Privacy Policy

Last updated: 12 November 2026

Meerhof Winery (“Meerhof”, “we”, “us” and “our”) respects your privacy. This policy explains how we collect, use and protect personal information when you visit meerhofwines.co.za, order wine, contact us, join our Wine Club, or enquire about our restaurant, wine tastings and glamping accommodation.

We process personal information in accordance with South Africa’s Protection of Personal Information Act, 2013 (POPIA).

Who we are and how to contact us

This policy covers the Meerhof Winery website and the information we receive in connection with our services.

For privacy questions or requests, please contact us and mark your message Privacy / Information Officer:

• Email: restaurant@meerhofwines.co.za
• Telephone: +27 (0)22 125 0422 or +27 (0)22 125 0423
• Location: Meerhof Winery, on the R46 outside Malmesbury, Riebeek Valley, Western Cape, South Africa
• Website: meerhofwines.co.za

Information we collect

The information we collect depends on how you interact with us.

Wine orders, delivery and collection. We collect your name, email address, telephone number, billing and delivery addresses, products and quantities ordered, order notes, payment references and order history. Where you order for someone else, we receive the recipient’s delivery and contact details. Please make sure you are entitled to give us their information and let them know about this policy.

Payments and refunds. Checkout currently offers direct bank transfer. We use payment references and, where needed, proof of payment to reconcile orders. If we need banking details to arrange a refund, we will request only the information needed for that purpose. Please do not send banking passwords, PINs or card security codes through our contact form or email.

Enquiries and bookings. When you contact us about wine, restaurant visits, tastings or glamping, we collect the details you provide, such as your name, contact information, preferred dates, booking requirements and correspondence. Please share only information relevant to your enquiry. If you provide dietary, accessibility or health-related requirements, we use those details only as necessary to respond to the request and arrange the service, with an appropriate lawful basis.

Wine Club. Our subscription form requests your name and email address. We also use membership correspondence and your communication preferences to administer the club and send club updates.

Website use. Our website and service providers may collect technical information such as your IP address, browser and device information, pages visited, interactions, referring pages and access times. Cookies and similar technologies help operate the basket, maintain sessions, measure website use and prevent abuse.

We generally collect information directly from you. We may also receive information from a person booking or ordering on your behalf, our delivery providers, our bank, or an accommodation booking platform handling your reservation.

Why we use your information

We use personal information to:

• Process wine orders, confirm payments, arrange delivery or farm collection, and handle returns and refunds.
• Answer questions and manage restaurant, tasting and accommodation enquiries or bookings.
• Send order confirmations, delivery updates and other service messages.
• Administer Wine Club membership and send permitted club news and offers.
• Maintain and improve the website, understand visitor activity, and detect spam, fraud and technical problems.
• Keep required business records, meet legal obligations and resolve disputes.

Depending on the purpose, processing is based on your consent, steps needed to enter into or perform a contract, a legal obligation, or a legitimate interest recognised by POPIA. Providing information is generally voluntary, but we may be unable to fulfil an order, arrange a booking or answer a request without the necessary details. Wine Club membership is optional and is not required to purchase wine or make a booking.

Wine Club and marketing

Joining the Wine Club allows us to send the club communications described at signup, including membership information, wine news and offers. Electronic direct marketing must have your consent or meet the requirements of an applicable legal exception.

You can ask us to stop marketing at any time by using an unsubscribe option in the message, where available, or emailing us with Unsubscribe in the subject line. This does not stop service messages about an existing order or booking. We may retain a limited record of your opt-out so that we can respect it.

Who receives your information

We share information only where needed for the purposes described in this policy or where the law permits or requires it. Recipients may include:

• Couriers and delivery partners, who need delivery names, addresses, telephone numbers and relevant instructions.
• Hosting, website maintenance, email and other technology providers supporting the website and our communications.
• Banks, accountants and professional advisers assisting with payments, records or disputes.
• Accommodation booking platforms involved in your reservation.
• Authorities or other parties where disclosure is legally required or necessary to establish, exercise or defend legal rights.

