Privacy Policy

Stanzel Grand Resort is a luxury hospitality property located at Plot C103, A Close, off 1st Avenue, Gwarinpa Estate, Abuja, Federal Capital Territory, Nigeria. We operate this website and manage all reservations and guest communications. For privacy enquiries, contact us at info@stanzelgrandresort.org.

We collect the following categories of personal information:

• Booking information: Name, email address, phone number, check-in and check-out dates, room type, number of guests, and special requests.
• Payment information: Transaction reference and payment status. We do not store full card details — payments are processed by our secure payment provider (Paystack).
• Contact and enquiry information: Any details you submit via our contact form, including your message, phone number, and enquiry type.
• Technical data: IP address, browser type, device type, pages visited, and time spent — collected automatically via cookies and server logs.
• Communications: Records of emails and messages you send us, including any preferences or feedback you share.

We use your personal data for the following purposes:

• To process, confirm and manage your reservation.
• To communicate with you before, during and after your stay.
• To process payments and issue receipts or invoices.
• To respond to enquiries, complaints and feedback.
• To send you information about offers and packages (only where you have consented or where permitted by law).
• To improve our website, services and guest experience.
• To comply with legal obligations, including tax and financial reporting.

We process your personal data on the following legal bases under the Nigeria Data Protection Act 2023 (NDPA) and applicable law:

• Contract performance: Processing necessary to fulfil your reservation and provide the services you have requested.
• Legitimate interests: Improving our services, fraud prevention, and website analytics.
• Consent: Where you have opted in to receive marketing communications.
• Legal obligation: Where we are required to process data to comply with Nigerian law.

Our website uses cookies — small text files stored on your device — to improve functionality and user experience. We use:

• Essential cookies: Required for the booking flow and session management (e.g. hold token, booking step state). Cannot be disabled.
• Analytics cookies: Used to understand how visitors use our site. You may opt out of these.

You can control cookies through your browser settings. Disabling essential cookies may prevent the booking process from working correctly.

We do not sell your personal data. We may share it with the following parties only where necessary:

• LodgeCore PMS: Our property management system provider, which processes reservation data on our behalf.
• Paystack: Our payment gateway, which processes card transactions securely.
• Email service providers: Used to deliver booking confirmations and enquiry replies.
• Legal and regulatory authorities: Where required by Nigerian law or a court order.

We retain personal data for as long as necessary to fulfil the purposes described in this policy. Booking records are typically retained for seven (7) years to comply with financial and tax obligations. Marketing preferences and enquiry data are retained for two (2) years from your last interaction unless you request earlier deletion.

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Object to or restrict certain types of processing.
• Withdraw consent to marketing communications at any time.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have not handled your data lawfully.

To exercise any of these rights, please contact us at info@stanzelgrandresort.org. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our booking flow uses HTTPS encryption. Payment data is processed exclusively by Paystack using PCI-DSS compliant infrastructure and is never stored on our servers.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last updated" date. Your continued use of our website after any change constitutes acceptance of the updated policy.

For any questions, requests or concerns about this privacy policy or how we handle your data, please contact: