Studio Stay on Sixty6 — boutique hotel & accommodation in Sandton
Book Direct

Legal

Privacy Policy & POPIA Compliance Notice

Effective 30 April 2026

1. Introduction

Studio Stay on Sixty6 respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013, commonly known as POPIA.

This policy applies to guests, prospective guests, website visitors, suppliers, service providers and any other person whose personal information we may process in the course of operating Studio Stay on Sixty6.

2. Responsible Party

For purposes of POPIA, Studio Stay on Sixty6 is the Responsible Party in respect of the personal information that we collect and process.

This means that we determine the purpose for which, and the manner in which, your personal information is processed.

Our Information Officer or responsible privacy contact can be reached at:

3. Personal Information We Collect

We may collect and process the following types of personal information:

Guest and booking information

  • Full name and surname
  • Contact number
  • Email address
  • Residential or business address
  • Booking dates
  • Number of guests
  • Special requests or preferences
  • Vehicle registration details, where applicable
  • Identity or passport information, where required for verification, security or legal purposes
  • Payment and billing information
  • Company details, where a booking is made on behalf of a business
  • Communication history with us

Website and technical information

When you use our website, we may collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Date and time of website visits
  • Referring website or platform
  • Cookies and similar tracking information

Security-related information

As part of our hotel operations and building security, we may process:

  • CCTV footage in public and access-controlled areas
  • Access records
  • Security incident information
  • Visitor records, where applicable

4. How We Collect Personal Information

We may collect personal information directly from you when you:

  • Make a booking enquiry
  • Complete an online form
  • Make a reservation
  • Contact us by email, telephone, WhatsApp or other communication channels
  • Check in at the property
  • Use our website
  • Subscribe to marketing communication
  • Interact with us through booking platforms or travel agents

We may also receive personal information from third parties, including:

  • Online travel agencies
  • Booking platforms
  • Payment processors
  • Travel agents
  • Corporate booking agents
  • Service providers involved in the reservation or guest experience

5. Purpose of Processing Personal Information

We process personal information for legitimate business, operational, legal and guest service purposes, including:

  • Responding to booking enquiries
  • Confirming and managing reservations
  • Processing payments
  • Issuing invoices, receipts and booking confirmations
  • Communicating with guests before, during and after their stay
  • Providing access to the property and managing check-in/check-out
  • Managing guest requests, complaints and service issues
  • Maintaining security at the property
  • Complying with legal, accounting and tax obligations
  • Preventing fraud, misuse, unauthorised access or unlawful activity
  • Improving our website, services and guest experience
  • Sending marketing communication where permitted by law or where you have consented
  • Managing supplier, contractor and service provider relationships

6. Legal Basis for Processing

We process personal information where one or more of the following applies:

  • You have consented to the processing.
  • Processing is necessary to perform a contract with you, such as a booking or accommodation agreement.
  • Processing is necessary to comply with a legal obligation.
  • Processing protects a legitimate interest of Studio Stay on Sixty6, our guests, staff, property or business.
  • Processing is necessary for the proper administration of our business.

POPIA sets out conditions for the lawful processing of personal information, including accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation.

7. Direct Marketing

We may use your contact details to send you information about Studio Stay on Sixty6, special offers, direct booking benefits or related accommodation services.

We will only send direct marketing where permitted by law, where you have consented, or where you are an existing customer and the communication relates to similar services.

You may opt out of marketing communication at any time by using the unsubscribe option provided or by contacting us directly.

8. Cookies and Website Tracking

Our website may use cookies and similar technologies to improve website functionality, analyse usage and support marketing or advertising activities.

Cookies may collect technical information such as your device, browser, IP address, browsing behaviour and pages visited.

First-party website analytics

We operate our own privacy-respecting, first-party analytics to understand how visitors use our website so that we can improve it. This analytics runs only after you accept analytics cookies via the consent banner shown on your first visit, and it automatically respects your browser’s “Do Not Track” setting.