Access should be limited to what each recipient needs. Providers processing information on our behalf must be subject to appropriate confidentiality and security arrangements. We do not sell personal information or supply our Wine Club list to other businesses for their independent marketing.

Glamping reservations and third-party websites

You can enquire about glamping directly with Meerhof or follow our link to book through LekkeSlaap. When you use LekkeSlaap, that platform’s own privacy policy and booking terms apply to information you give it. We receive the reservation details needed to manage your stay.

Our site also links to services such as Google Maps, Instagram, Facebook and Tripadvisor. Following those links takes you to services with their own privacy practices. Embedded third-party features may receive technical information when loaded or used. Please review the relevant provider’s policy before submitting information.

Cookies, Google Analytics and reCAPTCHA

We use cookies and similar technologies for website functionality, including remembering basket contents and maintaining your session. Blocking these technologies can affect shopping and checkout.

The website uses Google Analytics to help us understand visitor activity and improve the site. Analytics may involve cookies or similar identifiers and information about your device, browser and interactions. We do not need your order contact details to understand general website usage.

Our forms use Google reCAPTCHA to help distinguish genuine visitors from automated abuse. This service may process technical and interaction information, including IP addresses and browser or device signals. Google’s processing is explained in its Privacy Policy.

You can manage or delete cookies through your browser settings. These settings may not stop all technical data processing by embedded services. Contact us if you need more information about the technologies used on the site. Consent will be requested where legally required; this policy does not replace a separate consent choice.

Processing outside South Africa

Some technology providers, including Google, operate internationally. Information may therefore be processed outside South Africa. Where we transfer information internationally, the transfer must meet POPIA’s requirements, such as appropriate legal or contractual protection, valid consent, or another permitted basis. Contact us for information about the safeguards applicable to your information.

How long we keep information

We retain personal information only for as long as necessary for its purpose or as required or permitted by law. Retention depends on the type of record, the service provided, applicable accounting and tax requirements, and any outstanding complaint or dispute.

Order and payment records may need to be retained after an order is complete. Booking and enquiry records are kept for the period needed to administer the service and deal with related issues. Marketing details are kept while there is a lawful basis to use them, with limited opt-out records retained where necessary. Information no longer needed should be securely deleted, destroyed or de-identified.

Keeping information secure

We take reasonable technical and organisational steps to protect personal information against loss, misuse, unauthorised access and disclosure. No website, email service or storage system can guarantee absolute security. If a security compromise affects your information, we will assess it and notify the Information Regulator and affected people where POPIA requires this.

Your privacy rights

Subject to applicable legal requirements and exceptions, you may:

• Ask whether we hold personal information about you and request access to it.
• Request correction of inaccurate information or deletion of information we are no longer entitled to retain.
• Object to certain processing, including use for direct marketing.
• Withdraw consent where processing depends on it, without affecting lawful processing before withdrawal.
• Complain to the Information Regulator.

Please send requests to the contact details above. We may need proportionate proof of identity before releasing or changing records. Where a record must be retained by law, we will explain any limit on a deletion request.

Children and age-restricted services

Wine purchases and Wine Club membership are restricted to people aged 18 or older. We may need to confirm eligibility for these services. This restriction does not mean that all hospitality or accommodation services are adults-only. Where information about a child is needed for a family booking, it should be provided by a parent, guardian or other competent person and processed only where legally permitted.

Complaints and policy updates

Please contact us if you have a concern about how we handle your information. You may also complain directly to South Africa’s Information Regulator:

• Website and complaint procedure: inforegulator.org.za/complaints
• POPIA complaints: POPIAComplaints@inforegulator.org.za

We may update this policy when our services, website technologies or legal obligations change. The latest version will appear on this page with an updated revision date. An update does not itself provide consent for a new use that requires your permission.