Introduction
This website is currently operated under the direction and control of Tourvest Retail and Catering. All references to 'our', 'us', 'we' or 'company' within this policy and within the opt-in notice are deemed to refer to Tourvest Retail and Catering, its subsidiaries, affiliates and associates or any third party which may assume ownership and/or control of this Site and its content. We endeavour to protect your personal privacy. We provide this Privacy Policy to help you to understand what we may do with any personal information that we obtain from you. Your provision of your personal information to us constitutes your acceptance of our Privacy Policy and you agree that we may collect, use and disclose your personal information as described in this Privacy Policy. If you do not accept this, please do not provide your personal details and information to us. This Privacy Policy is incorporated into, and part of, the Terms and Conditions, which govern your use of the Site in general. We will use your information only for the purposes set out below. This Privacy Policy may be updated from time to time, you must ensure that you regularly check this page to ensure that you have read and accepted the most recent version.
What is personal information?
Collecting personal information
On this Site the information and content you may provide us may constitute personal information which you acknowledge was provided freely and voluntarily. You warrant that you are lawfully entitled to provide the information provided and the information provided is true and correct in every respect and indemnify us against claims by third parties in relation to the information provided by you.
Subject to the above, you can decide what personal information you provide to us. We will only collect personal information that you choose to provide. Where relevant and to a reasonable extent, we will enable you to select how we will use this information (for example, by choosing to opt-in or opt-out of receiving special promotional offers or other communications from us). You may choose to provide us with personal information if, for example, you: contact us in person, telephonically or electronically with an enquiry; register on the Site; participate in any initiative, fill out a survey or other form with your personal information included; request us to provide you with information; enter a competition; post information to public areas of the Site or take advantage of a promotion. You have the opportunity to decide whether or not to receive communications from us, except communications required by law or to administer any transaction requested by you, at any point where we request information about you. By providing any personal information to us, you fully understand and clearly consent to the transfer of such personal information to, and the collection and processing of such information in, other countries or territories. Any such transfer and processing by us will be in accordance with this Privacy Policy.
Due to such actions, you may supply us with your (i) name, postal address, email address, phone numbers, (ii) data necessary to process your payment (including the credit card/payment instrument information and personal security code associated with your credit card) for Store purchases or on line purchase of gift vouchers, to reserve purchases to apply for a refund, or to communicate with customer services regarding a refund to the credit card/payment instrument, (iii) flight number, destination, flight date and delivery address for the subscriber and airport location to collect any pre ordered reserve & collect products or make purchases of our products and services in Stores. Demographical data such as your age, gender, country, preferred language, passport number and citizenship, date of birth and country of residence are also collected. You must hold a valid flight ticket to be able to make duty free or duty paid purchases at certain locations. Such information is collected to meet our contractual obligations to our landlord and airport authorities and legal obligations towards customs and other regulatory authorities.
We receive and store information when you visit or use our Websites and Applications or when you access other API service(s) provided by us.
This information includes (but is not limited to) any combination (or all) of the following:
a. IP (Internet Protocol) address(es) of your devices;
b. Logs of URLs (with accompanying timestamps) that your devices have accessed;
c. Version, type and operating system information that your devices automatically send to us;
d. Details of searches that you undertake;
e. Details of products or services that you visit, browse, or are recommended to you;
f. Details of products that you reserve or purchase with us (your purchasing history);
If you have contacted us by other means, we may additionally collect:
a. Your phone number if you contacted our Customer Contact Centre teams
We also utilise third-party analytics services to help us understand and improve the services that we provide to you. These may include but are not limited to Google Analytics, Adobe Analytics and New Relic. These services may use Cookies and Local Storage services offered by your web browser to temporarily or persistently store information that may identify your access session, your activity while browsing (including clicks, scrolling activity, the amount of time you spend) and to track your usage of our services over multiple visits.
Email Communications: To provide more personalised and interesting email communications, we may receive a confirmation when you open email and Applications or your, if your computer or device supports this capability and you have provided us the appropriate consents to do so.
