Last Updated: 26 October 2026
1. Introduction
Welcome to RedClay.co.za (the "Website"), a subsidiary of Hogsback Adventures (Pty) Ltd (Registration Number: 2021/612280/07). We are committed to protecting your privacy and ensuring that your personal information is collected and used appropriately, transparently, and in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable laws in South Africa.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website, use the RedClay Customer Portal (https://www.redclay.co.za/customer_portal/), communicate with us on WhatsApp, or otherwise use our services. It also applies to our Meta (Facebook) app "RedClay Customer Portal", operated by Hogsback Adventures (Pty) Ltd. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
2. Definitions
- "Personal Information" means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to the information defined in POPIA.
- "Processing" means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including its collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; dissemination by means of transmission, distribution or making available in any other form; or merging, linking, as well as restriction, degradation, erasure or destruction of information.
- "We", "Us", "Our" refers to RedClay.co.za and Hogsback Adventures (Pty) Ltd.
- "You", "Your" refers to the user of our Website and services.
3. Information We Collect
We may collect Personal Information about you in various ways, including:
- Information you provide directly: This includes information you provide when you make a booking, create an account, subscribe to our newsletter, respond to a survey, fill out a form, or communicate with us. This may include your name, email address, phone number, physical address, payment information, and any other information you choose to provide.
- Information collected automatically: When you visit our Website, we may automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, operating system, referring URLs, pages viewed, links clicked, and dates and times of visits. This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes.
- WhatsApp information: When we message you on WhatsApp or you message us, we process your WhatsApp phone number, your WhatsApp profile name, the content of messages and any media you send us, one-time login codes we send you, and message delivery and read status (sent, delivered, read, failed) returned by WhatsApp. See section 7 below.
- Facebook / Google login: If you choose to sign in to the Customer Portal with Facebook or Google, we receive your name, email address and profile identifier from that provider. We do not receive your password.
- Information from third parties: We may receive information about you from third-party sources, such as social media platforms (if you interact with us through them) or third-party booking services.
4. How We Use Your Information
We process your Personal Information for the following purposes:
- To provide and manage our services, including processing bookings, payments, and providing customer support.
- To communicate with you, including responding to your inquiries, sending booking confirmations, and providing updates about our services.
- To personalize and improve your experience on our Website.
- For marketing and promotional purposes, with your consent where required by law. You can opt-out of marketing communications at any time.
- To comply with legal obligations and enforce our terms and conditions.
- For internal record keeping, administrative, and security purposes.
- To analyze Website usage and improve our offerings.
5. Legal Basis for Processing
We will only process your Personal Information if we have a lawful basis for doing so. Lawful bases for processing include:
- Consent: Where you have given us explicit consent to process your Personal Information for a specific purpose.
- Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party (e.g., to fulfil your booking).
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that such interests are not overridden by your rights and interests.
6. Information Sharing and Disclosure
We may share your Personal Information in the following circumstances:
- With our parent company: With Hogsback Adventures (Pty) Ltd for operational and administrative purposes.
- With service providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work (e.g., payment processors, email delivery services, hosting providers, and Meta Platforms for WhatsApp messaging, as described in section 7).
- For legal reasons: We may disclose your information if we are required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). This includes to meet national security or law enforcement requirements.
- To protect our rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- With your consent: We may disclose your Personal Information for any other purpose with your consent.
We will ensure that any third party to whom we disclose your Personal Information is contractually bound to protect your information to the same extent that we are.
7. WhatsApp & Meta
We use the WhatsApp Business Platform (Cloud API), provided by Meta Platforms, Inc. and its affiliates ("Meta"), through our Meta app "RedClay Customer Portal" to communicate with our customers.
What we process:
- Your phone number and WhatsApp profile name.
- The content of messages (and any images or documents) that you send to us or that we send to you.
- Message metadata such as date and time, message ID and delivery status (sent, delivered, read or failed).
