17 March 2008

At South African Airways Vacations ("SAA Vacations"), we are committed to protecting the privacy and confidentiality of the personal information of individuals who use our services ("Client"), as well as those individuals which act as third party travel agents (the "Third Party Agents") for SAA Vacations products and services. In order to comply with applicable privacy legislation and to instill confidence in our Clients and Third Party Agents that the personal information they entrust to us is safe, we have developed this SAA Vacations Privacy Policy. We want our Clients and Third Party Agents to know why we ask for their personal information, how we use it, what safeguards we employ, and how to contact us with privacy-related questions.

PERSONAL INFORMATION AND WHY IT IS COLLECTED:
In this Privacy Policy, "Personal Information" means information that specifically identifies an individual and is provided to, or collected by, SAA Vacations and its staff. Examples of Personal Information, include the Client's or Third Party Agent's name, address, telephone and fax numbers, email address, specific travel reservations, intended destinations, travel preferences, date of birth, marital status, health information, and credit card information. It may also include communications between the Client or Third Party Agent and a member of SAA Vacations and notes concerning these communications.

SAA Vacations collects and uses Personal Information for the following purposes:

. Maintaining a record of our Client's travel plans;
. To facilitate Clients' travel preferences and to better facilitate our Clients' future travel booking with SAA Vacations;
. Meeting our Clients' personal preferences in accommodation;
. To determine eligibility for special SAA Vacations offers and discounts;
. Advising Clients of travel related services offered by, or by arrangement with, SAA Vacations;
. Advising Clients and Third Party Agents of present and future marketing campaigns via newsletters and promotional materials
. Improving the various vacation packages and other travel related goods and services that we offer to our Clients;
. Processing our Clients' billing and accounting information necessary for credit transactions;
. Compliance with all municipal, provincial, federal and other applicable laws; and
. Such other specific purposes which are communicated to the Client by a member of SAA Vacations before collection of such Personal Information.

When Personal Information is to be used for a purpose not previously identified, the new purpose will be identified prior to use.

PERSONAL INFORMATION AND CONSENT:
SAA Vacations will not collect, use or disclose a Client's or Third Party Agent's Personal Information without their knowledge and consent, except in certain extraordinary circumstances. Such extraordinary circumstances shall include without limitation, when legal, medical or security reasons make it impossible or impractical to obtain consent or where it is otherwise in the best interests of the Client or Third Party Agent, as applicable. With respect to a Client, the most common methods we use to obtain consent to collect and use a Client's Personal Information are by the Client providing Personal Information to a member of SAA Vacations over the phone, and by fax. With respect to a Third Party Agent, the most common method used to obtain the consent to collect and use their Personal Information is by the Third Party Agent requesting to sell SAA Vacations products to its customers and clients.

Your Personal Information may be used, shared or disclosed to, from, or with, the credit reporting agencies, credit bureaus, legal and regulatory entities, and/or suppliers of services provided by or through SAA Vacations for the purposes set out above. Our Clients and Third Party Agents may withdraw their consent at any time, subject to any legal or contractual restrictions and reasonable notice. A Client's or Third Party's refusal to provide, or withdrawal of, his/her consent may affect SAA Vacations' ability to provide its products and services to the Client or Third Party Agent. A member of SAA Vacations will inform the Client and/or Third Party Agent of the implications of such withdrawal. To withdraw consent, a Client should contact the Chief Privacy Officer (please see below) in writing at: SAA Vacations, 33 Kern Road , Toronto , Ontario M3B 1S9 Canada or at info@flysaavacations.com .

LIMITING COLLECTION AND RETENTION OF PERSONAL INFORMATION:
SAA Vacations limits the collection of Personal Information to that which is necessary for the purposes identified above in this Privacy Policy as same may be amended from time to time, or for any additional purpose identified to the Client and/or Third Party Agent before the collection of their Personal Information. As well, Personal Information is not used or disclosed for purposes other than those for which it was originally collected, except with the consent of the Client or Third Party Agent, as applicable, or as required by law. Personal information is only retained as long as necessary for the fulfillment of these purposes, after which it is destroyed, erased, or rendered anonymous

ACCURACY:
SAA Vacations strives to ensure that the Personal Information under their control is as accurate, complete, and up-to-date as is necessary for the purposes for which it is used.

SAFEGUARDS:
SAA Vacations has security safeguards in place designed to protect against loss, theft, unauthorized access, disclosure, copying, use or modification of Personal Information in the care of SAA Vacations. The nature of the safeguards depends on the sensitivity, format, location and storage of the information, and such measures include locked cabinets and computer passwords.

ACCOUNTABILITY, OPENNESS AND CLIENT ACCESS:
SAA Vacations is responsible for the Personal Information under its control and has appointed a Chief Privacy Officer to ensure that we comply with all applicable privacy legislation and the terms of this Privacy Policy. The Chief Privacy Officer and those designated by the Chief Privacy Officer (the "Privacy Team") address and investigate questions or concerns regarding a Client's Personal Information. To reach the Chief Privacy Officer or a member the Privacy Team, please call 1-888-722-4872 or email them at info@flysaavacations.com . A copy of this Privacy Policy (and any future updates or amendments) is available at www.flysaavacations.com .

SAA Vacations will provide a Client or Third Party Agent with access to their Personal Information. The Client or Third Party Agent may correct or amend any inaccuracies in their Personal Information. SAA Vacations has the right to refuse a request for access to Personal Information if:

. The information is protected by legal privilege;
. Granting access would reveal confidential commercial information;
. Doing so would reasonably be expected to threaten the life or security of another individual;
. The information was collected for purposes related to the detection and prevention of fraud;
. The information was generated in the course of a formal dispute resolution process;
. The information would likely reveal personal information about another individual;
. Vexation or frivolous;
. The information would prejudice negotiation with you; or
. To protect SAA Vacations' rights and property.

Challenging Compliance
Clients and Third Party Agents are encouraged to discuss any privacy issues with the Chief Privacy Officer or a member of the Privacy Team. Upon request, SAA Vacations will inform individuals on the procedures in place to receive and respond to complaints or inquiries about SAA Vacations' policies and practices relating to the handling of Personal Information.

Changes To This Privacy Policy
SAA Vacations reserves the right to change this Privacy Policy at any time. All Clients and Third Party Agents are encouraged to contact SAA Vacations to establish if any updates have been made to this Privacy Policy, which can be ascertained by the date listed at the top of this Privacy Policy. All updates and amendments to this Privacy Policy can be found at www.flysaavacations.com .

Our website contains links to other sites, which are not governed by this Privacy Policy. On our website, like most other commercial websites, we may monitor traffic patterns, site usage and related site information in order to optimize our web service. We may provide aggregated information to third parties, but these statistics do not include any identifiable personal information.

Communicating With Us
You should be aware that e-mail is not a 100% secure medium, and you should be aware of this when contacting us to send personal or confidential information.