This Privacy Policy explains how Nookas (Pty) Ltd T/A Wineries.co.za, registration number 2025/483565/07, with its address at 24 Black Eagle Road, Onrus, Hermanus, 7201 (“Wineries.co.za”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal information.

This Privacy Policy applies to visitors, users, subscribers, competition entrants, participating wineries, advertisers, business partners and any other persons who interact with Wineries.co.za, including through our website, newsletters, forms, promotions, competitions, blog pages, social media pages and related services.

We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable laws.

1. Responsible Party

For purposes of POPIA, the responsible party is:

Name: Nookas (Pty) Ltd T/A Wineries.co.za
Registration number: 2025/483565/07
Address: 24 Black Eagle Road, Onrus, Hermanus, 7201
Email: hello@wineries.co.za
Website: wineries.co.za

2. Personal Information We Collect

We may collect personal information directly from you when you use our website, complete a form, enter a competition, subscribe to a newsletter, contact us, interact with our content, or otherwise provide information to us.

Depending on how you interact with us, we may collect the following categories of information:

1. identity information, including your name, surname, date of birth and age confirmation;
2. contact information, including your email address, telephone number and delivery address;
3. competition information, including entry details, points or chances, referrals, prize fulfilment information and verification information;
4. marketing preferences, including newsletter subscriptions, opt-ins, opt-outs and communication preferences;
5. technical information, including IP address, browser type, device information, operating system, pages visited, referring pages and website usage data;
6. communication records, including emails, contact form submissions, support requests, complaints and other correspondence;
7. social media information, where you interact with us on social media platforms or engage with our social media promotions;
8. business information, including contact details of wineries, advertisers, suppliers, service providers and business partners; and
9. any other information you voluntarily provide to us.

We may also collect information from third parties where lawful and appropriate, including participating wineries, referral mechanisms, service providers, analytics providers, advertising platforms and publicly available sources.

3. Information Relating to Age and Alcohol

Wineries.co.za may publish or promote content relating to wine, wineries, wine tourism, wine competitions and alcoholic products.

Where alcohol-related competitions, promotions or prizes are involved, we may collect age-related information and may require proof of identity or proof of age.

Alcohol-related competitions, prizes and marketing are not intended for persons under the age of 18. We do not knowingly award alcohol prizes to persons under the age of 18.

If we become aware that we have collected personal information from a child without the required consent or legal basis, we may delete or restrict that information.

4. Why We Collect and Use Personal Information

We process personal information for the following purposes:

1. to operate, manage and improve Wineries.co.za;
2. to provide website content, winery listings, blog content, newsletters, promotions and related services;
3. to respond to enquiries, requests, complaints and support messages;
4. to administer competitions, promotions, giveaways and campaigns;
5. to verify eligibility, identity and age where required;
6. to select, contact and verify competition winners;
7. to arrange prize fulfilment and delivery through participating wineries or service providers;
8. to manage newsletter subscriptions and marketing preferences;
9. to send direct marketing where permitted by law or where you have consented;
10. to analyse website usage, campaign performance and user engagement;
11. to prevent fraud, abuse, automated entries, security threats and unlawful activity;
12. to comply with legal, regulatory, accounting, tax, record-keeping and reporting obligations;
13. to enforce our terms, policies and agreements; and
14. to protect our rights, property, users, business partners and the public.

5. Legal Basis for Processing

We process personal information only where we have a lawful basis to do so. Depending on the circumstances, this may include:

1. your consent;
2. performance of a contract or steps taken at your request before entering into a contract;
3. compliance with a legal obligation;
4. protection of a legitimate interest of Wineries.co.za, a user, a business partner or another person;
5. where processing is necessary for the proper performance of a public law duty by a public body, where applicable; or
6. where processing is permitted or required by applicable law.

6. Competitions and Promotions

If you enter a competition, giveaway or promotional campaign, we may process your personal information to administer the campaign, verify your entry, allocate points or chances, conduct draws, contact winners, verify eligibility and arrange prize fulfilment.

Where a prize is supplied or delivered by a participating winery, we may share the winner’s relevant personal information with that winery for fulfilment and delivery.

We may also keep records of competitions, entries, draws, winners, verification steps and delivery arrangements where required for legal, regulatory or audit purposes.

If we ask winners to provide photographs, testimonials or other publicity content, participation is voluntary unless otherwise stated. We will only use winner images or publicity content where the winner has agreed to such use.

7. Newsletters and Direct Marketing

We may send newsletters, updates, offers, recommendations, competition notifications, winery content, promotional messages and other marketing communications where permitted by law or where you have consented.

You may unsubscribe from marketing communications at any time by using the unsubscribe link in the communication or by contacting us.

