Privacy Policy
Last updated: April 2026 | Joxilox Tours, South Africa
Your privacy matters to us. This policy explains how Joxilox collects, uses, stores and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who we are
Joxilox is a naturist tour operator based in South Africa, operating under the domain joxilox.com. We organise group tours, accommodation referrals and excursions across South Africa and internationally. Our information officer for POPIA purposes can be reached at popia@joxilox.com.
2. Information we collect
We only collect personal information that is necessary for the purpose for which it is collected. This may include:
- Your name, email address, phone number and country of residence — when you contact us or make a booking enquiry
- Tour preferences, travel dates and group size — to process your tour enquiry
- Payment information — processed securely through our payment provider; we do not store card details
- Guestbook entries and reviews — submitted voluntarily and displayed publicly on the site
- Technical data — IP address, browser type and pages visited, collected automatically via our hosting analytics
3. How we use your information
We use your personal information for the following purposes:
- To respond to tour enquiries and process bookings
- To send confirmation emails and tour-related correspondence
- To send our newsletter or promotional updates, only if you have opted in
- To improve our website and services based on usage patterns
- To comply with our legal obligations under South African law
We do not sell, rent or share your personal information with third parties for their own marketing purposes.
4. Legal basis for processing
We process your personal information on the following grounds:
- Consent — where you have given us clear permission (e.g. newsletter sign-up)
- Contractual necessity — to fulfil a booking or enquiry you have made
- Legitimate interest — to operate and improve our business in ways that do not override your rights
- Legal obligation — where required by South African law
5. Cookies
Our website uses cookies to improve your browsing experience and to analyse site traffic. Please see our Cookie Policy for full details of what cookies we use and how to manage them.
6. Third-party services
We use the following third-party services which may process your data on our behalf:
- WordPress & Elementor — website platform and page builder
- Contact Form 7 — form submissions routed via our server SMTP
- Quic.cloud / Cloudflare — CDN and security layer
- Google Analytics — anonymous traffic analytics (if enabled)
- Facebook, Instagram, TikTok, X (Twitter) — social media platforms linked from our site
Each of these services has its own privacy policy. We encourage you to review them where relevant.
7. Data retention
We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Booking enquiry data is typically retained for 3 years. You may request deletion of your data at any time.
8. Your rights
Under POPIA (and GDPR where applicable) you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (the right to be forgotten)
- Object to or restrict our processing of your information
- Withdraw consent at any time, where consent was the basis of processing
- Lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg
9. Data security
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration or disclosure. Our website is served over HTTPS and our hosting environment is maintained with standard security practices.
10. Children's privacy
Our services are intended for adults. We do not knowingly collect personal information from anyone under the age of 18 without verifiable parental or guardian consent.
11. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review it periodically.
12. Contact us
