Whale Coast Mall and its managing agents and owners (“Broll”, HCI Properties”, “Dorpstraat Properties”, “Sandbaai Development Trust”, “Shoprite Checkers”, “we”, “us”, or “our”) is committed to safeguarding the privacy of your personal information or data (“PI”). This Privacy Policy (“Policy”) explains how we process your PI, which means, in relation to your PI, various activities including collecting, receiving, recording, storing, updating, using, transferring or erasing.

This Policy applies to your use of any of our websites, social media channels, mobile applications, forms, surveys and newsletter and forms part of our online terms and conditions. By visiting, participating, subscribing or using our websites,  social media channels, mobile applications, forms, surveys and newsletters you agree to the terms of this Policy as updated from time to time. We will let you know of any material changes to the Policy.


This Policy applies to all data subjects (persons, whether a natural or juristic person, to whom PI relates) (“you”, “your”), who’s PI we collect, regardless of the country where you live or work.

This policy applies to all PI, whether it was provided to us through our websites or through any other form of communications with you such as email, telephone, or otherwise (“Channels”), through or by third parties or tools that collect PI.


PI means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including: information relating to race, gender, marital status, ethnic or social origin, age, disability (mostly as required by labour and credit laws); an identifiable number, e-mail address, physical address, telephone number, identification number, location information, online identifier; education history; biometric information; personal preferences, views or opinions; correspondence of a private or confidential nature; and a name if it appears with other PI relating to you or if disclosing your name itself will reveal information about you.

The PI we collect about you is dependent on (i) the transaction you are completing, (ii) the reason you are communicating with us and (iii) the Channel used to communicate with us. PI may include your: name, contact information including e-mail address, postal address, physical address, primary and secondary telephone numbers, date of birth; employment history, criminal history, ethnic origin, language, gender, age, financial information (as required by law, relating to financial services), biometric information (in order for us to identify you when you contact us or for access into our properties), billing information, education history (if applying for employment), additional information which we are required or permitted by applicable legislation to collect and process, as well as information you elect to share publicly, including on social media and customer forums.


We collect your PI when you:

  • voluntarily provide us with information when you interact with us, for example when you send us online enquiries, or you subscribe to or consent to receiving newsletters or other communications from us;
  • browse, visit or participate in our various Channels;
  • apply for employment through our various Channels;
  • enquire about a service from us;
  • agree to the terms and conditions of credit checks and services that contain provisions dealing with the use or disclosure of your personal information;
  • enter our promotional competitions;
  • make general enquiries, lodge complaints, and communicate with us;

From time to time we collect your PI from trusted third parties, in which case we shall ensure that you have provided your consent for your PI to be disclosed to us.

We collect your banking details (bank name, bank branch, account type, account number) for billing purposes and credit checks. We do no collect or retain your bank card numbers. You are advised to never respond to emails that seem to be from us requesting bank card details as this request is most likely fraudulent and should be reported to us immediately.

We also collect your PI using cookies about when and how you use our websites, or when you click on an advert of ours that is contained on another website. A cookie is a small text file that that is stored on your computer or mobile device when you use it. Cookies hold information such as the identity of the computer or device you used to access our Channels, your server address, domain name, the time and date that you visited our Channels, pages, product and documentation that you accessed or viewed and which internet browser you used. We do this so that we can provide you with more personalised service, communication and products by better understanding your browsing behaviour; track, count and analyse website visits and usage data; understand product preferences and popularity; improve our websites and your online application experience. We use trusted third party services including Google Analytics that collect, monitor and analyse our users’ usage. For more information on how Google collects and uses your data while you make use of our website, visit

To prevent your PI from being used by Google Analytics you can install an opt-out browser add-on (visit for details). Most web browsers can be adjusted to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. Refusing a cookie may, in some cases, preclude you from using, or negatively impact, the display or function of our websites or certain areas or features of our websites.


We use your PI to:

  • communicate with you regarding new services, offers, products, and events that we think may be of interest to you;
  • analyse, develop, continually improve and enhance the use, functionality and performance of our websites and services to manage the security of our sites, networks and systems;
  • comply with applicable laws, including our obligations to make disclosures to authorities, regulators and government bodies;
  • engage in our legitimate business and related interests, including but not limited to detecting and preventing fraud and conducting our business as a property company.

We will not use your PI other than for the purpose for which it was provided or collected, and in accordance with our legitimate interests and legal obligations.

Your PI will be processed mainly in South Africa where our offices are located, however certain PI may be transferred to countries outside of South Africa, for example where we make use of cloud based software services, in which case we shall ensure that the necessary security measures are in place relating to the processing and storage of your PI, where the data protection legislation in that particular country is less favourable than that in South Africa.


We may provide access to or share some of your PI, when necessary and for the reasons that it was provided or collected, to our associates, suppliers, service providers, auditors, consultants and agents if they are required to process it for us and/or to provide services for or to us, including leasing agents and property brokers, credit analysis service providers, e-mail service providers, analytics companies, distribution and courier companies, information hosting, communication providers, development and administration, information technology and related infrastructure services, technical support and other support services relating our legitimate business interests and our contractual obligations to you.

