Responsible party and contact
Marloth Park Central is operated by Elmien Pienaar, sole proprietor / individual trader, Kameelperd Avenue, 1483, Marloth Park, Mpumalanga, South Africa. Privacy and access-to-information requests can be sent to contact@marlothparkcentral.com or through the contact form. The same channel is used for the Head / Information Officer function for MPC records.
Information MPC may collect
- Name, email address, telephone or WhatsApp detail and message content supplied in enquiries.
- For complimentary Companion registration: name, verified email, visitor-supplied Marloth stay or property name, arrival and departure dates, selected edition, registration and licence references, verification and recovery status, and protected delivery records.
- Page, listing, topic or source context connected to an enquiry.
- Consent confirmations and communication or handling status.
- Paid MPC Kidz access records, previous Route Atlas payment/access records, plus adult Route Atlas registration records where registration was deliberately enabled.
- Visitor-review display name, rating, review text, publication consent, moderation status and section context.
- PayPal order, payment, refund and reversal references when a PayPal payment is used, plus payer name or email returned by PayPal where provided for transaction reconciliation.
- Security and abuse-prevention data such as time, user-agent information and pseudonymised or one-way network identifiers used to limit abusive submissions.
- Operational records, backups, support correspondence and security records.
Why information is processed
MPC processes information only for defined operational purposes: responding to enquiries; registering, verifying, licensing, delivering and recovering complimentary Companion access requested by an adult visitor; creating or restoring other access requested by an adult visitor; moderating reviews; providing, reconciling and supporting payments; preventing abuse; securing the website; keeping accounting and transaction evidence; correcting content; handling legal or privacy requests; and maintaining business records. Where consent is requested for a specific submission or publication, MPC records that choice.
PayPal and payment information
PayPal is the external payment provider for enabled support and fixed digital-access payments. Payment approval takes place with PayPal. MPC does not collect or store full card numbers, card security codes or online-banking credentials. MPC stores only the transaction, purchased-product access and customer-reference information needed for reconciliation, support, refund or reversal handling, fraud prevention and records. PayPal processes information under its own privacy terms for its payment services.
Who may receive information
Information is accessible only where needed for MPC operations and may be processed by hosting, database, email, analytics/security and payment service providers acting under their own legal duties or service arrangements. MPC may disclose information where lawfully required, to protect rights or safety, or to investigate fraud or abuse. MPC does not sell personal information to advertisers.
International processing
Some technology or payment providers may process information outside South Africa. MPC selects established providers and uses the information only for the stated service purpose, with contractual, technical or provider safeguards appropriate to the service and applicable law.
Retention and deletion
MPC keeps records only for as long as reasonably required for the purpose collected, transaction/accounting evidence, dispute handling, security, recovery, legal obligations or legitimate record-keeping needs. Retention periods can differ by record type. When records are no longer required, MPC may delete, de-identify or securely archive them where lawful. Backups may retain a record for a limited technical cycle before expiry.
Security
MPC uses access controls, private storage, restricted administration access, validation, rate controls, encrypted transport, private payment credentials, transaction records and other reasonable safeguards appropriate to the service. No internet system can be guaranteed risk-free. If MPC has reasonable grounds to believe a security compromise involving personal information requires notification under applicable law, it will follow the required regulator and affected-person notification process.
Your privacy rights
Subject to applicable law, a person may request confirmation of whether MPC holds personal information about them, request access, ask for correction or deletion of inaccurate or outdated information, object to certain processing, withdraw a consent where processing depends on that consent, or raise a complaint. MPC may need proof of identity or authority and may retain information that law requires or permits it to keep.
Cookies, sessions and analytics
MPC may use necessary cookies or browser records for paid digital access and protected administration access, together with privacy-aware analytics for website operation and improvement. Public emergency and safety information is not made conditional on advertising cookies. Sensitive form submissions are not intentionally placed into public URLs or public analytics data.
Complaints and regulator access
You may first contact MPC so the matter can be investigated. Applicable complaint rights through South Africa's Information Regulator or other competent authority remain available. The current public access process for MPC records is described in the PAIA Manual.
Last reviewed: 26 August 2026.