Privacy Policy

Last updated: 1 April 2026

1. Introduction

GHM Suite ("we", "us", or "our") is committed to protecting the personal information of our users in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to that information.

By using GHM Suite at ghmsuite.co.za, you agree to the collection and use of information as described in this policy.

2. Who We Are

GHM Suite is a guest house management platform designed for South African guest house owners. We act as the responsible party ("operator") for the personal information processed through our platform.

Contact: info@ghmsuite.co.za

3. Information We Collect

3.1 Account Information

When you register, we collect your email address and a password (stored securely in hashed form via Supabase Auth — we never store your password in plain text).

3.2 Guest Information

As part of managing your guest house, you may capture personal information about your guests, including:

  • Full name and surname
  • Email address
  • Contact (cell) number
  • ID or approval status

You are responsible for obtaining appropriate consent from your guests before capturing their personal information in GHM Suite.

3.3 Booking Data

We store booking records you create or import, including check-in and check-out dates, room assignments, rates, number of guests (pax), and booking source.

3.4 Calendar Sync Data

When you connect external calendars (Airbnb, Booking.com, LekkeSlaap), we import booking events from those feeds. This may include guest names, booking references, and stay dates provided by those platforms.

3.5 Payment Information

We do not store your full payment card details. Subscription payments are processed by a third-party payment provider. We only store your subscription status, amount paid (in cents), and expiry date.

3.6 Analytics & Cookies

With your explicit consent, we use Google Analytics 4 to collect anonymous usage data such as pages visited, session duration, and general navigation patterns. This helps us understand how GHM Suite is used so we can improve it.

Analytics data is only collected after you have opted in via the cookie consent banner shown when you first visit the site. You can change your preference at any time in Settings → Cookie Preferences.

We use the following storage items:

  • ghm_consent_v1 — a localStorage entry that stores your cookie consent preference (necessary; never expires; contains only your opt-in/opt-out choice and the date it was set).
  • _ga, _gid, _ga_BQ59NGM17S — cookies set by Google Analytics only if you have consented. They expire after 2 years, 24 hours, and 2 years respectively. They collect anonymised data and do not identify you personally.

We do not use cookies for advertising or profiling purposes.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the GHM Suite platform
  • Authenticate your account and keep it secure
  • Sync booking data from connected external calendar feeds
  • Send subscription and billing notifications
  • Respond to support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Storage and Security

Your data is stored securely using Supabase, a database platform that implements row-level security (RLS). This means only your account can access your guest house data — other users cannot view your records.

Data may be stored on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure that it is protected to a standard equivalent to POPIA.

We use industry-standard encryption (HTTPS/TLS) for all data in transit.

6. Third-Party Services

GHM Suite integrates with the following third-party services:

  • Supabase — database, authentication, and edge functions
  • Airbnb, Booking.com, LekkeSlaap — iCal calendar feed imports
  • WhatsApp (via wa.me) — message links opened in your browser; we do not send messages on your behalf
  • Payment processor — for subscription billing
  • Google Analytics 4 — anonymous usage analytics, only activated with your consent. Google's privacy policy applies: policies.google.com/privacy.

Each of these services has its own privacy policy. We encourage you to review them.

7. Data Retention

We retain your personal information and your guest data for as long as your account is active. If you close your account, we will delete your data within 30 days, except where we are required to retain it by law.

8. Your Rights Under POPIA

As a data subject under South African law, you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that inaccurate information be corrected
  • Deletion — request that your personal information be deleted
  • Objection — object to the processing of your personal information
  • Complaint — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@ghmsuite.co.za.

9. Children's Privacy

GHM Suite is intended for use by adult business owners. We do not knowingly collect personal information from persons under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of GHM Suite after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

GHM Suite
Email: info@ghmsuite.co.za
Website: ghmsuite.co.za

← Back to Home