Privacy

We collect what we need to get you from the airport to your door, and nothing else. This page says what that is. It is written to meet South Africa’s Protection of Personal Information Act (POPIA) and, because most of our travellers come from Europe, the GDPR.

What we collect

When you book we ask for your name, your email, a phone number that works on WhatsApp, your flight number, your pickup and drop-off addresses, the number of passengers, and anything you tell us about luggage or children. If you pay online, the payment provider handles your card details and we never see them.

Why we collect it

Your flight number is how we track your landing. Your phone number is how we send your driver’s name and vehicle, and how your driver reaches you at arrivals. Your addresses are where the ride starts and ends. We do not use any of it for marketing unless you have asked us to.

Who sees it

The driver and the transport operator running your ride see your name, phone number, flight and addresses, because they need them to collect you. Operators run their bookings in ShuttleSync, which is software built and hosted by Naroko. We also use service providers, and each sees only what its job needs. Paystack takes the payment, Meta carries WhatsApp messages, Resend sends email, Google looks up addresses, and Supabase and Vercel host the site and its records. WhatsApp is answered first by an automated assistant run on Anthropic’s Claude, with our team stepping in when needed, and OpenAI turns voice notes into text. Nobody else receives your details, and we never sell them.

How long we keep it

Booking and payment records are kept for five years, which South African tax law asks of us. Our messages with you are kept for a year after your trip, then deleted.

Cookies and analytics

This site uses Vercel Web Analytics, which counts page views without cookies and without identifying you. There is no advertising tracking on the site, and no cookie banner because there is nothing to consent to.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@papayatravel.co.za and a person will answer. If you are in the EU and are unhappy with how we handled your request, you can complain to your local data protection authority. In South Africa, that is the Information Regulator.

Who is responsible

Papaya Travel is a trading name of ShuttleSync (Pty) Ltd, registration number 2026/541651/07.