Mapmaker Collective (Pty) Ltd, registration 2025/539773/07, of 5 Balsillie Way, Nova Constantia, Cape Town 7806, South Africa, is the responsible party for the personal information described in this policy.
Our Information Officer can be reached at ride@mapmaker.cc. Please mark your message for the attention of the Information Officer.
Identity and contact information — your name, email address, telephone number, postal address, and passport details where a tour or a border crossing requires them.
Booking information — the tour and dates you choose, group size, dietary requirements, bike sizing such as height and inseam, pedal preference, and delivery addresses for bike hire.
Health information — medical conditions, injuries, allergies and medication that you tell us about, and the name and number of your emergency contact.
Payment information — we do not store card numbers. Card payments are processed by our payment providers under their own security standards. We keep records of what was paid, when, and by which method.
Website information — pages visited, approximate location, device and browser, collected through Google Analytics.
Health and medical information is special personal information under the Protection of Personal Information Act 4 of 2013. We collect it only because it is necessary for your safety, we process it only with your consent, we share it only with the people who need it to look after you, and we delete it when it is no longer needed.
You may withdraw your consent at any time by writing to us. If you do, we may be unable to accept you on a tour where we cannot manage the risk to you safely.
We do not sell your personal information, and we do not share it for anyone else's marketing.
Where your tour takes place outside South Africa — for example in Girona, Spain — we share the details necessary to run it with suppliers in that country. We do this only where it is necessary to perform our contract with you, or where the recipient is subject to laws or agreements that provide comparable protection to South African law.
Booking and financial records are kept for five years, as South African tax law requires.
Health information is kept until the end of your tour and for a short period afterwards for insurance purposes, then deleted.
Marketing contact details are kept until you ask us to stop.
We keep information on reputable, access controlled services, we limit access to the people who need it, and we require the same of our suppliers.
No system is perfect. If a breach affects your personal information, we will notify you and the Information Regulator as the law requires.
We use Google Analytics to understand how the site is used — which pages people read, how they arrived, and where they lose interest. It sets cookies and reports in aggregate.
You can block cookies in your browser settings, or install Google's opt-out browser add-on. We do not run advertising cookies that identify you personally.
You may ask us what personal information we hold about you, ask us to correct or delete it, object to how we are processing it, withdraw a consent you have given, or ask us to stop sending you marketing.
Write to ride@mapmaker.cc. We will respond within 30 days.
If you are not satisfied with our response, you may complain to the Information Regulator (South Africa), whose contact details are published at inforegulator.org.za.
We update this policy when our practice changes. The date at the top of this page tells you when it was last revised.