We may still send non-marketing communications where necessary, including service messages, competition administration messages, legal notices, security notices and responses to your enquiries.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, scripts, analytics tools and similar technologies to operate the website, remember preferences, understand how visitors use the website, measure campaign performance, improve content and support advertising or remarketing activities.

Cookies may be set by us or by third-party service providers, including analytics, advertising, social media, email marketing and website performance providers.

You can manage or disable cookies through your browser settings. If you disable certain cookies, some website features may not function properly.

Where legally required, we will request your consent before placing non-essential cookies or similar tracking technologies.

9. Analytics, Advertising and Social Media

We may use analytics and advertising tools to understand website traffic, measure the effectiveness of campaigns, improve our content and promote Wineries.co.za.

These tools may collect information such as IP address, device identifiers, browser information, pages viewed, interactions, approximate location and referral sources.

When you interact with us on third-party platforms such as Facebook, Instagram, Google, LinkedIn or other platforms, those platforms may also process your personal information according to their own privacy policies and terms.

10. When We Share Personal Information

We do not sell personal information. We may share personal information where necessary for the purposes described in this Privacy Policy.

We may share personal information with:

1. participating wineries, where needed for competition fulfilment, prize delivery, referrals, campaigns or business collaboration;
2. couriers, delivery providers and logistics partners;
3. website hosting, IT, security, database and cloud service providers;
4. email marketing, customer relationship management and communications platforms;
5. analytics, advertising, social media and campaign measurement providers;
6. payment, billing or accounting service providers, where applicable;
7. professional advisers, including attorneys, accountants, auditors and insurers;
8. regulators, law enforcement bodies, courts, tribunals or public authorities where required by law;
9. business partners, suppliers and contractors who help us provide or improve our services; and
10. another party in connection with a merger, sale, restructuring, transfer or reorganisation of our business or assets.

Where third parties process personal information on our behalf, we require them to process it only as authorised and to apply appropriate confidentiality and security measures.

11. Cross-Border Transfers

Some of our service providers, systems or technology platforms may be located outside South Africa, or may store or access personal information from other countries.

Where personal information is transferred outside South Africa, we will take steps reasonably required by applicable law to ensure that the information receives appropriate protection.

12. Security

We take reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, unlawful processing, destruction or disclosure.

These measures may include access controls, secure hosting, encryption where appropriate, internal policies, confidentiality obligations, monitoring, backups and other safeguards.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to protect personal information in our possession or under our control.

13. Data Breaches

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will take appropriate steps in accordance with applicable law.

This may include investigating the incident, taking containment measures, notifying the Information Regulator and notifying affected data subjects where required.

14. Retention of Personal Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on the type of information, the reason for processing, legal requirements, accounting or tax obligations, dispute periods, audit requirements, competition record-keeping requirements and operational needs.

When personal information is no longer required, we will delete, destroy, de-identify or restrict it where appropriate.

15. Your Rights

Subject to applicable law, you may have the right to:

1. ask whether we hold personal information about you;
2. request access to your personal information;
3. request correction of inaccurate, irrelevant, excessive, outdated, incomplete or misleading personal information;
4. request deletion or destruction of personal information that we are no longer authorised to retain;
5. object to processing of your personal information on reasonable grounds, where applicable;
6. object to processing of your personal information for direct marketing;
7. withdraw consent where processing is based on consent;
8. unsubscribe from marketing communications;
9. request details of third parties or categories of third parties who have had access to your personal information, where applicable; and
10. submit a complaint to the Information Regulator.

We may require proof of identity before responding to a request relating to personal information.

16. How to Exercise Your Rights

To exercise your privacy rights, contact us at:

Email: [insert privacy/contact email address]
Address: 24 Black Eagle Road, Onrus, Hermanus, 7201

Please provide enough information for us to identify you and understand your request. We may ask for additional information where necessary to verify your identity or process your request.

17. Information Regulator

You may lodge a complaint with the Information Regulator of South Africa if you believe that your personal information has been processed unlawfully or that your rights under POPIA have been infringed.

Information Regulator South Africa
Website: https://inforegulator.org.za
Email: enquiries@inforegulator.org.za

18. Third-Party Websites

Our website may contain links to third-party websites, including winery websites, booking platforms, social media platforms, advertisers, partners and external resources.

We are not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policies of those websites before submitting personal information to them.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website and will apply from the date of publication unless otherwise stated.

If we make material changes, we may take reasonable steps to notify users, subscribers or affected persons where appropriate.

20. Contact Details

For privacy-related questions, requests or complaints, please contact:

Nookas (Pty) Ltd T/A Wineries.co.za
Address: 24 Black Eagle Road, Onrus, Hermanus, 7201
Email: [insert privacy/contact email address]
Website: wineries.co.za

Last updated: [insert date]