- Your WhatsApp messaging preferences (for example, whether you want receipts on WhatsApp).
Why we use WhatsApp:
- Booking confirmations, reminders and changes (e.g., table, event and activity bookings).
- Customer Portal notifications, including one-time login / verification codes, receipts, statements, order updates and loyalty points updates.
- Customer support: answering your questions and requests that you send to us on WhatsApp.
- Occasional promotional messages, only where you have opted in to receive them.
Meta as service provider: Meta acts as our service provider (operator/processor) to transmit and deliver WhatsApp messages on our behalf. Messages are encrypted in transit, and Meta processes the information under the WhatsApp Business Terms and the WhatsApp Privacy Policy. Meta may process information outside South Africa (see section 14). We do not sell your WhatsApp information or share it with anyone else for their own marketing.
Opt-in: We only send you WhatsApp messages if you have given us your number and agreed to receive messages from us, for example by registering for the Customer Portal or loyalty programme, signing in with your phone number, switching on "Receive receipts via WhatsApp", making a booking with your WhatsApp number, or messaging us first.
Opt-out (STOP): You can stop receiving WhatsApp messages from us at any time by:
- replying STOP to any of our WhatsApp messages;
- switching off "Receive receipts via WhatsApp" under your profile in the Customer Portal; or
- emailing info@hogsbackadventures.co.za.
You can also block our number in WhatsApp. After you opt out we will only send messages you specifically request (such as a login code you ask for).
Retention: WhatsApp message logs and delivery statuses are kept for up to 24 months so we can provide support, resolve disputes and keep records of bookings and receipts, after which they are deleted or anonymised. One-time login codes expire within minutes and are not reused. Financial records (such as receipts) may be kept longer where the law requires it (see section 8).
8. Data Retention
We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.
9. Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any Personal Information we process. These measures aim to prevent unauthorized access, disclosure, alteration, or destruction of your Personal Information. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your Personal Information, transmission of Personal Information to and from our Website is at your own risk. You should only access the Website within a secure environment.
10. Your Rights under POPIA
Under POPIA, you have certain rights regarding your Personal Information. These include:
- Right of Access: You have the right to request access to the Personal Information we hold about you.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete Personal Information.
- Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your Personal Information, subject to certain conditions.
- Right to Object to Processing: You have the right to object to the processing of your Personal Information in certain circumstances (e.g., for direct marketing purposes).
- Right to Restrict Processing: You have the right to request the restriction of processing of your Personal Information in certain circumstances.
- Right to Data Portability: You have the right to request that we transfer the Personal Information we have collected about you to another organization, or directly to you, in certain circumstances.
- Right to Complain: You have the right to lodge a complaint with the Information Regulator if you believe that we have not complied with the requirements of POPIA.
- Right to Withdraw Consent: If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us using the contact details provided below.
Data deletion: To ask us to delete your account and personal information (including information received through Facebook Login or WhatsApp), follow our Data Deletion Instructions or email info@hogsbackadventures.co.za with the subject "Data Deletion Request".
12. Third-Party Links
Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
13. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect Personal Information from children under 18. If we become aware that a child under 18 has provided us with Personal Information without parental consent, we will take steps to delete such information. If you believe that we might have any information from or about a child under 18, please contact us.
14. International Data Transfers
Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If we transfer your Personal Information outside of South Africa, we will ensure that appropriate safeguards are in place to protect your Personal Information in accordance with POPIA requirements.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
16. Contact Us
If you have any questions or concerns about this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights, please contact us:
Hogsback Adventures (Pty) Ltd
(Trading as RedClay.co.za)
Woodlands Centre, 1 Wolfridge Road, Hogsback, Eastern Cape, South Africa, 5721
Email: info@hogsbackadventures.co.za
Privacy Policy URL: https://www.redclay.co.za/privacy.html
Our Information Officer is: Mornay van Vuuren. You can contact them at the details above.