Use of your personal information
Please note that we will not we will not disclose your personal information without your consent unless disclosure is necessary to prevent a threat to life or health, authorised or required by law, reasonably necessary to enforce the law or necessary to investigate a suspected unlawful activity.
We may use and/or disclose personal information collected from you in one or more of the following ways:
Marketing Communications: We may use your personal information in order to communicate with you about our products and services and those of our subsidiaries, affiliates, and parent companies and any of their related businesses. However, you will be able to choose whether or not to receive such communications when you first provide personal information to us. You will also have an opportunity to unsubscribe whenever we communicate with you. You may also unsubscribe from such communications at any time (see 'Unsubscribe, access, questions and further information' below).
Marketing Analysis: We may use information for internal marketing analysis, for example, to assess trends amongst our consumers or to measure the amount of traffic to our websites. We may also share non-personal information with others, such as regulatory bodies, advertisers, in aggregate anonymous form, which means that the information will not contain any personally identifiable information about you. We will only share identifiable personal information with third parties for marketing analysis with your consent.
Providing services: We need your personal information in order to provide any of our services to you or to fulfil any contractual obligations with your employer.
Contractual Third Party Offers: We may arrange for carefully selected organisations to send you information that may be of interest to you. In such circumstances your personal information may be disclosed to these organisations that will be bound by confidentiality obligations and restrictions on use of personal information. We will obtain your permission before we allow a third party to send you any such communications.
Public (or Interactive) Areas of our Websites: Information that you post on or through the public areas of the Site (e.g., chat rooms, bulletin boards, discussion groups and areas specifically designated for public postings) is generally accessible to, and may be collected and used by, others and may result in unsolicited messages or other contact from others. Users of our websites are encouraged to exercise caution when providing personal information about themselves in public (or interactive) areas of the Site.
Sale or Transfer: In the event of a sale, merger, consolidation, change in control, transfer of substantial assets, financing, reorganisation or liquidation, we may transfer, sell, or assign to third parties information concerning your relationship with us, including without limitation, personally identifiable information that you provide and other information concerning your relationship with us.
Legal Purposes: We may collect, use and/or disclose your personal information if permitted by law or required to do so by law or where we believe such action is necessary in order to detect, protect or defend us and/or other third parties against error, negligence, breach of contract, theft, fraud and other illegal or harmful activity, to comply with our audit and security requirements, and to audit compliance with or corporate policies, procedures, legal and contractual obligations.
Disclosure of your personal information
In addition to disclosures identified in the purposes above, from time to time we may disclose personal information to:
a. Our service providers and subcontractors, including our affiliates, retained to perform functions on our behalf or to provide services to us, such as marketing and advertising; data processing; software development; website hosting and management; information technology and office services; legal, accounting, audit and other professional service providers; and further provided such service provider does not collect, use or disclose the personal information for any purpose other than to perform such functions or to provide services to us or as otherwise required by law;
b. a person or entity, including our affiliates, to whom disclosure is required in order to fulfil one or more of the purposes described above;
c. a person who, in our reasonable judgment, is providing or seeking the information as the authorised or appointed legal agent of the subject individual; or
d. any third party with your consent or where disclosure is required or permitted by law.
Your use of this web site indicates your acceptance of the Terms and Conditions of use of the website, which include this Privacy Policy. Your acceptance of the Terms and Conditions of use of the site, which include this Privacy Policy, constitute the granting of consent to the use and disclosure of your personal information for the purposes set out above.
Security measures to protect your information
We take security seriously and we take precautions to keep your personal information secure. We have put in place appropriate physical, electronic and managerial procedures to safeguard the information we collect. We have no control over the privacy of any e-mail communications while in transit to us. We recommend that you do not include confidential, proprietary or sensitive information in e-mails. In the unlikely event that we believe that the security of your personal information in our possession or control may have been compromised, we may seek to notify you of that development. If a notification is appropriate, we would endeavour to do so promptly under the circumstances, using any contact details provided.
You are reminded that you are responsible for maintaining the strict confidentiality of your account password, and you are responsible for any activity under your account and password. It is your sole responsibility to control the dissemination and use of your password, control access to and use of your account, and notify us when you desire to cancel your account. We will not be responsible or liable for any loss or damage arising from your failure to comply with this obligation.
