Privacy Policy

1. Who we are

Miller's Travel and Tours (“we”, “us”) is a travel agency based at . We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

2. What information we collect

We may collect: name, contact details (phone, WhatsApp, email), address, passport/travel document details where needed for bookings, travel preferences and enquiry messages. We collect this when you enquire, book, or contact us via our website, WhatsApp, phone or email.

3. How we use your information

We use your information to: process enquiries and bookings; arrange travel with suppliers (airlines, hotels, visa processors); communicate with you; comply with legal obligations; and, with your consent where required, send marketing (e.g. package updates). We do not sell your personal information.

4. Legal basis and consent

We process your data where necessary for performing a contract (e.g. your booking), for our legitimate interests (e.g. responding to enquiries, improving our services), or with your consent. By submitting an enquiry or booking form, you consent to us using your details as described in this policy. You may withdraw consent for marketing at any time by contacting us.

5. Sharing and disclosure

We may share your information only as needed to provide services and complete bookings. Recipients may include travel suppliers (airlines, hotels, transport operators, visa processing partners), payment and finance providers, website/contact-form providers, analytics providers, and professional advisers. We require operators and service providers to process personal information only on our instructions and to apply reasonable security safeguards. We may also disclose information where required by law, regulation, court order, or lawful request by public authorities.

6. Retention

We keep information only for as long as reasonably necessary for the purposes described in this policy and to meet legal, accounting, tax, and dispute-resolution obligations. As a guide: general enquiries are usually retained for up to 24 months, booking records and supporting travel documents are retained for the period required by applicable law and business record-keeping obligations, and marketing preferences are retained until you opt out or ask us to delete them (subject to legal limits). After retention periods expire, data is deleted, de-identified, or securely archived where legally required.

7. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure, alteration, and misuse. These measures may include access controls, least-privilege practices, secure service providers, and operational safeguards for staff handling customer information.

8. Cross-border transfers

Because travel services are international, personal information may be transferred to and processed in countries outside South Africa by airlines, hotels, visa-related providers, and other travel partners. Where cross-border transfers occur, we take reasonable steps to ensure that information is transferred lawfully and protected to a standard that is comparable to POPIA requirements, or that another lawful transfer mechanism applies.

9. Special personal information

Depending on your booking and travel needs, we may process limited special personal information (for example, health or assistance-related details you voluntarily provide to support your travel arrangements). We only process this information where permitted by law and where necessary to provide requested services, protect vital interests, or with your consent where required.

10. Your rights (POPIA)

You may request access to personal information we hold about you, request correction or deletion (where lawful), object to certain processing, and withdraw consent for marketing communications. To exercise these rights, contact us at with enough detail for us to verify your identity and process the request securely. We aim to respond within a reasonable time and in line with applicable legal timelines.

11. Cookies and tracking

See our Cookie Notice for how we use cookies and similar technologies.

12. Security incidents and breach notification

If a security compromise occurs that is likely to affect your personal information, we will investigate and notify affected data subjects and/or the Information Regulator where required by POPIA and other applicable law.

13. Information Regulator (South Africa)

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator (South Africa). Website: inforegulator.org.za.

14. Changes

We may update this policy from time to time. The latest version will be on this page with an updated date.

Contact: Miller's Travel and Tours, . Email: . Phone/WhatsApp: .