Privacy Policy

The data controller responsible for the processing of your personal data on this website is:

Misty Morn Cottages
21 Driefontein Road, Muldersdrift, Krugersdorp, South Africa
Email: bookings@misty-morn.co.za
Phone: +27 64 885 0598

Full contact information is available in our Imprint.

We only collect personal data that you actively provide to us — primarily through our contact form. Specifically:

• Full name (required)
• Email address (required)
• Phone number (optional)
• Preferred cottage, number of guests, check-in / check-out dates (optional)
• The free-text message you write us (optional)
• The fact that you confirmed our privacy policy and the time of submission

We do not use web analytics, tracking pixels, advertising cookies, or fingerprinting on this website.

Your data is processed exclusively to respond to your enquiry and to plan a possible stay at Misty Morn Cottages.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) and Art. 6(1)(f) GDPR (our legitimate interest in answering guest enquiries efficiently).

We use the following carefully selected service providers (processors under Art. 28 GDPR) to operate this website:

• Resend, Inc. (USA) — delivers the email generated by our contact form. Resend processes your form data (name, email, message, etc.) solely to transmit the email. Resend is GDPR-compliant via Standard Contractual Clauses.
• Vercel Inc. (USA) — provides the hosting infrastructure for this website. Server logs may incidentally contain your IP address and request metadata for the time technically required to deliver the page.
• Google Ireland Ltd. — when you explicitly click to load the embedded map on the Contact page, Google receives your IP address, browser data and other technical information. The map is not loaded until you actively consent.

Transfers to the USA are based on Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

We store the data from your enquiry only for as long as is necessary to handle your request or any resulting booking. Enquiries that do not lead to a booking are deleted no later than 6 months after the last correspondence. Where statutory retention obligations apply (e.g. tax law, up to 7 years for accounting records relating to actual bookings), the data is restricted from further processing until those periods expire.

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Have inaccurate data corrected (Art. 16)
• Have your data erased (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)

To exercise any of these rights, email us at bookings@misty-morn.co.za. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data correctly.

This website does not set any tracking, analytics, or advertising cookies. The only client-side storage we use is a single localStorage flag that remembers whether you have given consent to load the Google Maps embed on the Contact page. You can clear this at any time via your browser settings.

Our hosting provider automatically records technical information that your browser transmits when accessing the website — such as IP address, requested URL, browser type, operating system, and timestamp. This information is used solely to operate the website securely and is retained for a maximum of 14 days, unless a security incident requires longer storage.

We may update this policy if our processing activities change or to reflect updated legal requirements. The version shown above is the current one — the date at the top reflects the latest revision.