Unsubscribing, Access, Queries
Third Party Links
The Site may contain links or references to other websites outside of our control. Please be aware that we have no control over these websites and our Privacy Policy does not apply to these Sites. We encourage you to read the privacy policies and terms and conditions of linked or referenced websites you enter. As required, this Privacy Policy will be supplemented by additional legal requirements in jurisdictions where we conduct business.
Nothing in this Privacy Policy or otherwise will create, or add to, any right or claim (whether legal, equitable or otherwise) that any individual or person may have at law or otherwise against the company or any of its directors, officers, employees, agents or representatives; nor will the existence of this Privacy Policy or its application impose or add to any obligations or liability upon the company or its affiliates that it does not already otherwise have under law.
Legal Basis for Processing Personal Information
Your Rights Under POPIA and GDPR
You have the following rights regarding your personal information, subject to certain limitations and exceptions under applicable law:
- Right of access: You may request confirmation of whether we hold personal information about you and request a copy of such information.
- Right to rectification: You may request correction of inaccurate or incomplete personal information.
- Right to erasure: You may request deletion of your personal information, subject to legal and contractual requirements.
- Right to restrict processing: You may request that we restrict the processing of your personal information in certain circumstances.
- Right to object: You may object to our processing of your personal information, including for direct marketing purposes.
- Right to data portability: Where applicable, you may request to receive your personal information in a structured, commonly used, and machine-readable format, and to have that information transmitted to another controller.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw your consent at any time.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, please contact us using the details provided below.
International Data Transfers
Retention of Personal Information
Children's Privacy
Automated Decision-Making and Profiling
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website, analyse usage, and assist in our marketing efforts. You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy: https://tourvestretailservices.com/cookie-policy/
Contact Details for Data Protection Queries
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact our Data Protection Officer: Email: privacy@tourvestretail.com
Complaints
If you believe that your personal information has not been handled in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. United Kingdom Information Commissioners Office (ICO) Website: https://ico.org.uk/ Helpline: 0303 123 1113 EU EU Data Protection Officer Website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en Email: data-protection-officer@ec.europa.eu Helpline: +32 2 299 11 11 South Africa Information Regulator Website: https://www.justice.gov.za/inforeg/ Email: inforeg@justice.gov.za Kenya Office of the Data Protection Commissioner (ODPC) Website: https://www.odpc.go.ke/ Email: info@odpc.go.ke Nigeria Nigeria Data Protection Commission (NDPC) Website: https://ndpc.gov.ng/ Email: nfo@ndpc.gov.ng
Notification of Changes to this Policy
Use of Google reCAPTCHA
We use Google reCAPTCHA on our website to protect against spam and abuse. Google
reCAPTCHA helps us ensure that our contact form is submitted by humans and not
automated bots.
When you interact with reCAPTCHA, Google may collect certain information, including:
• Your IP address
• Browser information (type, version, language, plugins)
• Interaction data (mouse movements, clicks, and typing patterns)
• Cookies and device identifiers
This information is transmitted directly to Google and processed according to their
privacy policy. We do not control the data collection performed by Google reCAPTCHA.
Links to Google’s Policies:
• Google Privacy Policy
• Google Terms of Service
How we use the data:
• To verify that form submissions are not automated
• To maintain website security and prevent abuse
We do not use reCAPTCHA data for advertising purposes.
Cookies and Tracking
Google reCAPTCHA may set cookies on your browser to analyze user interactions and
distinguish human users from bots. These cookies are:
• NID / 1P_JAR / SID (example names, may vary)
• Used to store information about your session and interactions
• Expire after a certain period (usually a few months)
These cookies are controlled by Google and not by us. For more information on cookies
used by Google reCAPTCHA and how to manage them, please visit:
• Google Cookies Policy
Managing Cookies
You can manage or disable cookies in your browser settings, but disabling Google cookies
may affect reCAPTCHA functionality
Privacy Policy v1.03 Last updated: October 2025