Privacy policy
How I collect, use and protect your personal information, in line with South Africa’s Protection of Personal Information Act (POPIA). Last updated 5 October 2026.
1. Who we are
This website, discovertravel.co.za, is the personal website of Michelle Liebenberg, an Independent Travel Advisor based in Cape Town, South Africa, who works with Envoyage. In this policy, “we”, “us” and “I” mean Michelle Liebenberg.
Michelle is the responsible party for the personal information collected through this website and is its Information Officer. You can contact her at michelle.liebenberg@envoyage.co.za about anything in this policy.
When you go on to book a trip, Envoyage and the travel suppliers involved also handle your information. Envoyage’s own privacy policy applies to that: join.envoyage.com/za/privacy.
2. What we collect
We only collect what you type into a form or send us, plus the minimum technical data needed to keep the site working and safe.
| Where | What we collect |
|---|---|
| “Plan my trip” form (Contact page) | Name, email, phone number (optional), how you’d like a reply, trip style, destination, dates, number of adults, children and infants, budget range, your message |
| Deal enquiry form (each special deal) | Name, email, phone number (optional), how you’d like a reply, number of travellers, travel dates, your message, which deal you asked about |
| Newsletter sign-up | Email, optional first name, what you’d like to hear about (deals, travel stories, news), and when you confirmed |
| Emails you send us | Whatever you include |
| Every visit (technical) | IP address, browser type and time of the request, used briefly for security, spam protection and limiting repeated form submissions |
Please don’t send passport numbers, ID numbers or card details through the website; Michelle will ask for booking details securely when you book.
3. How we use it
We use your information only to answer your enquiry, plan and quote your trip, and keep in touch about it.
- Replying to you and quoting: because you asked us to (POPIA section 11(1)(a) consent and 11(1)(b), steps towards a contract you asked for).
- Sending a copy of your request to you: so you have a record and can spot a mistyped email address.
- Newsletter: only if you opted in and confirmed (see section 4).
- Keeping the site safe: blocking spam and abuse (our legitimate interest, section 11(1)(f)).
We do not sell, rent or trade your information, and we do not use it for automated decisions about you.
4. Newsletter and updates
We only send travel deals, new stories or news by email if you ask for them. This follows POPIA section 69 on direct marketing.
- You opt in: the sign-up box is never pre-ticked, and you choose the topics (deals, travel stories, news).
- You confirm: we email you a link, and nothing is sent until you click it. This proves the address is yours.
- You can leave any time: every email has an unsubscribe link that works in one click. You can also change your topics or email us.
- What we keep: your email, optional first name, chosen topics, and the date and time you signed up and confirmed (our proof of consent).
Asking for a quote does not sign you up for the newsletter.
5. Who we share it with
Your information is shared only with the services that run the website, and with travel partners once you decide to book.
| Who | Why | Their role |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores form submissions and newsletter sign-ups, sends the website’s emails, and runs the “I’m human” check | Operator acting on our instructions |
| Envoyage | Michelle’s travel brand; handles bookings, payments and supplier contracts | Its own privacy policy applies once you book |
| Airlines, hotels, cruise lines, tour operators, insurers | Only the details needed for the trip you book | Their own privacy policies apply |
| Authorities | Only if the law requires it |
Our emails to you are sent from Michelle’s Envoyage address or from deals@discovertravel.co.za.
6. Where it is stored
Form submissions and newsletter sign-ups are stored in a Cloudflare database located in Western Europe, outside South Africa. Cloudflare’s network, which delivers the website, operates worldwide.
Under POPIA section 72 we only send personal information abroad where it is protected by law or binding agreements at least as strong as POPIA. Cloudflare is bound by the EU General Data Protection Regulation and its data processing agreement. By sending us a form you also agree to this transfer.
7. How long we keep it
We keep information only as long as we need it, then delete it.
| Information | Kept for |
|---|---|
| Trip requests and deal enquiries | 24 months after you sent them, then deleted automatically (bookings are kept by Envoyage under its own rules) |
| Newsletter sign-ups | Until you unsubscribe; unconfirmed sign-ups are deleted after 30 days |
| Proof of your newsletter consent | Kept for 12 months after you unsubscribe, in case we must show you agreed |
| Technical data (IP address) | Up to 30 days |
You can ask us to delete your information sooner at any time (section 9).
8. How we protect it
We take reasonable technical and organisational steps to keep your information safe (POPIA section 19).
- The whole website uses encrypted HTTPS connections.
- Only Michelle and her website administrator can see enquiries, through a private admin area that needs a one-time login code.
- Forms are protected against spam and automated abuse.
- Cloudflare stores the data on encrypted, access-controlled systems.
If we ever learn that your information was accessed without permission, we will tell you and the Information Regulator as POPIA section 22 requires.
9. Your rights
You can ask us at any time, free of charge, to:
- tell you what personal information we hold about you;
- correct it if it is wrong or out of date;
- delete it, unless we must keep it by law;
- stop using it for a particular purpose, including direct marketing.
Email michelle.liebenberg@envoyage.co.za and we will reply within 30 days. We may ask you to confirm who you are first.
If you are unhappy with how we handle your information, you may complain to the Information Regulator (South Africa): POPIAComplaints@inforegulator.org.za.
10. Cookies, statistics and spam protection
The website does not use advertising or tracking cookies, so there is no cookie banner.
- “I’m human” check: our forms use Cloudflare Turnstile to stop spam robots. It checks your browser privately, without puzzles or tracking you across other websites.
- Visitor statistics: the website counts how often each page is viewed, which website or app a visit came from (for example Google or Instagram), the country, and the type of device. These are totals per day only: no cookies, no IP addresses and nothing that identifies you.
11. Children, other websites and changes
- Children: the website is meant for adults planning travel. If you include a child’s details (for example ages for a family trip), please only share what is needed for the quote. A parent or guardian must agree to it.
- Other websites: links to Envoyage, social media and travel partners lead to sites with their own privacy policies.
- Changes: we may update this policy. The date at the top shows the latest version, and big changes will be shown on the website.
Contact: Michelle Liebenberg, Independent Travel Advisor, Cape Town, South Africa. Email: michelle.liebenberg@envoyage.co.za.