Legal
LZ Travel Meta App API Privacy Policy
WhatsApp Business Platform & Reservation System Integration
Effective Date: 3 November 2026
Last Updated: 3 November 2026
1. Introduction
Luzuko Travel (Pty) Ltd, trading as LZ Travel ("LZ Travel", "we", "us" or "our"), is a South African travel and tourism company providing luxury transfers, curated tours, chauffeur services and destination management solutions.
We respect your privacy and are committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you communicate with LZ Travel through WhatsApp, including communications integrated with our internally developed reservation management system.
We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act, 4 of 2013 (POPIA).
2. Scope
This policy applies to customers, prospective customers, passengers, travel agents, tour operators, business partners and other individuals who communicate with LZ Travel through our official WhatsApp Business channel.
It covers the processing of personal information through:
• Meta's WhatsApp Cloud API.
• The LZ Travel reservation management system hosted on Microsoft Azure.
• Authorised business systems used to administer bookings and customer communications.
3. Information We Collect
We may collect and process the following information:
• Personal and contact details: Your name, WhatsApp telephone number, email address and contact information.
• Booking information: Reservation references, travel dates, passenger details, flight information, pickup and drop-off locations and requested services.
• WhatsApp communications: Messages, responses, attachments and information shared during conversations with LZ Travel.
• Operational information: Booking confirmations, chauffeur assignments, journey updates and service-related communications.
• Technical information: Message identifiers, timestamps, delivery statuses and related information received through the WhatsApp Cloud API.
We may receive information directly from you or from authorised third parties arranging travel services on your behalf.
4. How We Use Your Information
We process personal information to:
1. Respond to customer enquiries.
2. Prepare quotations and manage reservations.
3. Confirm bookings and provide booking documents.
4. Communicate pickup information and travel arrangements.
5. Dispatch chauffeurs and coordinate transportation services.
6. Respond to booking changes, customer requests and service enquiries.
7. Maintain booking histories and operational records.
8. Resolve customer complaints and provide support.
9. Meet applicable contractual and legal obligations.
10. Send promotional communications where permitted by law and appropriately authorised.
We process information only where there is an appropriate lawful basis.
5. WhatsApp Cloud API and Azure Reservation System
LZ Travel uses Meta's WhatsApp Cloud API to integrate WhatsApp messaging directly with its internally developed reservation management system, hosted on Microsoft Azure.
This integration enables LZ Travel to send booking confirmations and operational notifications through WhatsApp and receive customer responses within its reservation management environment.
When you interact with us through this service:
• Messages are transmitted through Meta's WhatsApp Business Platform.
• Booking-related information may be retrieved from our reservation system to prepare and send relevant communications.
• Booking confirmations and related documents may be delivered via WhatsApp.
• Chauffeurs may receive dispatch notifications containing information necessary to perform assigned services.
• Incoming WhatsApp replies are delivered to the LZ Travel reservation system through an authorised webhook.
• Customer responses may be associated with the relevant booking or job to enable our team to manage enquiries and operational communications.
Meta provides the WhatsApp Cloud API infrastructure. Microsoft Azure provides the hosting infrastructure for our reservation management system.
LZ Travel determines the purposes for which customer information is processed and remains responsible for the personal information it controls.
6. Sharing Personal Information
We may share personal information with authorised parties where necessary to deliver our services, including:
• LZ Travel booking and operational personnel.
• Assigned chauffeurs and tour guides.
• Relevant hotels, tour operators and travel service providers.
• Meta, as the provider of WhatsApp Cloud API infrastructure.
• Microsoft Azure and authorised technical service providers involved in hosting and maintaining our reservation system.
• Regulatory authorities where disclosure is required by law.
Only information reasonably necessary for the relevant purpose should be disclosed.
We do not sell customer personal information.
7. Data Storage and Security
Our reservation management system is hosted on Microsoft Azure.
Information transmitted through the WhatsApp Cloud API may be processed by Meta and delivered to LZ Travel's reservation system through the configured API integration.
LZ Travel takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure.
These measures include appropriate system access controls, authentication, authorised staff access and security procedures.
WhatsApp messages are encrypted during transmission through the WhatsApp platform. Information received and stored within LZ Travel's business systems is subject to the security controls applicable to those systems.
8. Marketing Communications
LZ Travel may send WhatsApp marketing communications, including travel promotions and service offers, where appropriate consent or another lawful basis has been established.
You can opt out of marketing communications by replying STOP or contacting LZ Travel directly.
Opting out of marketing does not prevent us from sending essential service-related communications concerning an existing booking.
9. Data Retention
LZ Travel retains customer and booking information only for as long as reasonably necessary for operational, contractual and legal purposes.
Records maintained in our reservation system may include booking information, relevant communication history, operational updates and documents associated with a reservation.
Information held within Meta's WhatsApp Cloud API infrastructure is subject to Meta's applicable retention practices.
Information stored in LZ Travel's own systems is managed separately according to our business and legal retention requirements.
Where information is no longer required, and no lawful basis for continued retention exists, we will take reasonable steps to delete, destroy or de-identify it.
10. Your Privacy Rights
Under POPIA, and subject to applicable limitations, you may request:
• Access to personal information held about you.
• Correction of inaccurate information.
• Deletion of personal information where legally permissible.
• Withdrawal of consent where applicable.
• Objection to certain processing activities.
• Removal from direct marketing communications.
You may also lodge a complaint with the Information Regulator of South Africa.
11. Data Deletion Requests
Customers may request the deletion of personal information associated with their WhatsApp communications or booking records.
Requests should be sent to:
Subject: Personal Information Deletion Request
LZ Travel will review the request, verify identity where appropriate and determine which records can lawfully be deleted.
Eligible information will be deleted or de-identified within a reasonable period.
Information that must be retained for legitimate contractual, accounting, regulatory or legal purposes may be excluded from deletion until the applicable retention requirements have been satisfied.
Deleting information from LZ Travel's systems does not automatically delete information held on individual WhatsApp devices or information independently retained by Meta.
12. International Data Transfers
As Meta and Microsoft operate international technology infrastructures, personal information may be processed or stored outside South Africa.
LZ Travel will take reasonable steps to ensure that international transfers comply with POPIA, including the requirements of Section 72 where applicable.
13. Children's Personal Information
Our WhatsApp communications are not specifically directed at children.
Where children's personal information is required to arrange travel services, we will process it in accordance with applicable legislation and obtain appropriate authorisation where required.
14. Policy Updates
We may update this policy to reflect changes in our business services, technology, data processing arrangements or legal requirements.
The latest version will be published through our official website.
15. Contact Information
Luzuko Travel (Pty) Ltd t/a LZ Travel
Registration Number: 2023/767043/07
19 Louis Gardner Street
Foreshore, Cape Town, 8000
South Africa
Email: desk@lztravel.co.za
Telephone / WhatsApp: +27 (0) 21 300 1439
Website: https://www.lztravel.co.za
For privacy enquiries, please include Privacy Request in the subject line.
Information Regulator (South Africa):
https://inforegulator.org.za/
© 2026 LZ Travel. All rights reserved.
