Your information, plainly.

This website does not store your answers.

travelandbeyond.co.za is a set of static pages. There is no account, no login and no database behind the planning form. When you press the button at the bottom of that form, your browser builds a WhatsApp message out of what you typed and opens WhatsApp with it. Nothing is posted to a server we own, because there is no such server holding your answers.

There is no analytics script on this site, no advertising pixel, and no cookie set by us. You can check that yourself in your browser's developer tools on the network tab: load any page and watch what it asks for. It fetches the page, the stylesheet, the logo and a favicon. Nothing about you leaves the browser until you press send.

Two honest exceptions. Our web server keeps a standard request log, which records the page asked for, the time and the IP address of the visitor, the same as any web server. And if you choose to email us instead of using WhatsApp, our mail provider stores that email.

What we hold once you message us

Why we hold it

The Act allows processing only on a stated ground (section 11). There are three here, and none of them is "because we might find it useful later".

• To plan the trip you asked us to plan.

  Where you go on to book, the ground is the booking itself, which the Act calls performance of a contract (section 11(1)(b)). The trade needs your details to issue the ticket and the voucher.

• To contact you on WhatsApp about that trip, because you agreed to it.

  That agreement is the checkbox on the planning form, and it covers this trip only (section 11(1)(a)). You can withdraw it at any time by saying so in the chat (section 11(2)). Withdrawing it stops the planning conversation, because we have no other way to reach you.

• To keep the records the law requires.

  Tax and accounting records sit with the trade and with the company (section 11(1)(c)). Those are kept because a law says so, not because we chose to.

What we do not do: we do not send you marketing on the strength of the planning consent. Marketing by electronic communication needs its own prior opt in under section 69, and the planning checkbox is not that opt in. If we ever start a mailing list it will ask you separately, and it will offer a way out in every message.

Who else sees it

• WhatsApp, which is run by Meta.

  Your message is carried and stored by WhatsApp, not by a server we own. WhatsApp's own privacy policy says it uses Meta's global infrastructure and data centres, including in the United States, and that the countries it moves information to may have different privacy laws from South Africa. Under section 72 of the Act you have to be told when information leaves the country, and that is what this paragraph does. We cannot promise South African level protection for the part of the journey that is inside WhatsApp. We can tell you that WhatsApp states it does not keep your messages on its servers in the ordinary course of delivery.

• Lizanne van Niekerk, your named consultant.

  She reads the brief, builds the options, and books. She is the person in this company who sees the most of your trip, and she is the one you ask to delete it.

• The suppliers your booking actually needs.

  The trade back office, the airline, the lodge or the resort. They get the details the booking needs and nothing else: a name, a date of birth where an airline demands it, a room type.

• Nobody else.

  We sell nothing, rent no list, and send no planning conversation to a lead broker. If that ever changes, this page changes first and the date at the top of it changes with it.

How long we keep it

What is settled: ask for deletion and it happens within one working day, whether or not you have booked. We keep nothing "just in case" once the trip is over and the record keeping duty is met.

What is not settled, and we would rather say so than invent a number: a written retention schedule with a fixed period per record type and a named owner. It is being written. When it lands, this page gets the period and a new date at the top. Until then, the deletion on request is the rule that applies.

Your rights, and how to use them

These are yours under the Act. None of them needs a lawyer, a form, or a fee.

• See what we hold.

  Ask, and we confirm whether we hold anything about you, free of charge, and give you the record or a description of it (section 23).

• Have it corrected or deleted.

  If something is wrong, out of date, or no longer needed, ask and we correct or delete it (section 24). Deletion is the usual outcome for a planning conversation.

• Object to the processing.

  You can object to processing that runs on a ground other than consent or a contract (section 11(3)). We stop, unless a law requires us to carry on, and we tell you which law and why.

• Withdraw your consent.

  One message in the chat. It does not undo anything done before you withdrew, but it stops everything after it (section 11(2)).

• Complain to the Information Regulator.

  You do not have to come to us first. The Regulator's details are: POPIAComplaints@inforegulator.org.za, telephone 010 023 5200, toll free 0800 017 160, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, and inforegulator.org.za. Section 18(1)(h)(v) of the Act expects us to give you these.

How to ask

WhatsApp +27 60 916 9115 with the words "please delete my information", or email info@travelandbeyond.co.za with POPIA in the subject line. We confirm the same working day, and the information is deleted within one business day, which is the same promise our questions page already makes.

We may ask you to prove who you are before we hand over or delete anything. Section 23 allows that, and it protects you: without it, anyone could ask for your trip details.

If something goes wrong

If your information is compromised, we notify you and the Information Regulator as soon as reasonably possible after we find out, in writing (section 22). You will not read about it first somewhere else.

Who we are: Travel & Beyond is a venture of K2026670041 (SOUTH AFRICA) (Pty) Ltd, trading as DigiBiz, registration number 2026/670041/07, registered office 25 Adderley Street, Randburg, Gauteng, 2194. That company is the responsible party for this website under the Act. This page is the section 18 notice. Nothing on it is legal advice, and nothing on it forms a contract. Last updated 20 October 2026.