Summit & Sea – Privacy Policy
About this policy
This policy explains what personal information Summit & Sea collects, why, and what you can do about it. It applies when you visit our website, enquire about or book a trip, join one of our tours or experiences, sign up to our emails, or work with us.
Summit And Sea (Pty) Ltd (registration number 2025/723287/07) is responsible for your personal information. We're based in Cape Town, South Africa, and we look after it in line with South Africa's Protection of Personal Information Act 2013 (POPIA) and, where it applies to you, the UK General Data Protection Regulation (UK GDPR).
If you have any questions, email hugo@summit-and-sea.co.uk.
What we collect
We only collect what we need to plan and run your trip or experience. Most of it comes from you directly; some comes from the person who books on your behalf.
When you enquire or plan a trip, including by email, WhatsApp or social media: your name, email, phone number, where you live, travel dates, group size, budget, what you're looking for, and the messages you send us.
When you book a trip: the names of everyone travelling, dates of birth, nationality, passport details where a supplier needs them, an emergency contact, flight details, and payment and invoice records.
When you join a self-drive tour: driving licence details for each driver, as the vehicle hire company requires them.
When you tell us about your needs: dietary requirements, allergies, medical conditions, and mobility or fitness information that affects your safety or the activities you can do.
When you book a township tour or experience: your name, contact details, group size, and your acceptance of the liability waiver.
When you sign up to our emails or Supper Club: your name, email, and which list you joined.
When you visit our website: device and browser information, pages visited and how you found us, collected through cookies (see Cookies below).
When you work with us as a business: your name, role, company and contact details.
We don't store card numbers. Payments go through our bank or payment provider, who handle your card details securely.
Information about your health counts as special personal information. We only collect it with your consent, and only to keep you safe and look after your needs on the trip.
How we use it
We use your information to plan and run your trip, and for nothing you wouldn't expect. The law requires a reason for each use, shown in brackets.
Planning and booking your trip: sending proposals, making bookings with hotels, guides and other suppliers, invoicing and taking payment (to carry out our contract with you, or take steps before it).
Looking after you while you travel: passing on dietary or medical needs, contacting you or your emergency contact if something goes wrong (contract, your consent for health information, and to protect your vital interests in an emergency).
Keeping in touch about your trip: updates, reminders and travel documents (contract).
Sending you news and offers: only if you've signed up or are an existing client, and you can opt out at any time (consent, or our legitimate interest in telling existing clients about similar trips).
Running and improving our business: understanding how people use our website, measuring our advertising, keeping accounts and records (legitimate interests, and our legal obligations such as tax records).
Dealing with problems: handling complaints, claims and legal requirements (legal obligation and legitimate interests).
We don't sell your personal information, and we don't use it for automated decisions that affect you.
Who we share it with
We share only what each party needs to do their part.
Travel suppliers: hotels, lodges, campsites, guides, activity providers, vehicle hire companies, transfer companies and restaurants, so they can deliver what you've booked.
Destination partners: trusted local travel companies in the countries you're visiting, who help us arrange trips beyond South Africa.
Our business software: the tools we use to run Summit & Sea, such as email, accounting and booking software, store your information securely on our behalf.
Professional advisers and authorities: our accountants, lawyers and insurers where needed, and the police, regulators or courts if the law requires it.
If you book on behalf of other people, please make sure they're happy for you to share their details with us and have seen this policy.
Some bookings, such as Supper Club tickets, are made through third-party platforms. When you use them, their own privacy policies also apply to the information they collect.
Sending information abroad
As we're based in South Africa and plan trips for travellers from elsewhere, your information will move between countries. It may be held in South Africa, the UK, the EU or the US by the providers we use, and shared with suppliers in the countries you visit.
When it leaves South Africa or the UK, we make sure it's protected to the standard the law requires: the destination country has adequate data protection laws, the provider has signed appropriate contractual safeguards, or the transfer is necessary to carry out the trip you've asked us to arrange.
Emails and marketing
We send trip ideas and news to people who've signed up, and occasionally to past clients about trips like the ones they've taken. Our Supper Club has its own separate mailing list.
You can unsubscribe at any time using the link at the bottom of any email, or by emailing us. Unsubscribing won't affect messages about a trip you've already booked.
Cookies
Our website uses cookies, small files stored in your browser. Some are essential to make the site work. Others help us understand how visitors use the site and measure our advertising, through tools such as Google Analytics and Google Ads.
We only use non-essential cookies if you agree to them through our cookie banner. You can change your choice at any time, or block cookies in your browser settings, though parts of the site may not work as well.
How long we keep it and how we protect it
We keep your information only as long as we need it:
Enquiries that don't become bookings: up to two years, so we can pick up where we left off if you come back to us.
Booking, invoice and payment records: for as long as tax and accounting laws require, usually five to seven years.
Health and dietary information: deleted within six months of your trip ending, unless we need it for a claim or complaint.
Email lists: until you unsubscribe.
We protect your information with password-protected accounts, two-step sign-in where available, access limited to the people who need it, and service providers with their own security standards. If a breach puts your information at risk, we'll tell you and the relevant regulator as the law requires.
Your rights
You can ask us to:
tell you what personal information we hold about you and give you a copy
correct anything that's wrong or out of date
delete your information, where we don't need to keep it
stop or limit how we use it, including for marketing
send your information to you or another organisation in a usable format
withdraw any consent you've given, without affecting what we did before
To use any of these rights, email hugo@summit-and-sea.co.uk. We'll reply within one month, and we may ask you to confirm who you are first. There's normally no charge.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the regulator:
In South Africa: the Information Regulator, enquiries@inforegulator.org.za
In the UK: the Information Commissioner's Office
Children
We only collect information about children when a parent or guardian gives it to us as part of a family booking, and only what we need for the trip.
Changes to this policy
We'll update this page if anything changes. The date below shows when it was last updated.
Contact us
Summit And Sea (Pty) Ltd, registration number 2025/723287/07 Information Officer: Hugo Morrissey Email: hugo@summit-and-sea.co.uk Phone and WhatsApp: +27 76 579 4702 Address: 9 Warren Street, Tamboerskloof, Cape Town, South Africa
Last updated: 7 November 2026