We may share PI with third parties in the event of a re-organisation, merger, sale, joint venture, assignment, transfer or other type of sale of all or any portion of our business, assets or stock.

We are required or may be permitted to provide access to or share your PI in terms of law, court order or other lawful reasons, where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities.

When we share or provide access to your PI with third parties, they are contractually restricted from using or disclosing your PI except as necessary to perform services on our behalf or to comply with legal requirements.


To communicate with you and to attend to your requests, processing of your PI is required and we have a legitimate business interest in processing your PI:

  • to process transactions with customers, suppliers, and agents;
  • to perform a contract with you;
  • to process PI in relation to marketing and promotional activities based on your consent when your PI was collected;
  • pursuant to our legitimate business interest to market and promote our products and services;
  • to analyse, develop, improve and optimize our Channels, products and services, and to maintain the security of our sites, networks and systems;
  • to comply with applicable laws, or
  • to process your opt-out instruction.


We will keep your PI for different periods of time depending on the use or purpose your PI was provided or collected, as well as your preferences regarding marketing, recruitment and other correspondence.

Unless there is a specific law requiring us to keep your PI, we will not keep it for longer than necessary. For details of records that we retain for legal purposes, please email us:

We will safely delete or destroy PI which we are no longer required or not permitted to retain, or for which we do not have your consent.


We will secure the integrity and confidentiality of your PI that is in our possession and under our control by taking the appropriate reasonable technical and organisational measures to prevent loss, damage, unauthorised destruction, unlawful access, or unlawful processing of your PI. In doing so we will have due regard to generally accepted applicable or industry information security practices and procedures. While we strive to use commercially acceptable means to protect your PI, we cannot guarantee its absolute security.

The age requirement for engaging with our Channels is 18 years of age. To the extend required by applicable law, users under the age of 18 years of age must obtain parental or guardian consent. We will afford the same level of protection to all PI processed, regardless of the age of the person the PI pertains to.


You have the following options available to you in respect of your PI that we process:

  • you may inquire from us at no cost whether we hold your PI, as long as you provide us with adequate proof of your identity;
  • where necessary, request the correction, destruction or deletion of your PI;
  • object to, restrict or limit the processing of your PI,
  • object to using your PI for purposes of direct marketing,
  • request to not have your PI used to be sent unsolicited emails.

You can exercise any of your rights listed above by sending an email to If you want to change your email preferences, you can do so by responding to the most recent email that you received from us. Where we have reasonable doubt as to the identity of the person making an enquiry we may request additional information in order to confirm the identity of the person, such as an identity document, including a drivers licence or passport.

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. Should we determine that you are not entitled to exercise a specific right, we will provide you with the reason(s) why.

Should we have reasonable grounds to believe that your PI has been accessed or acquired by any unauthorised person, we shall, as soon as is reasonably possible and lawfully required, notify the applicable regulator/s, as well as yourself, unless we are unable to establish the identity of the PI that has been unlawfully accessed.


This Privacy Policy is effective as of 5 August 2020. The latest version of our Privacy Policy is always available on our Websites. We may need to update or change our Privacy Policy from time to time, and we will notify you regarding any material changes to this Privacy Policy using the channels that we normally use to communicate. Your continued use of our websites, products and services after you have been notified of any amendments to the Privacy Policy will represent your acknowledgment of any changes and your agreement to adhere to the updated Privacy Policy.


Should you have any concerns regarding relating to our privacy policy you may submit an email to We will review your concerns and try to resolve any complaint relating in accordance with this policy and applicable law.

If you live or work in the EU, and if you believe there has been an infringement of your data protection rights, you are entitled to submit a complaint to a data protection authority in the EU Member State where you live or work, where you suspect that there has been an infringement of applicable data protection laws. The contact details of each EU Data Protection Authority can be found at the following website:

We will acknowledge your request as required under applicable data protection laws. However, the rights mentioned in this Privacy Policy are not absolute: the rights do not always apply, and exemptions may be applicable. We will ask you to verify your identity and/or ask you information to assist us in better understanding your request. In the event we do not comply with your request, we will explain why.


Father's Day (Facebook) Competition | Terms and Conditions

1. By participating in the Whale Coast Mall Father’s Day Competition, participants agree to the terms and conditions set out below. The promoter reserves the right to disqualify a participant who does not comply with any of the terms and conditions of the competition.

2. The competition is open to everyone except the following people:

a) a director, member, partner, employee or agent of or consultant to the promoter or any other person who directly or indirectly controls or is controlled by the promoter as well as a supplier of goods or services in connection with the competition; or

b) a spouse, life partner, parent, child, brother, sister, business partner or associate of a person contemplated in paragraph (a).

3. Participants must be a South African citizen or permanent resident with a valid South African photo identification document and must be over the age of 18 years to qualify for entry.

