Reservations

Privacy Policy

In Compliance With
The Protection Of Personal Information Act 4 Of 2013 (“POPIA”)
Effective Date: 15 October 2025

OMRI
REGISTRATION NUMBER

4960314948

PHYSICAL ADDRESS

35 Victoria Road, Camps Bay, Cape Town, 8005, South Africa

Abstract

This document serves as the Privacy Policy (“Policy”) of Omri. We acknowledge that the protection and processing of personal information has become a global phenomenon and poses significant risks. We recognize that the right to privacy enshrined in section 14 of the Constitution of the Republic of South Africa, 1996 (“Constitution”) forms the cornerstone of protection of personal information and guides how we process personal information. Compliance with POPIA is required as of 30 June 2021, and our team is committed to adhering to its provisions in fulfilment of our clients’ instructions. We acknowledge our clients’ right to protection against the unlawful collection, retention, dissemination, and use of personal information, subject to justifiable limitations aimed at protecting other rights and important interests.

1. Key Definitions

The following definitions contained in Section 1 Of POPI are of importance: ‘Data subject’ means the person to whom personal information relates; ‘Information Officer’ means the person(s) as identified in this policy; ‘Personal Information’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to – (A) Information relating to the race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth of the person; (B) Information relating to the education or the medical, financial, criminal or employment history of the person; (C) Any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier, or other assignment to the person; (D) The biometric information of the person; (E) The personal opinions, views, or preferences of the person; (F) Correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; (G) The views or opinions of another individual about the person; and (H) The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person; ‘Processing’ means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including – (a) The collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; (b) Dissemination by means of transmission, distribution or making available in any other form; or (c) Merging, linking, as well as restriction, degradation, erasure or destruction of information; ‘record’ means any recorded information- (A) Regardless of form or medium, including any of the following:- (i) Writing on any material; (ii) Information produced, recorded or stored by means of any tape-recorder, computer equipment, whether hardware or software or both, or other device, and any material subsequently derived from information so produced, recorded or stored; (iii) Label, marking or other writing that identifies or describes any thing of which it forms part, or to which it is attached by any means (iv) Book, map, plan, graph or drawing; (v) photograph, film, negative, tape or other device in which one or more visual images are embodied so as to be capable, with or without the aid of some other equipment, of being reproduced; (B) in the possession or under the control of a responsible party; (C) whether or not it was created by a responsible party; and (D) regardless of when it came into existence; ‘Responsible Party’ means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information; Special Personal Information’ means information relating to the religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life or biometric information or the criminal behaviour of a data subject.

2. Information (Internal)

Should you have any questions, complaints, or suggestions regarding the processing of personal information, please contact Omri’s Information :


Contact Number: 021-892-2980
Email: info@omri.co.za

You may contact the Information Officer regarding:

  • Objections to the processing of your personal information;
  • Requests for deletion, destruction, or correction of your personal information;
  • Submission of complaints relating to the processing of your personal information.

The Information Officer is responsible for:

  • Ensuring compliance with POPIA;
  • Developing, monitoring, and maintaining a compliance framework;
  • Conducting risk analyses at least quarterly;
  • Maintaining a manual in terms of the Promotion of Access to Information Act 2 of 2000;
  • Conducting POPIA training and awareness sessions for employees;
  • Handling all requests relating to personal information and cooperating with the Information Regulator where necessary.

3. Information Regulator (External)

Complaints or requests may also be directed to the Information Regulator:

Email: inforeg@justice.gov.za

4. Action Plan and Information Officers

Omri has undertaken the following steps to ensure POPIA compliance:

  • Conducting risk analysis and developing a POPIA action plan;
  • Appointing an Information Officer and deputy Information Officer(s);
  • Developing and implementing POPIA policies and guidelines for employees;
  • Securing third-party operator undertakings to comply with POPIA;
  • Implementing ongoing monitoring and review processes.

5. Description of Business Activities

Omri operates a luxury restaurant located in Camps Bay, Cape Town, and provides related hospitality services.

6. Processing of Personal Information

Your personal information may be processed solely for the purposes for which it was provided and in line with Omri’s business activities. Providing personal information is not mandatory; however, failure to provide requested information may affect our ability to provide services. By engaging with Omri, you consent to the processing of your personal information as outlined.

7. Retention and Deletion of Personal Information

Records will be retained for 5 (five) years from the date of last entry, as required by SARS, after which they will be securely destroyed or de-identified. Hard copy records will be shredded.

8. Grounds for Processing Personal Information

Omri will rely on the following grounds under Section 11 of POPIA:

  • Consent;
  • Necessary for the conclusion or performance of a contract;
  • Compliance with a legal obligation;
  • Protection of a legitimate interest of the data subject;
  • Pursuit of a legitimate interest of Omri or a third party.

9. Grounds for Processing Special Personal Information

Special personal information (e.g., religious beliefs, race, health, criminal behaviour) will only be processed when legally authorized under POPIA, with special care and security measures.

10. Your Rights

As a data subject, you have the right to:

  • Be informed about the collection and use of your personal information;
  • Request access to your information;
  • Request correction or deletion;
  • Object to processing;
  • Object to direct marketing;
  • Not be subject to decisions based solely on automated processing;
  • Submit complaints to the Information Regulator;
  • Institute civil proceedings in case of unlawful interference with personal information.

11. Your Duty

You are requested to provide accurate and complete personal information and to notify Omri of any changes to your personal information.

12. Forms

Forms available upon request include:

  • Objection to processing;
  • Request for correction or deletion;
  • Consent for direct marketing;
  • Complaint regarding interference with personal information.

13. Conditions for Lawful Processing

Omri is committed to POPIA’s conditions: Accountability, Processing Limitation, Purpose Specification, Further Processing Limitation, Information Quality, Openness, Security Safeguards, and Data Subject Participation.

(Sections 13.1 to 13.8 remain as in the original policy, with references updated to Omri.)

14. Steps in Event of a Compromise

Omri will:

  • Notify service providers;
  • Conduct internal analysis of breach;
  • Notify affected persons and the Information Regulator;
  • Cooperate with all parties to prevent further processing;
  • Review safeguards to prevent recurrence.

15. Cross-Border Transmission of Personal Information

Omri may transmit personal information abroad only with consent, where necessary for a contract, or where foreign laws are equally or more protective than POPIA. Special personal information will not be transmitted internationally.

16. Personal Information of Children

Processing personal information of children will only occur with consent from a competent person or as authorized by POPIA.

17. Account Numbers

Bank account or credit details will not be sold, disclosed, or shared without consent.

18. Newsletters and Direct Marketing

Omri may send marketing communications only to existing/prospective customers or those who have given consent. Communications will identify Omri clearly and allow easy unsubscribe options.

19. Conclusion

Omri is committed to complying with POPIA and protecting client personal information. Contact our Information Officer for any queries regarding personal information.

Yours faithfully,
Omri