Leopards Den is a travel agency based in Cape Town, South Africa. We arrange stays at handpicked safari lodges across Southern Africa. This policy explains what personal information we collect when you visit this website or contact us, why we collect it, and the choices you have.
We are the responsible party under South Africa's Protection of Personal Information Act (POPIA), and the controller for visitors covered by the European Union and United Kingdom General Data Protection Regulation (GDPR).
Our Information Officer
Our Information Officer is Neeltje Wilkens. For any question about your personal information, or to exercise any of your rights, contact Neeltje Wilkens at info@lepden.com.
What we collect
When you send the enquiry form on a lodge page or email us, we collect what you choose to share: your name and contact details, the country you are enquiring from, your travel dates, how many people are travelling, the ages of any children, and your preferences for the trip.
If you tell us about a health condition, dietary need or mobility requirement, we use it only to arrange your stay, and only with your consent.
When you book, the lodges, airlines or transfer companies involved may need further details, such as passport information. We ask for these only when they are needed.
When you browse this website, our hosting provider, Cloudflare, processes your internet (IP) address and the technical details of each request, to deliver the site and protect it from attacks. We do not use this to identify you.
We collect nothing else about you as you browse unless you accept analytics cookies. If you do, Google Analytics records which pages you view, for how long, your approximate location and the type of device you use.
If you accept, Google Ads also receives the pages you view and whether you send an enquiry, so we can tell which of our ads lead to enquiries. When you send an enquiry, Google's tag also sends Google a scrambled copy (a hash) of the email address you entered, which Google compares with its own accounts to link the enquiry to an ad click. We do not use Google Ads to show you personalised advertising.
If you accept, Microsoft Clarity also records how you use each page: where you click or tap, how far you scroll and how the pointer moves, so we can see where the site is hard to use. Its replays of a visit hide the text on the page, and it never records what you type in the enquiry form.
When you send the enquiry form, your details come straight to us, and we email you to confirm we have them. Before it is sent, Cloudflare Turnstile checks that a person, not an automated program, is sending it. It looks at technical details of your browser and does not read what you type. We also keep a note of your IP address for about a day, so that nobody can flood the form with enquiries. Supabase, which stores enquiries for us, also holds it in its own request logs for a short time to protect its service.
Why we use it
To answer your enquiry and plan your trip, because you asked us to.
To arrange and manage your booking with lodges, guides and transfer companies, because that is what our agreement with you requires.
To keep records that South African tax and consumer law require.
To protect this website and the enquiry form from attacks and automated spam, which is in our and our guests' legitimate interest.
To understand how visitors use this website and which of our ads work, only if you have agreed to analytics cookies.
To send you news and offers, only if you have agreed to receive them. You can unsubscribe at any time.
Who we share it with
The lodges, camps, guides and transfer companies needed for your trip.
WeTravel, which handles payments and booking documents when you book.
The providers that run our systems: Supabase, which stores enquiries and booking records for our team on servers in London; Microsoft for email; Cloudflare for hosting this website and checking enquiry forms; and Google and Microsoft for analytics and ad measurement if you have accepted it.
Authorities, when the law requires it.
We never sell your personal information.
Links to other services
Links to Google Maps, Facebook, Instagram and YouTube take you to those services. What you do there is covered by their own privacy policies, not this one.
Information sent outside South Africa
Some of these providers store information outside South Africa, including in the United Kingdom, the European Union and the United States. We use only providers bound by data protection terms that give protection comparable to POPIA and the GDPR.
How long we keep it
Enquiries that do not lead to a booking: up to 12 months, then deleted.
IP addresses noted when you send the enquiry form: about a day.
Booking records: five years after your trip, as South African tax law requires.
Analytics data: up to 14 months in Google Analytics.
Clarity recordings: 30 days, apart from a small sample Microsoft keeps for up to nine months.
Google Ads measurement cookies: up to 90 days.
How we protect it
Only the people who need your information to arrange your trip can see it. This website is served over an encrypted connection, and our providers keep information on secure systems. If a security breach affects your information, we will tell you and the Information Regulator, as POPIA requires.
Your rights
You can ask us what personal information we hold about you, ask us to correct or delete it, object to us using it, withdraw any consent you have given, and object to direct marketing. Under the GDPR you can also ask us to restrict how we use it, or to send it to you in a portable format.
Email info@lepden.com. We do not charge for a request, and we reply within 30 days.
Complaints
Please contact us first so we can put things right. You may also complain to the Information Regulator (South Africa). If you live in the European Union or the United Kingdom, you may complain to your local data protection authority.
Cookies
This website sets no cookies unless you accept analytics. When we ask, your choice is kept in your browser, and you can change it at any time from the cookie settings link at the foot of each page. If you withdraw your consent, we delete the analytics and advertising cookies and reload the page without them.
Microsoft Clarity also sets cookies on Microsoft's own sites (clarity.ms and bing.com). This website cannot delete those; you can remove them in your browser's settings.
Children
Our services are for adults. We collect details about children only from the adult arranging the trip, and only what the lodges need, such as ages.
Changes to this policy
When our practices change, we update this page and the date at the top.