When enabled, we record information such as:

  • Pages viewed and time spent on each page
  • The website or campaign that referred you to us, including marketing campaign tags (UTM parameters) where present
  • Device type, browser and operating system
  • Approximate location (country, region and city) derived from your IP address — we do not store your full IP address as part of these analytics
  • Interactions with key calls to action, such as clicking “Check Availability”, proceeding to our booking system, or contacting us by WhatsApp, telephone or email

These analytics use a random, anonymous identifier stored in your browser. They do not record your name, contact details or any other directly identifying information, they are not shared with third-party advertising networks, and they are used only by Studio Stay on Sixty6 to measure and improve the performance of our website. We track interest up to the point you click through to book or contact us; we do not track payments or completed bookings through these analytics. Aggregated analytics records are retained only for as long as needed for this purpose and are then automatically deleted.

You can withdraw your consent at any time by clearing your browser’s cookies and site data, or by declining analytics cookies, and you can disable cookies in your browser settings, although this may affect the functionality of the website.

9. Sharing of Personal Information

We do not sell your personal information.

We may share your personal information with trusted third parties where necessary, including:

  • Booking engines and reservation systems
  • Payment processors
  • Accounting and invoicing service providers
  • IT service providers
  • Website hosting providers
  • Email and communication platforms
  • Cleaning, maintenance and operational service providers
  • Security service providers
  • Legal, accounting, insurance or professional advisers
  • Government authorities, regulators or law enforcement agencies where required by law

Where we use third-party service providers, we take reasonable steps to ensure that they process personal information lawfully, securely and only for authorised purposes.

10. Cross-Border Transfers

Some of our service providers, systems or platforms may store or process personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the recipient is subject to appropriate data protection safeguards, contractual obligations or legal protections consistent with POPIA.

11. Security Safeguards

We take reasonable and appropriate technical and organisational measures to protect personal information against:

  • Loss
  • Unauthorised access
  • Misuse
  • Unauthorised disclosure
  • Alteration
  • Destruction

These measures may include access controls, secure systems, password protection, staff awareness, physical security, CCTV, secure record-keeping and limiting access to personal information to those who need it for legitimate business purposes.

No method of transmission or electronic storage is completely secure, but we take reasonable steps to protect personal information in line with our operational requirements and legal obligations.

12. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

This may include retaining information for:

  • Booking administration
  • Guest service history
  • Accounting and tax records
  • Legal compliance
  • Dispute resolution
  • Security and fraud prevention
  • Legitimate business records

When personal information is no longer required, we will take reasonable steps to delete, destroy, de-identify or securely archive it.

13. Children’s Personal Information

We may process children’s personal information where children are included in a booking or stay at Studio Stay on Sixty6.

Where required, this information will be provided by a parent, guardian or responsible adult. We will only process children’s personal information where necessary for booking, accommodation, safety, legal or operational purposes.

POPIA places specific restrictions on the processing of children’s personal information unless a lawful basis applies.

14. Your Rights Under POPIA

Subject to applicable law, you have the right to:

  • Know what personal information we hold about you
  • Request access to your personal information
  • Request correction of inaccurate, outdated or incomplete personal information
  • Request deletion or destruction of personal information, where legally permitted
  • Object to certain processing of your personal information
  • Withdraw consent, where processing is based on consent
  • Object to direct marketing
  • Lodge a complaint with the Information Regulator of South Africa

POPIA gives data subjects rights relating to notification, access, correction, deletion and objection to certain processing.

15. Access, Correction or Deletion Requests

You may contact us to request access to, correction of, or deletion of your personal information.

Please contact us at:

We may need to verify your identity before processing your request. We will respond within a reasonable period and in accordance with applicable law.

16. Complaints

If you believe that your personal information has been processed unlawfully or that your privacy rights have been infringed, you may contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Regulator of South Africa.

17. Third-Party Websites and Booking Platforms

Our website may contain links to third-party websites, booking platforms or payment providers.

We are not responsible for the privacy practices, terms or content of third-party websites. When you use a third-party platform, your personal information may also be processed in accordance with that platform’s own privacy policy.

18. Accuracy of Information

We take reasonable steps to ensure that the personal information we process is accurate, complete and up to date.

You are responsible for providing accurate information and for informing us of any changes to your details.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, technology or operational processes.

The latest version will be published on our website and will apply from the effective date stated above.

20. Contact Details

For questions about this Privacy Policy or the processing of your personal information, please contact:

CallWhatsAppBook