GDPR Compliance

Last updated: August 2026

Data Controller

rustic-thicket operates as the data controller for personal information collected through this website and our booking services.

Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill booking agreements and deliver wine journey services
• Legitimate interests: To improve services and communicate relevant updates
• Consent: For marketing communications (which you may withdraw at any time)

Data Retention

We retain booking information for seven years to comply with financial record-keeping requirements. Marketing communication data is retained until you withdraw consent.

Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

International Data Transfers

Your data is stored and processed within South Africa. If we transfer data internationally, we ensure appropriate safeguards are in place as required by GDPR.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Exercising Your Rights

To exercise any GDPR rights, contact us at [email protected]. We will respond within one month of receiving your request.

Data Protection Officer

For data protection inquiries, contact our compliance officer at [email protected]