Introduction
Welcome to Pangaea Pty Ltd. We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and process your personal data when you use our services or interact with us. It also informs you about your rights concerning your privacy.
This Policy is presented by Pangaea Pty Ltd ("Pangaea," "we," "us," or "our").
1. The data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data: includes first name, last name, marital status, title, date of birth, gender, and passport number.
- Contact Data: includes billing address, home address, email address, and telephone numbers.
- Financial Data: includes bank account and payment card details necessary for processing payments.
- Transaction Data: includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: includes information about how you use our website, products, and services.
- Marketing and Communications Data: includes your preferences in receiving marketing from us and our third parties and your communication preferences.
- Special Categories of Personal Data (Sensitive Data): we collect and process sensitive data, such as information about your health (e.g., pre-existing medical conditions, disabilities) and specific dietary requirements. We require your explicit consent for us to process this data.
We may also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data is not considered personal data as it does not directly or indirectly reveal your identity.
2. How is your personal data collected?
We use different methods to collect data from and about you, including through:
- Direct interactions: you may give us your Identity, Contact, Financial, Profile, and Sensitive Data by filling in forms or by corresponding with us by phone, email, or otherwise. This includes personal data you provide when you:
- Book an itinerary or purchase our services.
- Subscribe to our service or publications.
- Request marketing materials to be sent to you.
- Give us feedback or contact us.
- Automated technologies or interactions: if you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
3. How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you (e.g., fulfilling your booking).
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services).
- Where we need to comply with a legal obligation (e.g., immigration and customs requirements).
- Where you have given your explicit consent (e.g., for processing sensitive personal data like medical conditions).
We use your personal data to:
- Process and confirm your booking.
- Manage payment and collect money owed to us.
- Manage our relationship with you, including notifying you about changes to our terms or privacy policy.
- Administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
- Deliver relevant website content and advertisements to you and measure the effectiveness of the advertising we serve to you.
- Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
- Provide you with necessary services and information during your travel, including medical evacuation services (see section 4).
4. Disclosure of your personal data
We may have to share your personal data with the parties set out below for the purposes set out in Section 3:
- Third parties:
- Service providers (such as accommodation providers, air carriers, transfer companies, and activity providers) who require the data to deliver your itinerary.
- Professional advisers (e.g., lawyers, bankers, auditors, and insurers) who provide consultancy, banking, legal, insurance, and accounting services.
- Regulators and other authorities, including tax authorities, who require reporting of processing activities in certain circumstances.
- Medical emergency evacuation service providers for the purposes of health and medical care should an incident occur.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets.
- Travel agents / tour operators: if you booked your holiday through a travel agent or tour operator, we will share information with them as necessary to manage your booking and payments.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
5. International transfers
Pangaea Pty Ltd operates globally. The processing of your personal data may involve the transfer of data outside of the country where it was collected.
- When you book an itinerary with us, your Identity, Contact, and Special Categories of Personal Data will be transferred to relevant suppliers in the country/countries of your destination.
- We only transfer your personal data outside the Republic of South Africa and the country where the data was collected where it is necessary for the performance of the contract with you (i.e., to fulfil your travel arrangements) or where we have ensured appropriate safeguards are in place.
6. Data security and data retention
- Data security: we have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
- Data retention: we will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
7. Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These may include the right to:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the contact details provided below.
8. Marketing and communication preferences
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
- You may receive marketing communications from us if you have requested information from us or purchased services from us and have not opted out of receiving that marketing.
- You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us.
9. Contact details
If you have any questions about this Privacy Policy or our privacy practices, please contact our Data Protection Officer (or relevant contact) in the following ways:
- Full company name: Pangaea Pty Ltd
- Email address: andrew@discoverpangaea.com
- Postal address: Unit 37, 1A Ruyteplaats Drive, Hout Bay, 7806
You have the right to make a complaint at any time to the relevant supervisory authority for data protection in your jurisdiction. We would, however, appreciate the chance to deal with your concerns before you approach the regulator, so please contact us in the first instance.
10. Changes to the Privacy Policy
We keep our Privacy Policy under regular review.
This version was last updated on 10 June 2025.
