Skip to content

Privacy Policy

Last updated: 20 September 2026

On this page

This Privacy Policy explains how Mangwa Tours ("Mangwa Tours", "we", "us") collects, accesses, uses, stores, shares, and deletes personal information, including Google user data, when you use the Mangwa Tours website and application at https://mangwatours.co.za, our guest portal, our staff dashboard, and related tour and shuttle services in South Africa.

Mangwa Tours is a private tour and transfer business based in Gordon's Bay, Cape Town, Western Cape, South Africa, operated by Petro Pretorius. This policy is written for the Mangwa Tours website and application. If you do not agree with this policy, do not use the website, join the launch list, create an account, or connect a Google account.

The Terms of Service cover bookings and use of the site. You can browse the public website without signing in. Google Sign-In is optional.

1. Information we collect

We collect the information you give us when you enquire, join the launch list, book a tour or shuttle, create an account, or contact us. Depending on the service, that can include your full name, email address, phone number, nationality, physical address, passport or identity details required for a transfer, dietary or medical notes that affect the tour, emergency contact details, travel dates, party size, and special requests.

Payment card details are collected and processed by our payment provider. We do not store full card numbers on Mangwa Tours servers.

When you visit the website we may automatically collect your IP address, browser type, device type, operating system, pages viewed, and referring URL. We use this to keep the site working, understand which pages are used, and protect against abuse. We do not use this technical data to build advertising profiles.

2. Launch emails

If you join the coming-soon list, we store the email address you submit, the time you submitted it, and, where available, the IP address and browser user agent of that request. We use that information to send you a confirmation and later to tell you when bookings open. We do not sell launch-list addresses.

Each confirmation email includes an unsubscribe link. You can also ask us to delete the address by emailing petro@mangwatours.co.za.

3. Google user data we access

If you choose to sign in with Google, or if an authorised staff member connects Google Photos, Mangwa Tours accesses only the Google user data described below. We do not access Gmail, Google Drive, contacts, Calendar, or any other Google product.

Google Sign-In

When you sign in with Google, we access the Google user data that Google shares with the basic profile and email scopes: your name, email address, profile photo, and Google account identifier. We use that Google user data only to create or sign you in to your Mangwa Tours account, show your name and photo in the portal or dashboard, and contact you about the account or a booking you requested.

Google Photos

Authorised Mangwa Tours staff can connect their own Google account to export selected gallery images into that same Google account's Google Photos library. For this feature we request the photoslibrary.appendonly scope. That means we can add the photos the signed-in user chooses to upload. We do not read, list, download, edit, or delete photos that are already in the user's Google Photos library. We do not access anyone else's Google Photos.

The Google Photos access token stays in that browser session only. We do not store the Google Photos access token on Mangwa Tours servers, and we do not use it to access Google user data after the session ends.

4. Google Limited Use

Mangwa Tours' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request only the Google permissions needed for the features above. We do not request extra scopes to cover features we have not built.

5. How we use Google user data

We use Google user data only to provide and improve the user-facing features you asked for:

  • Sign you in and keep your Mangwa Tours session authenticated.
  • Display your name and profile photo inside the guest portal or staff dashboard.
  • Associate bookings, itineraries, and support messages with the correct account.
  • Upload gallery photos that an authorised user has selected into that user's own Google Photos library.
  • Diagnose a failed sign-in or photo upload so the feature works for the person who requested it.

We do not use Google user data for targeted advertising, personalised advertising, retargeting, interest-based advertising, selling or renting data, sharing with data brokers or information resellers, credit-worthiness, lending, or building databases for those purposes. We do not use Google user data, including data from Google Workspace APIs, to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models. Google user data is not transferred to third parties for any of those purposes.

6. How we store Google user data

Account details received from Google Sign-In, such as your name, email address, profile photo URL, and Google account identifier, are stored in our application database so we can recognise your account the next time you sign in. Hosting and authentication are provided by Google Firebase and related Google Cloud services that process this data on our behalf to run the Mangwa Tours application.

A Google Photos access token is stored only in your browser's session storage for the current session, so the upload you started can finish. It is not written to our database. Photos you choose to export are sent to Google Photos so they can be added to your library. A copy of those same gallery files may already exist in the Mangwa Tours media library because that is where staff selected them.

7. How we share, transfer, or disclose Google user data

We do not sell, rent, or trade Google user data. We do not disclose Google user data to advertisers, data brokers, or information resellers.

