1. Purpose

The purpose of this policy is to establish guidelines and procedures for the protection of personal information collected, processed, and stored by Kamaroutes Travel Designers by applicable privacy laws and regulations.

2. Scope

This policy applies to all employees, contractors, and third-party service providers of Kamaroutes Travel Designers who have access to personal information collected and processed during the course of business operations.

3. Definitions

– Personal Information: Any information relating to an identified or identifiable individual, including but not limited to, name, address, email address, phone number, passport information, credit card details, and travel preferences.
– Data Subject: The individual to whom the personal information relates.

4. Collection and Use of Personal Information

– Kamaroutes Travel Designers will only collect personal information that is necessary for the provision of travel services and will obtain consent from the data subject before collection unless otherwise permitted by law.
– Personal information will be collected and processed fairly and lawfully, and will only be used for the purposes specified at the time of collection.
– Personal information will not be disclosed to third parties without the consent of the data subject, except as required by law or as necessary for the provision of travel services.

5. Security Measures

– Kamaroutes Travel Designers will implement appropriate technical and organizational measures to ensure the security and confidentiality of personal information, including measures to prevent unauthorized access, disclosure, alteration, or destruction.
– Access to personal information will be restricted to authorized personnel who require access to perform their job duties.

6. Data Retention

– Personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
– Upon expiry of the retention period, personal information will be securely deleted or anonymized to prevent unauthorized access or use.

7. Individual Rights

– Data subjects have the right to access, correct, or delete their personal information held by Kamaroutes Travel Designers.
– Data subjects have the right to withdraw their consent for the processing of their personal information at any time, subject to legal or contractual restrictions.

8. Training and Awareness

– Kamaroutes Travel Designers will provide training to employees and contractors on their responsibilities concerning the protection of personal information and will raise awareness of privacy issues among all personnel.

9. Compliance

– Kamaroutes Travel Designers will comply with all applicable privacy laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA) in South Africa.

10. Policy Review

– This policy will be reviewed regularly and updated as necessary to ensure continued compliance with applicable privacy laws and regulations and to reflect changes in business practices.

11. Enforcement

– Violations of this policy may result in disciplinary action, up to and including termination of employment or contract, under Kamaroutes Travel Designer’s disciplinary procedures.

12. Contact Information

– Data subjects may contact Kamaroutes Travel Designers with any questions or concerns regarding the processing of their personal information.