subject to our legal and contractual obligations to retain certain records.
  • Object — object to processing in certain circumstances, including processing for direct marketing.
  • Withdraw consent — withdraw consent for processing that relies on consent (e.g. marketing or use of media in marketing).
  • Complain — lodge a complaint with us or with the Information Regulator (see clause 14).

To exercise any of these rights, please contact us at info@paraglide.co.za. We may need to verify your identity before acting on your request, and will respond within the timeframes required by POPIA.

13. Changes to This Policy

We may update this Policy from time to time. The current version will always be available on our website, and the “Last updated” date at the top of this Policy will reflect the date of the most recent change. Where changes are material, we will take reasonable steps to bring them to your attention.

14. Contact Us and the Information Regulator

For privacy-related queries, requests, or complaints, please contact us:

Your Cart

Your cart is empty.