Legal

Privacy Policy

Last updated: 19 October 2026

Spacube Pty Ltd t/a Spacube Luxury Suites (“Spacube”, “we”, “us”) runs Spacube Luxury Suites and Spa at 79 George Storrar Road, Groenkloof, Pretoria, Gauteng, 0181. We respect your privacy and process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what we collect, why, how long we keep it, and the rights you have.

1. Who is responsible

Spacube Pty Ltd t/a Spacube Luxury Suites is the responsible party. Our Information Officer is Quint Kloppers (CEO). You can reach him at quint@spacubeluxurysuites.com or on 012 460 8769.

2. What we collect

  • Bookings: your name, contact details, stay dates, number of guests, special requests and payment details. Online bookings are made through our booking partner, NightsBridge, which processes payments for us.
  • Enquiries: what you enter in our contact form (name, email address, phone number, dates and message), and what you send us by email or phone.
  • WhatsApp: if you message us on WhatsApp, we receive your phone number, your WhatsApp name and the content of your messages. WhatsApp is run by Meta, under its own privacy policy.
  • Spa treatments: the details you share when you reserve a treatment, including any health information you choose to tell us so that a treatment is safe for you. We treat this as special personal information and use it only for your treatment.
  • At your stay: the details we need to check you in, look after you and meet our legal duties as accommodation providers.
  • Website use: basic technical data (such as your IP address and browser type) in our hosting provider’s security logs, and the cookies described below.

3. Why we use it

  • To take and manage your booking, treatment or event, and to answer your questions.
  • To take payment and keep proper financial records.
  • To keep our guests, staff and property safe and to run the website securely.
  • To meet our legal and tax obligations.
  • To send you news or offers, but only if you have agreed to this. You can opt out at any time by replying “unsubscribe” or contacting us.

We process personal information because it is needed to carry out your booking or request, because the law requires it, because it is in our legitimate interest to run a safe and well-managed guest house, or because you have given consent. We do not sell your personal information.

4. Who we share it with

  • NightsBridge, our online booking and payment partner, for bookings made through our website.
  • Our website host (HostGator), which stores the website and the enquiries sent through it.
  • Meta (WhatsApp), when you choose to message us there.
  • Our accountants and professional advisers, and authorities where the law requires it.

Some of these providers store information on servers outside South Africa. Where that happens, we only use providers that are bound by laws or agreements giving your information a level of protection similar to POPIA.

5. Reviews, maps and other third-party content

Our pages show Google reviews through a widget from Trustindex. The reviews are published on Google by the reviewers themselves; when the widget loads, your browser connects to Trustindex’s servers to fetch the review images and styling. Our map button opens Google Maps in a new tab, and nothing from Google Maps loads on our site until you click it. Links to Booking.com, Tripadvisor, LekkeSlaap, Agoda, Facebook and NightsBridge take you to sites that have their own privacy policies. The LekkeSlaap award badge and the Trustindex reviews load from those services’ servers. The Facebook feed and the live Tripadvisor widgets load only after you give consent (see section 6); once loaded, Facebook and Tripadvisor may set their own cookies under their own privacy policies.

6. Cookies

Essential cookies and storage. The site needs a few of these to work: for example, to keep a shopping basket or a logged-in session working, to stop a form being sent twice, and to remember your cookie choice (stored in your browser as “sc_consent” for 12 months). These do not need your consent.

Third-party content (optional). Our Reviews & Awards page and our footer can show a Facebook page feed and live Tripadvisor widgets. These load only if you choose “Accept all”, switch on “Third-party content” under “Preferences”, or click “Load content” on a single item. Once loaded, Facebook and Tripadvisor may set their own cookies under their own privacy policies. If you choose “Reject”, they stay switched off and you see a simple link instead.

No advertising or analytics cookies. We do not use advertising or analytics cookies. If we add website statistics in future, we will update this policy and ask for your consent first.

Changing your mind. You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of every page, or by deleting cookies and site data in your browser. Our approach follows POPIA and is designed to meet the consent standard of the EU General Data Protection Regulation (GDPR) for our guests from Europe. Questions about cookies go to our Information Officer, Quint Kloppers, at quint@spacubeluxurysuites.com.

7. How long we keep it

  • Enquiries that do not lead to a booking: up to 12 months.
  • Booking, payment and invoice records: 5 years, as required by tax law.
  • Spa treatment records: for as long as you are a client and up to 3 years after your last treatment, unless the law requires longer.
  • WhatsApp and email conversations: up to 12 months after the matter is finished.
  • Marketing contacts: until you unsubscribe.

After that, we delete the information or make it anonymous.

8. How we protect it

We use reasonable technical and organisational safeguards. These include secure (HTTPS) connections, password-protected systems with limited access, and service providers bound by confidentiality. If we believe your personal information has been accessed without authority, we will tell you and the Information Regulator, as POPIA requires.

9. Your rights

  • Ask whether we hold personal information about you, and ask for a copy of it.
  • Ask us to correct or delete information that is wrong, out of date or no longer needed.
  • Object to us processing your information, including for direct marketing.
  • Withdraw your consent at any time, where we rely on consent.
  • Complain to the Information Regulator.

To use any of these rights, contact our Information Officer at quint@spacubeluxurysuites.com. We will reply within a reasonable time, and within 30 days at the latest. We may need to confirm your identity first.

10. How to complain

If you are unhappy with how we handle your personal information, please tell us first at quint@spacubeluxurysuites.com so that we can put it right. You may also complain to the Information Regulator (South Africa): inforegulator.org.za/complaints, email POPIAComplaints@inforegulator.org.za or enquiries@inforegulator.org.za, phone 010 023 5200. Postal address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

11. Children

Our website is not aimed at children. We collect information about children only when a parent or guardian gives it to us as part of a booking.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Copyright

All text, photographs and media on this website belong to Spacube or are used with permission. Please do not copy them without our written consent. For permission, email info@spacubeluxurysuites.com.