4. This competition is run on behalf of Whale Coast Mall by property management company Broll Property Group.

5. The Competition commences on 20 June 2021 and closes on 28 June 2021 at 17h00. No entries received after 28 June 2021 will be allowed.

6. The prize consists of a hamper, filled with various prizes from tenants within the Whale Coast Mall.

7. To enter, a person needs to visit the Facebook page of Whale Coast Mall, comment on the relevant post, like our page, use the tag option to tag three friends and share the post.

8. The winner selection will take place on Tuesday 06 June 2021, by means of a random draw.

9. Should the organiser of the competition be unable to reach the winner within 12 hours after the random draw takes place the winner will forfeit their prize and another winner will be selected and announced.

1o. The prize must be collected in person by the winner no later than 15 days after notification.

11. In order to collect the prize, the winner must present a valid South African photo identification document.

12. The prize is not transferable and is not exchangeable for cash. No substitution or assignment of the prize is permitted, but the organisers of the Competition reserve the right to substitute the prize with one of comparable value for any reason whatsoever.

13. The judges’ decision is final and no correspondence will be entered into.

14. By entering this competition, the entrant authorises Whale Coast Mall to collect, store and use personal information of entrants for marketing, statistical and communication purposes.

15. All risk and liability pertaining to any prize pass to the winner on signing over and receipt thereof.

16. By entering this competition the entrant indemnifies the Landlord and its agents against any claims based on defective products or services awarded as the prize and the winner further agrees to enforce any rights against the retailer, distributor, importer or producer of such product or against the service provider of the service

17. The winner or participants may be required to take part in publicity campaigns for broadcast or publishing purposes with the winner or participant not being entitled to any payment or other remuneration for such publicity

18. The organisers of the competition reserve the right to cancel or postpone the competition at any time. Queries can be directed to

Passport to Win (Facebook) Competition | Terms and Conditions

1. The promoters of this competition are Broll Property Group and The Blue Room.

2. You may only enter or vote for this competition if you are a citizen and permanent resident of South Africa, and 18 years or over. The winner will be required to present a valid South African ID document in order to accept the prize.

3. The competition will run from Friday, 18 June 2021 until Friday, 30 July 2021. No late entries will be accepted.

4. The winner will be announced on Monday 02 August 2021 , and the winner will be contacted via Facebook Messenger first to get their details, and then telephonically or via email.

5. All entries will be verified by the Marketing Manager. If any discrepancies should arise, the entrant will be disqualified from the competition.

6. The promoters will try to contact the winner each day for seven days following the draw. If the winner cannot be contacted or chooses to decline the prize, another winner will be drawn as soon as possible.

7. To enter the competition: Take a photo of yourself standing on our decals placed at our restaurants; Ocean Creek Spur, Wimpy, The Deli Coffee Co, Best of Asia, and Mugg & Bean and post it to the Facebook competition post comments.

8. The winner of this competition must be willing to collect his/her prize from the tenant and/or centre and/or external organization at a time suitable for the tenant and/or centre and/or external organization. The prize has to be collected within 30 days of being notified of the win.

9. The judges’ decision is final and binding and cannot be appealed. No correspondence will be entered into.

10. You may not enter the competition if you are a director, member, partner, employee, tenant, agent, consultant or supplier to the promoter or their respective spouses, partners, family members, business partners or associates.

11. You may not enter this competition if you have won a prize from Whale Coast Mall within the last 90 days (3 months).

12. The competition prize is a restaurant voucher from a Whale Coast Mall restaurant of your choice.

13. The prize is neither negotiable nor transferable and may not be exchanged for cash and/or a different date.

14. The promoters accept no liability for damaged or lost prizes after they have been accepted by winner.

15. This competition/promotion is a complete release of Facebook by each entrant/participant.

16. We also acknowledge that this competition/promotion is in no way sponsored, endorsed or administered with, Facebook.

17. All queries can be directed to the Marketing Manager by calling 021 553 0315.

18. Should the competition prize referred to above for any reason whatsoever become unavailable, the organisers may award a similar prize in value.

19. The promoters hold the right to alter or cancel any aspect of the competition at any time at its sole discretion without liability.

20. The entrant shall have no claim of whatsoever nature or from whatsoever cause arising as a result of and/or due to the competition and prize against the owners of Whale Coast Mall, their managing agent, or any affiliated company of the aforementioned pertaining to competition.

21. Winners may be requested to allow their name and photograph to be used for publicity purposes, without compensation, but may decline the invitation.

22. By entering a competition, entrants note that they may be sharing “personal information” as defined in the Protection of Personal Information Act 4 of 2013 (“the Act”). The promoters reserve the right to “process”, as defined in the Act, the personal information of the entrant for the purpose of conducting the competition, and the competition entrant, through entering the competition, hereby consents to

such processing. Should an entrant object to such processing and/or would like to access and/or correct a record of the personal information that the promoter holds on them, they may do so by submitting a formal written request to: Entrants hereby hold the promoters harmless from any loss or damage they may suffer as a result of the processing of their personal information.

23. By entering the competition, you are agreeing to all the rules stipulated above.