Privacy Policy

This Privacy Policy explains how HeyGuest handles personal information when you use its website or platform. HeyGuest is a digital guest-guide service for accommodation hosts, operated by TL Romburgh as a sole proprietor in South Africa. Read this policy with the HeyGuest Terms & Conditions.

Hosts create digital guides and share them with guests by web link or QR code. Guests generally do not need a HeyGuest account to view a guide. Guides may link to WhatsApp, Google Maps, Google Reviews or other third-party services. Those services have their own terms and privacy practices. HeyGuest does not operate a guest messaging, review or booking system.

Information provided by hosts

• Account details such as name, email address, login and account information.
• Subscription and billing-status information. Payment credentials are handled by the payment provider where applicable.
• Property and guide content, including property details and address, Wi-Fi information, check-in instructions, house rules, contact details, recommendations, photos, logos, videos, links and other uploaded material.

Technical information

We or our technology providers may process technical information such as IP address, browser and device type, operating system, access times, pages or guides accessed, usage logs and security information. The precise information depends on the platform, hosting and tools enabled.

Guest information

Guests are not normally required to submit information or create accounts to view guides. Technical information may nevertheless be processed when a guest visits a page.

• Provide, operate and maintain accounts and digital guest guides.
• Manage subscriptions and coordinate payment processing.
• Provide support and send important service notices.
• Secure the platform, prevent misuse, investigate faults and troubleshoot issues.
• Understand service usage and improve the platform.
• Measure marketing and advertising performance where tracking tools are enabled and lawfully used.
• Meet legal obligations and establish, exercise or defend legal claims.

We do not use guest access to a guide to create guest marketing profiles as a standard feature. If we introduce materially different processing, such as an AI chatbot or new analytics tools, we will update our notices as appropriate.

The website or platform may use essential technologies for security, login, session management and core functionality. Basic platform analytics may also be available through the tools used to operate HeyGuest.

HeyGuest intends to use Meta Pixel for advertising measurement and marketing performance. Whether and where the Pixel is active, and how consent is collected, must match the actual website and app configuration. Where applicable law requires consent before non-essential tracking, that tracking should not run before required consent is obtained. A separate Cookie Policy and preference controls may be introduced.

This policy is not a substitute for a working consent mechanism where legally required. We do not claim that Google Analytics, Google Tag Manager, TikTok tracking or an AI chatbot is active as part of HeyGuest at the date of this policy.

We aim to handle personal information in accordance with South Africa's Protection of Personal Information Act, 2013 (POPIA), and other applicable privacy laws. Depending on the context, processing may be necessary to provide the service or perform a contract, comply with a legal obligation, protect legitimate interests, or take place with consent where required.

Hosts decide what personal information to include in guides and are responsible for ensuring its publication is lawful. Hosts should publish only information they are authorised to share.

A guide shared by link or QR code may be accessible to anyone who obtains that link. Some sections may support PIN protection; hosts should verify the available settings and should not assume every guide or section is private.

Do not place alarm codes, keysafe codes, passwords, identity numbers, financial details or other sensitive security information in publicly accessible sections. Use available protection features carefully and share access details only with intended recipients.

We use reasonable measures intended to protect information, but no online service can guarantee absolute security. Hosts should use strong, unique passwords and promptly contact us if they suspect unauthorised account access.

The HeyGuest application and its data are hosted through Base44. OneGrid is used for the domain, email and separate marketing website. Payment processing will be handled through Paystack or another supported provider if and when configured. Meta may receive information through Meta Pixel where it is active.

Providers may process information under their own terms and privacy documentation, including in countries other than the user's country. Actual providers, settings and data locations may change. We will take steps required by applicable law for relevant transfers and service-provider arrangements.

We may send essential emails about account access, billing, security, policy changes or service operation. Promotional emails, product tips and offers will be sent only where the recipient has opted in or another lawful basis applies. Marketing emails will include an unsubscribe method. Unsubscribing will not stop essential service communications.

We retain information for as long as reasonably necessary to provide the service, manage accounts, resolve disputes, meet legal obligations and maintain appropriate business records.

You may request account deletion by emailing hello@heyguest.co.za or using a deletion option if available. Our intended process includes a 30-day cooling-off period during which the account and guides may remain accessible and the request may be cancelled. After that period, we intend to delete the account and associated guide content, except information retained for legal, security, accounting or legitimate business purposes.

The 30-day process and self-service controls depend on platform implementation. Deletion from active systems may not immediately remove copies in routine backups. Downgrading to Free is not the same as account deletion.

Subject to applicable law, you may have rights to request access to, correction of or deletion of personal information, object to certain processing, withdraw consent where processing relies on consent, or complain to the relevant regulator. We may need to verify your identity before acting.

To make a privacy request, email hello@heyguest.co.za. If your request concerns information a host chose to publish in a guide, identify the relevant guide and information so we can assess it and, where appropriate, direct the request to the responsible host.

HeyGuest is intended for adult hosts and business users and is not designed for children under 18. You must be at least 18 to create an account.

We may update this policy as the service, providers or legal requirements change. The latest version will be published on the HeyGuest website with its updated date. Material changes will be communicated where appropriate.

TL Romburgh, trading as HeyGuest (sole proprietor)
2 Koringland Street
Swellendam, South Africa
hello@heyguest.co.za
https://heyguest.co.za/