Privacy Notice

1. Who we are

LekkerGuest is operated by Just Be Lekker Inc. ("LekkerGuest", "we", "us"), the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA). Address: 2035 Sunset Lake Road Suite B-2, Newark, DE 19702, US. Our Information Officer can be reached at popia@lekkerguest.com.

LekkerGuest provides guest verification, damage protection facilitation, and claims processing for short-term rental hosts. We are a technology facilitator: protection is set and underwritten by your host, not by LekkerGuest, and we are not an insurer.

2. What information we collect

If you are a guest:

• Identity details: full name, ID or passport number, and a copy of your identity document
• Contact details: email address and phone number
• Booking details: property, stay dates, party size, and your booking history on the platform
• Pre-check-in submissions: signed house rules, terms, and any access forms your host requires
• Payment information: a saved payment method held by Stripe, our payment processor. We see only the card brand, last four digits, and expiry, never your card number
• Reviews and ratings that hosts submit about your stays, and your aggregate LekkerGuest Score
• Claims records: incident reports, amounts, your responses, and dispute outcomes
• Communications we send you and technical data needed to keep your account secure

If you are a host:

• Account and business details: name, email, phone, organisation name
• Payout details: a Stripe Connect account holds your banking information; we do not store your bank account numbers
• Property details, booking records, protection settings, claims you lodge, and reviews you submit

3. Why we process it

• To verify who is staying in a host's property before check-in
• To place, release, and capture security deposit holds, and to collect damage waiver fees, on your host's instruction
• To process claims fairly: documenting incidents, giving guests a response window, and settling amounts
• To operate the guest accountability system: reviews from verified stays and the aggregate LekkerGuest Score, which help hosts make informed booking decisions and reward great guests
• To communicate with you about your bookings, protection, and claims
• To prevent fraud, keep the platform secure, and comply with our legal obligations, including financial record-keeping

We process this information because it is necessary to deliver the service you and your host have contracted for, because we or hosts have a legitimate interest (such as verifying guests and preventing damage), with your consent where the law requires it, and to meet legal obligations.

4. Who sees your information

• Hosts you book with see your verification details, ID information, pre-check-in submissions, protection status, and your review history and Score from previous LekkerGuest stays. Reviews shown to hosts do not identify the host who wrote them.
• Guests see their own profile, bookings, claims affecting them, and, after three completed stays, their aggregate LekkerGuest Score. Individual host reviews are not published to guests; you may request a full copy of the information we hold about you at any time (see section 8).
• Service providers (operators) who process data for us: Stripe (payments and payout accounts), Twilio SendGrid (email delivery), and our cloud hosting providers Lovable Cloud / Supabase. Each is bound to protect your information.
• Property management systems, where your host connects one, receive and provide booking information needed to run your stay.
• We do not sell personal information, and we do not share it with advertisers.

5. Where your information is stored

Our systems are hosted on cloud infrastructure located outside South Africa, including in the EU. Where your information leaves South Africa, we ensure the recipient is subject to laws or binding agreements that provide substantially similar protection to POPIA, as section 72 requires.

6. How long we keep it

We keep your information while your account is active and for as long as needed for the purposes above. Financial and claims records are kept for the periods required by tax and financial law. Identity document copies are retained for 3 years after your last completed stay, after which they are deleted. You may request deletion earlier (see section 8); some records must be kept where the law requires it.

7. How we protect it

Encrypted connections, encrypted storage, strict role-based access controls so hosts only see guests with bookings at their properties, and payment credentials held by Stripe, a PCI-DSS Level 1 provider. No system is perfectly secure, but if a breach ever affects your information we will notify you and the Information Regulator as POPIA requires.

8. Your rights

Under POPIA you may, at any time and free of charge, ask us:

• What we hold: request confirmation and a full copy of your personal information (section 23)
• To correct or delete: ask us to fix inaccurate information or delete what we no longer have grounds to keep (section 24)
• To object: object to processing based on legitimate interests (section 11(3))

Email popia@lekkerguest.com and we will respond within a reasonable time, at most 30 days. We will verify your identity first and deliver records only to your verified contact details.

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): enquiries.IR@justice.gov.za · inforegulator.org.za.

9. Cookies and tracking

The LekkerGuest app uses only the cookies and local storage needed to keep you signed in and secure. We do not run third-party advertising trackers.

10. Children

LekkerGuest is not directed at persons under 18. Guests must be 18 or older to complete verification.

11. Changes to this notice

If we change this notice materially, we will tell you by email or in the app before the change takes effect. The current version always lives at lekkerguest.com/privacy-notice.

Questions? popia@lekkerguest.com. We'd rather explain it plainly than have you guess.