Privacy Policy — Rush and Playstation by Rush

Last updated: 21 May 2026

Rush Extreme Sports (Pty) Ltd (registration number 2015/036681/07) trading as Rush and Playstation by Rush (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (“POPIA”) and other applicable South African laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or use our websites rushextreme.co.za, rushsa.co.za, and our Playstation by Rush web presence (collectively the “sites”), including through the use of cookies and similar tracking technologies. It applies to these sites only.

  1. Who we are

Rush Extreme Sports (Pty) Ltd is the responsible party for the personal information collected through these sites. We operate Rush Extreme adrenaline parks and the Playstation by Rush family entertainment park in South Africa. If you have questions about this Privacy Policy or how we handle personal information, contact us using the details in Section 13.

  1. Information we collect

We may collect personal information you provide to us directly, such as your name, email address, phone number, account details, booking and party details, child name and age where relevant to a booking, and any information you include when you contact us, submit an enquiry, subscribe to a newsletter, or make a booking.

We also collect information automatically when you use the sites, including your IP address, browser type, device information, pages visited, referring URLs, approximate location, session details, and cookie identifiers.

  1. How we use personal information

We use personal information to:

  • provide and operate our sites, bookings, and park services;
  • process enquiries, bookings, party packages, payments, and customer support requests;
  • send administrative and service-related communications, including booking confirmations and updates;
  • improve site performance, usability, and content;
  • personalise your experience;
  • detect fraud, abuse, and security incidents;
  • comply with legal and regulatory obligations; and
  • where permitted, send marketing communications.
  1. Cookies and tracking

Our sites use cookies and similar tracking technologies to make the sites function properly, remember preferences, analyse site traffic, and support marketing or remarketing activities. Cookies may be set by us or by third parties such as analytics, advertising, or embedded-service providers.

We use the following categories of cookies:

  • Strictly necessary cookies, essential for the sites to operate.
  • Performance and analytics cookies, which help us understand how visitors use the sites (for example, Google Analytics).
  • Functional cookies, which remember your preferences and settings.
  • Marketing and tracking cookies, which measure advertising performance and support remarketing (for example, the Meta Pixel).

Where required, we will ask for your consent before placing non-essential cookies on your device. You can manage or withdraw your cookie preferences through your browser settings or any cookie banner we provide. Blocking certain cookies may affect how parts of the sites work.

  1. Legal basis for processing

We process personal information only where we have a lawful basis to do so under Section 11 of POPIA, namely where processing is:

  • carried out with your consent;
  • necessary to conclude or perform a contract with you (for example, to fulfil a booking or party package);
  • required to comply with a legal obligation;
  • necessary to protect a legitimate interest of the data subject;
  • necessary for the proper performance of a public law duty by a public body; or
  • necessary to pursue our legitimate interests or those of a third party to whom the information is supplied.
  1. Sharing information

We may share personal information with trusted service providers and business partners who help us operate the sites, deliver park experiences, process payments, host systems, analyse traffic, send communications, or provide customer support. These third parties (operators under POPIA) may only use your information to perform services on our behalf and are required to protect it appropriately.

We may also disclose information if required to do so by law, in response to lawful requests from regulators or law enforcement, or where necessary to protect our rights, users, systems, or the public. If all or part of our business is sold or restructured, we may transfer personal information to the acquiring party under appropriate safeguards.

  1. International transfers

Some of our service providers may process personal information outside South Africa. Where this happens, we will only transfer your information where one of the conditions in Section 72 of POPIA is met, including where the recipient is subject to a law, binding corporate rules, or agreement that provides an adequate level of protection, where you have consented to the transfer, where the transfer is necessary for the performance of a contract with you, or where the transfer is for your benefit and consent is impractical to obtain.

  1. Data retention

We keep personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, to meet legal or regulatory requirements, to resolve disputes, and to enforce our agreements. When information is no longer needed, we will delete, destroy, or de-identify it securely.

  1. Security

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no website or internet transmission is completely secure, and we cannot guarantee absolute security.

  1. Your rights

Subject to POPIA, you have the right to:

  • request access to personal information we hold about you;
  • request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading, or unlawfully obtained information;
  • object to processing on reasonable grounds, including for direct marketing;
  • withdraw consent where processing is based on consent;
  • request details of third parties who have received your information; and
  • lodge a complaint with the Information Regulator of South Africa (see Section 15).

To exercise any of these rights, contact our Information Officer using the details in Section 13. Access and correction requests may be made using POPIA Regulations Form 2 (access) or Form 1 (correction or deletion). We will respond within the timeframes prescribed by POPIA.

  1. Marketing communications

If you opt in to receive marketing communications, we may send you emails, SMS, or other electronic messages about park experiences, party packages, offers, and updates. In accordance with Section 69 of POPIA, we will only send unsolicited electronic direct marketing to you if you have given prior consent. If you are an existing customer, we may market similar products or services to you on an opt-out basis. You can opt out at any time using the unsubscribe link in any message or by contacting us directly.

  1. Children

Rush Extreme parks are designed for active visitors aged 7 and older. Playstation by Rush is designed for younger children and families. Across both, this website is intended for use by adults (parents, guardians, and other adults) booking experiences for themselves and their families.

We do not knowingly collect personal information directly from children under 18 through these sites without the prior consent of a competent person (parent or legal guardian). Where a parent or guardian provides information about a child for the purposes of a booking, party package, or safety record, we collect only the minimum information necessary and protect it in accordance with this Privacy Policy and POPIA.

If you believe we have collected personal information from a child without the required consent, please contact us using the details in Section 13 and we will take reasonable steps to delete it.

  1. Information Officer and contact

Our designated Information Officer under POPIA is:

For any questions, requests, or complaints about this Privacy Policy or how we handle personal information, please contact us at [email protected].

  1. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will be posted on this page with a revised “Last updated” date. Material changes will be communicated where required by law.

  1. Complaints to the Information Regulator

If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator of South Africa: