Privacy Policy

Last Updated: May 21, 2025

This privacy policy (“Policy”) describes how Conservation Mag (Pty)LTD in South Africa (“Company,” “we,” and “our”) processes, collects, uses and shares personal data when using this website (the “Website”). Please read the following information carefully to understand our practices regarding your personal data and how we will process data in compliance with applicable data protection laws, including the South African Protection of Personal Information Act, 4 of 2013 (“POPIA”) and, where applicable, the General Data Protection Regulation (“GDPR”).

Introduction

This privacy policy (“Policy”) describes how Conservation Mag (Pty)LTD in South Africa (“Company,” “we,” and “our”) processes, collects, uses and shares personal data when using this website (the “Website”). Please read the following information carefully to understand our practices regarding your personal data and how we will process data.

Purposes of Processing

What is personal data? We collect information about you in a range of forms, including personal data. As used in this Policy, “personal data” (or "personal information" as defined in POPIA) includes any information which, either alone or in combination with other information we process about you, identifies you as an individual, including, for example, your name, postal address, email address and telephone number. This definition aligns with POPIA and, where applicable, the GDPR.

Why do we need your personal data? We will only process your personal data in accordance with applicable data protection and privacy laws, including POPIA. We need certain personal data in order to provide you with access to the Website. If you registered with us, you will have been asked to agree to provide this information in order to access our services, purchase our products, or view our content. Where we require your consent to process your personal data (for example, for certain types of cookies or direct marketing), this consent provides us with the legal basis (or lawful ground of processing under POPIA) we require under applicable law to process your data. You maintain the right to withdraw such consent at any time. If you do not agree to our use of your personal data in line with this Policy, please do not use our Website.

Collecting Your Personal Data

We collect information about you in the following ways:

Information You Give Us. This includes:

• the personal data you provide when you register to use our Website, including your name, postal address, email address, telephone number, username, password and demographic information (such as your gender);

• the personal data that may be contained in any video, comment or other submission you upload or post to the Website;

• the personal data you provide in connection with our rewards program and other promotions we run on the Website;

• the personal data you provide when you report a problem with our Website or when we provide you with customer support;

• the personal data you provide when you make a purchase through our Website; and

• the personal data you provide when you correspond with us by phone, email or otherwise.

Information from Social Networking Websites. Our Website includes interfaces that allow you to connect with social networking sites (each a “SNS”). If you connect to a SNS through our Website, you authorize us to access, use and store the information that you agreed the SNS could provide to us based on your settings on that SNS. We will access, use and store that information in accordance with this Policy. You can revoke our access to the information you provide in this way at any time by amending the appropriate settings from within your account settings on the applicable SNS.

Information Automatically Collected. We automatically log information about you and your computer or mobile device when you access our Website. For example, when visiting our Website, we may log your computer or mobile device operating system name and version, manufacturer and model, browser type, browser language, screen resolution, the website you visited before browsing to our Website, pages you viewed, how long you spent on a page, access times and information about your use of and actions on our Website. This information is collected using cookies and similar technologies, and its collection for analytical and advertising purposes is subject to your consent choices managed through our cookie consent banner, in line with POPIA requirements for consent where applicable.

Automated Decision Making and Profiling. We do not use your personal data for the purposes of automated decision-making that produces legal effects concerning you or similarly significantly affects you, as contemplated by POPIA and GDPR. However, we may do so in order to fulfil obligations imposed by law, in which case we will inform you of any such processing and provide you with an opportunity to object.

Cookies and Consent Management

What are cookies? We may collect information using “cookies.” Cookies are small data files stored on the hard drive of your computer or mobile device by a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them) to provide you with a more personal and interactive experience on our Website.

We use first-party cookies, served directly by us, and third-party cookies, served by service providers on our Website.

Our Use of Cookies When you visit our Website, we use a cookie consent management tool (provided by Silktide) to give you control over the cookies that are placed on your device. We categorize cookies as follows:

1. Necessary Cookies:

   • Purpose: These cookies are essential to provide you with services available through our Website and to enable you to use some of its features. For example, they allow you to log in to secure areas of our Website, maintain your session, and help the content of the pages you request load quickly.

   • Consent: These cookies are active by default and do not require your specific consent as the Website cannot function properly without them (processed based on our legitimate interest or to perform a contract with you). However, you can block or delete them by changing your browser settings, though this may affect how the Website functions.

2. Analytical Cookies (or Performance Cookies):

   • Purpose: These cookies are used to collect information about traffic to our Website and how users use our Website. The information gathered may include the number of visitors, the websites that referred them, the pages they visited, what time of day they visited, whether they have visited before, and other similar information. We use this information to help operate our Website more efficiently, to gather broad demographic information, to monitor the level of activity on our Website, and to improve the Website.

   • Services: We use Google Analytics for this purpose. Google Analytics uses its own cookies. We have implemented Google Consent Mode v2, which means that if you do not consent to Analytical cookies, Google Analytics will operate in a restricted mode, sending aggregate, non-identifying pings to Google. If you consent, standard data collection for Google Analytics will occur.

   • Consent: These cookies are only placed on your device if you provide your explicit consent through our cookie consent banner, as required by POPIA for such processing.

3. Advertising Cookies (or Targeting Cookies):

   • Purpose: These cookies track your browsing habits to enable us and third parties to show advertising which is more likely to be of interest to you. These cookies use information about your browsing history to group you with other users who have similar interests. Based on that information, and with our permission, third-party advertisers can place cookies to enable them to show adverts which we think will be relevant to your interests while you are on our Website and on third-party websites. This category also includes cookies used by affiliate linking services.

   • Services: This category includes cookies from services such as Pinterest (for interest-based advertising and content sharing analytics if you consent), GetYourGuide (for personalized recommendations and affiliate tracking if you consent), and Geniuslink (for affiliate link tracking and monetization if you consent). We use Google Consent Mode v2, which communicates your consent choices for advertising cookies to Google advertising services. If you do not consent, you may still see ads, but they will be less personalized.

   • Consent: These cookies are only placed on your device if you provide your explicit consent through our cookie consent banner, as required by POPIA.

Social Media Cookies: These cookies may be used when you share information using a social media sharing button or “like” button on our Website, or you link your account or engage with our content on or through a social networking website such as Facebook or Twitter. The social network will record that you have done this. The use of these cookies may be dependent on your consent choices for Advertising or Analytical cookies, as managed through our cookie banner, and your settings on the respective social media platforms.

Managing Your Cookie Preferences: You have control over your cookie preferences. When you first visit our Website, you will be presented with a cookie consent banner where you can choose to accept or reject cookies by category (Analytical and Advertising). Necessary cookies are always active.

You can change your cookie preferences at any time by:

• Accessing the cookie settings link or icon, typically found in the footer of our Website or via the cookie banner itself.

• Modifying your browser settings. You can typically remove or reject cookies via your browser settings. In order to do this, follow the instructions provided by your browser (usually located within the “settings,” “help” “tools” or “edit” facility). Many browsers are set to accept cookies until you change your settings.

If you do not accept certain cookies or if you disable all but Necessary cookies, you may experience some inconvenience in your use of our Website. For example, we may not be able to recognize your computer or mobile device for certain personalized experiences, and you may need to log in every time you visit our Website if login functionality relies on such cookies.

Further Information on Google Analytics and Advertising Choices:

• You can find out more information about Google Analytics cookies here

• You can find out more about how Google protects your data here

• You can prevent the use of Google Analytics relating to your use of our Website by downloading and installing the browser plugin available via this link: tools.google.com/dlpage/gaoptout (Note: the effectiveness of this tool may interact with your choices made via our cookie consent banner and Google Consent Mode v2).

• You can disable cookies which remember your browsing habits and target advertising at you by visiting youronlinechoices.com/uk/your-ad-choices (for UK/EU users) or other relevant regional opt-out pages.

Advertising

We may use third-party companies to serve advertisements when you visit and use the Website, and engage in affiliate marketing. These activities are subject to your consent choices for Advertising cookies. If consent is given, these companies may collect and use click stream information, browser type, time and date, subject of advertisements clicked or scrolled over during your visits to the Website and other websites in order to provide advertisements about goods and services likely to be of interest to you. These companies typically use tracking technologies (cookies, pixels) to collect this information. Other companies' use of their tracking technologies is subject to their own privacy policies and your consent choices.

Services like Pinterest, GetYourGuide, and Geniuslink may place cookies for advertising or affiliate tracking purposes if you have consented to the "Advertising" cookie category via our cookie consent banner.

Using Your Personal Data

We may use your personal data as follows, always ensuring a lawful basis under POPIA:

• to operate, maintain, and improve our Website, products, and services (lawful basis: legitimate interest; performance of a contract);

• to manage your account, including to communicate with you regarding your account, if you have an account on our Website (lawful basis: performance of a contract);

• to operate and administer our rewards program and other promotions you participate in on our Website (lawful basis: performance of a contract; consent where applicable);

• to respond to your comments and questions and to provide customer service (lawful basis: legitimate interest; performance of a contract);

• to send information including technical notices, updates, security alerts, and support and administrative messages (lawful basis: legitimate interest; performance of a contract);

• with your consent (as required by POPIA for direct marketing by electronic means), to send you marketing e-mails about upcoming promotions, and other news, including information about products and services offered by us and our affiliates. You may opt-out of receiving such information at any time: such marketing emails tell you how to “opt-out.” Please note, even if you opt-out of receiving marketing emails, we may still send you non-marketing emails. Non-marketing emails include emails about your account with us (if you have one) and our business dealings with you (lawful basis: legitimate interest; performance of a contract);

• to process payments you make via our Website (lawful basis: performance of a contract);

• as we believe necessary or appropriate (a) to comply with applicable laws (including POPIA); (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities; (c) to enforce our Policy; and (d) to protect our rights, privacy, safety or property, and/or that of you or others (lawful basis: legal obligation; legitimate interest);

• for analysis and study services (subject to consent for Analytical cookies, lawful basis: consent); and

• as described in the “Sharing of your Personal Data” section below.

Sharing Your Personal Data

We may share your personal data as follows:

• Third Parties Designated by You. We may share your personal data with third parties where you have provided your consent to do so (e.g., by consenting to specific categories of cookies that enable data sharing with those third parties like Pinterest, GetYourGuide, Geniuslink, and analytics/advertising partners).

• Our Third Party Service Providers (Operators under POPIA). We may share your personal data with our third party service providers ("Operators" as defined by POPIA) who provide services such as data analysis (subject to your consent for Analytical cookies), payment processing, information technology and related infrastructure provision, customer service, email delivery, auditing and other similar services. These providers are contractually bound by written agreements to process your data only on our instructions, maintain confidentiality, and implement appropriate security measures as required by POPIA.

• Affiliate Services: If you consent to Advertising cookies, information may be shared with affiliate services like Geniuslink when you click on affiliate links, for the purpose of tracking referrals and commissions.

• Advertising Partners: If you consent to Advertising cookies, information may be shared with advertising partners to show you more relevant ads.

Third Party Sites

Our Website may contain links to third party websites and features (including those of Amazon, Pinterest, GetYourGuide, and links managed by Geniuslink and other). This Policy does not cover the privacy practices of such third parties. These third parties have their own privacy policies and we do not accept any responsibility or liability for their websites, features or policies. Please read their privacy policies before you submit any data to them or consent to their cookies via our banner.

User Generated Content

You may share personal data with us when you submit user generated content to our Website, including via our rewards program, forums, message boards and blogs on our Website. Please note that any information you post or disclose on our Website will become public information, and will be available to other users of our Website and to the general public. We urge you to be very careful when deciding to disclose your personal data, or any other information, on our Website. Such personal data and other information will not be private or confidential once it is published on our Website.

If you provide feedback to us, we may use and disclose such feedback on our Website, provided we do not associate such feedback with your personal data. If you have provided your consent to do so, we may post your first and last name along with your feedback on our Website. We will collect any information contained in such feedback and will treat the personal data in it in accordance with this Policy.

International Data Transfer

Your information, including personal data that we collect from you, may be transferred to, stored at and processed by us or our third-party service providers outside the country in which you reside (including South Africa), where data protection and privacy regulations may not offer the same level of protection as in other parts of the world (e.g., the EEA). By using our Website and consenting to this Policy and our cookie practices, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy, including implementing appropriate safeguards for international transfers where required.

Security

We seek to use reasonable organizational, technical and administrative measures to protect personal data within our organization. Unfortunately, no transmission or storage system can be guaranteed to be completely secure, and transmission of information via the Internet is not completely secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us.

Retention

We will only retain your personal data as long as reasonably required for you to use the Website, to fulfill the purposes for which it was collected (including as described in this Policy), until you close your account/cancel your subscription, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For data collected via cookies, retention periods are determined by the cookie type and your consent choices; you can manage or delete cookies as described in the "Managing Your Cookie Preferences" section. We will not retain personal data longer than necessary unless a longer retention period is required or permitted by law (for example for regulatory purposes).

Our Policy on Children

Our Website is not directed to children under 16 (or a higher age as required by applicable law in your jurisdiction). If a parent or guardian becomes aware that his or her child has provided us with information without their consent (or without verifiable parental consent where required), he or she should contact us. We will delete such information from our files as soon as reasonably practicable.

Your Rights

You have certain rights regarding your personal data, subject to local data protection laws. These may include the right to:

• Opt-out. You may contact us anytime to opt-out of: (i) direct marketing communications; (ii) any new processing of your personal data that we may carry out beyond the original purpose for which it was collected. For cookies, you can manage your consent for Analytical and Advertising cookies at any time via our cookie consent banner.

• Access. You may access the information we hold about you at any time via your profile/account (if applicable) or by contacting us directly.

• Amend. You can also contact us to update or correct any inaccuracies in your personal data.

• Move. Your personal data is portable – i.e. you have the flexibility to move your data to other service providers as you wish, where technically feasible.

• Erase and forget. In certain situations, for example, when the information we hold about you is no longer relevant, is incorrect, or you withdraw consent on which processing is based, you can request that we erase your data.

• Withdraw Consent: Where we process your personal data based on your consent (e.g., for Analytical and Advertising cookies, or marketing emails), you have the right to withdraw that consent at any time. You can manage cookie consent via our cookie consent banner. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, please contact us. In your request, please make clear: (i) what personal data is concerned; and (ii) which of the above rights you would like to enforce. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event, within one month of your request, or as otherwise required by applicable law. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion.

Complaints

We are committed to resolving any complaints about our collection or use of your personal data. If you would like to make a complaint regarding this Policy or our practices in relation to your personal data, please contact us through the information listed on our Website. We will reply to your complaint as soon as we can and in any event, within 30 days (or as otherwise required by applicable law). We hope to resolve any complaint brought to our attention, however, if you feel that your complaint has not been adequately resolved, you reserve the right to contact your local data protection supervisory authority (for example, the Information Regulator in South Africa).

Contact Information

We welcome your comments or questions about this Policy. You may contact us in writing through the contact page on our Website.