We share or transfer Google user data only in these cases:

  • With Google, when you sign in with Google or when you ask us to add selected photos to your Google Photos library. That transfer is required to provide the feature.
  • With infrastructure providers that host the Mangwa Tours application, including Google Firebase, solely so we can store your account and operate sign-in. They may process the data only on our instructions to provide the service.
  • If we are required to do so by South African law, a court order, or a lawful request from a public authority, or if disclosure is necessary to protect the rights, property, or safety of our guests, staff, or the public.

Tour partners, accommodation providers, and activity operators receive the booking details needed to deliver a trip you requested. They do not receive your Google account identifier, Google Photos access, or other Google user data.

8. How we protect Google user data

We use technical and organisational measures to protect Google user data and other personal information against unauthorised access, alteration, disclosure, and destruction. Those measures include HTTPS encryption in transit, access controls so only authorised staff can open guest and account records, authentication through Google and Firebase rather than storing Google passwords, short-lived Google Photos tokens that stay in the browser session, and limiting collection to the scopes the feature needs.

No method of transmission or storage is completely secure. If we learn of a breach that affects your personal information, we will notify you and the relevant authority where South African law requires it.

9. Retention and deletion

We keep personal information, including Google user data stored in your Mangwa Tours account, only for as long as we need it to provide the service, meet a booking you made, or comply with law. Booking and accounting records are normally kept for at least five years because South African tax and company-record rules require it. After the retention period ends, we delete or anonymise the data.

You can ask us to delete your Mangwa Tours account and the Google user data we store for that account by emailing petro@mangwatours.co.za. We will delete the name, email address, profile photo, and Google account identifier we hold, unless we must keep a limited record to complete a booking, prevent fraud, or meet a legal duty. Disconnecting Google Photos in your browser ends that session's access immediately, because we do not keep the Photos token on our servers.

You can also revoke Mangwa Tours' access to your Google Account at any time at myaccount.google.com/permissions. Revoking access stops future Google Sign-In and Google Photos access. It does not by itself delete the Mangwa Tours account record we already stored. Email us if you want that record deleted too.

Deleting your Mangwa Tours account does not delete photos that were already added to your Google Photos library. You can remove those in Google Photos.

10. Other uses of personal information

Apart from the Google features above, we use personal information to:

  • Confirm, operate, and change your tour or shuttle booking.
  • Send itineraries, pickup details, and service messages you asked for.
  • Reply to questions and provide support.
  • Take payment and reduce fraudulent bookings.
  • Meet safety, immigration, and other legal duties that apply to a tour.
  • Improve the website and booking flow from aggregated usage.
  • Send occasional offers only if you have asked to hear from us. You can opt out at any time.

11. Cookies and analytics

We use cookies and similar storage to keep you signed in, remember language or currency choices, and measure site traffic. You can block cookies in your browser. Blocking them may stop sign-in or saved preferences from working. We do not use Google user data obtained through OAuth for advertising cookies.

We use Google Analytics 4 to count visits and see which public pages are used. Google Analytics may set cookies and receive your IP address, browser type, and pages viewed. That analytics data is not Google Sign-In or Google Photos user data, and we do not join it to your Google account identifier.

Some booking and search forms load Google Maps to look up places. If you type an address or place name, that query is sent to Google so the map can suggest a match.

12. Your rights

Under the Protection of Personal Information Act (POPIA) you can ask to access the personal information we hold, correct it, delete it where the law allows, object to direct marketing, or withdraw consent. You can also complain to the Information Regulator of South Africa. To use these rights, email petro@mangwatours.co.za.

13. Children

Mangwa Tours is not directed at children. A parent or guardian must provide information for a child under 18 who joins a tour. We do not knowingly let a child create a Google-linked Mangwa Tours account. Contact us if you believe we have collected a child's information without parental consent and we will delete it.

14. Changes

If we change how Mangwa Tours accesses, uses, stores, or shares Google user data, we will update this page and the "Last updated" date before we rely on the new use, and we will ask for consent where Google or the law requires it. The current policy is always at https://mangwatours.co.za/privacy.

Contact

Questions about this policy, a copy of your data, or a deletion request for Google user data can be sent to the operator of the Mangwa Tours application:

Mangwa Tours
Petro Pretorius
Gordon's Bay, Cape Town, Western Cape, South Africa
petro@mangwatours.co.za
+27 (83) 882-1737