At 3Rivers Trails NPC (“3Rivers Trails”, “we”, “our”, or “us”), we respect your privacy and are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your personal information.

By using our website, purchasing products or permits, or using our trails, you agree to the terms of this Privacy Policy.

⸻

1. Who We Are

3Rivers Trails NPC is a non-profit company that manages recreational mountain biking, trail running and hiking trails across private land in the Eastern Cape, South Africa.

⸻

2. Information We Collect

Depending on how you interact with us, we may collect:

Personal Information

* Full name

* Email address

* Telephone number

* Physical address

* Emergency contact information

* Vehicle registration number

* Date of birth (where required)

* Details relating to annual memberships

Payment Information

Payments are processed by secure third-party payment providers.

We do not store your complete credit card or banking details.

Website Information

When visiting our website we may collect:

* IP address

* Browser type

* Device information

* Pages visited

* Time spent on pages

* Referral websites

* Cookies and similar technologies

Purchase Information

* Trail permits

* Annual memberships

* Merchandise purchases

* Event registrations

* Order history

⸻

3. Why We Collect Your Information

We collect information in order to:

* Process permit applications

* Process online purchases

* Deliver products

* Verify memberships

* Contact you regarding trail closures or safety notices

* Respond to enquiries

* Improve our website

* Prevent fraud

* Comply with legal obligations

Where you have opted in, we may also send:

* Newsletters

* Event announcements

* Special offers

* Trail updates

You may unsubscribe from marketing communications at any time.

⸻

4. Legal Basis for Processing

We process your personal information where:

* You have given consent;

* Processing is necessary to fulfil a contract with you;

* Processing is required by law; or

* Processing is necessary to protect our legitimate interests, provided your rights are not overridden.

⸻

5. Cookies

Our website uses cookies to improve your browsing experience.

Cookies may be used to:

* Remember preferences

* Maintain secure login sessions

* Analyse website traffic

* Improve website performance

You may disable cookies through your browser settings, although some website functionality may be affected.

⸻

6. Sharing Your Information

We will never sell your personal information.

We may share information only where necessary with trusted service providers, including:

* Payment gateways

* Courier companies

* Website hosting providers

* Email communication platforms

* Accounting providers

* Professional advisers

* Law enforcement authorities where legally required

All third-party providers are expected to protect your information appropriately.

⸻

7. Data Security

We take reasonable technical and organisational measures to protect your information against:

* Unauthorised access

* Loss

* Theft

* Misuse

* Alteration

* Unauthorised disclosure

While we strive to protect your information, no internet transmission or electronic storage method can be guaranteed to be completely secure.

⸻

8. Data Retention

We retain personal information only for as long as reasonably necessary to:

* Provide our services

* Maintain membership records

* Comply with legal obligations

* Resolve disputes

* Enforce agreements

Information that is no longer required will be securely deleted or anonymised where appropriate.

⸻

9. Your Rights

Subject to POPIA, you have the right to:

* Request access to your personal information;

* Request correction of inaccurate information;

* Request deletion where legally permissible;

* Object to certain processing;

* Withdraw consent where processing is based on consent;

* Lodge a complaint with the Information Regulator.

⸻

10. Children’s Information

Where minors participate in activities, personal information must be provided by a parent or legal guardian.

Parents remain responsible for ensuring the accuracy of information submitted on behalf of minors.

⸻

11. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites.

⸻

12. Changes to this Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.