🛡️ Privacy Policy for Royal Park Hotels and Suites, Kano

Effective Date: October 28, 2025

Royal Park Hotels and Suites, Kano, Nigeria (the Hotel) is dedicated to protecting the personal data and privacy of our guests and website users ("Data Subjects"). This policy explains how we collect, use, and safeguard your Personal Data in compliance with the Nigeria Data Protection Act (NDPA) 2023 and standard hotel operational practices.

 

1. Data We Collect and How We Collect It

We collect various categories of Personal Data necessary to manage your stay, process transactions, and improve our services.

 

 

 

CATEGORY OF                        DATA

Identity & Contact

 

 

 

 

Financial & Transaction

 

 

Stay & Preference

 

 

 

Technical & Security

SPECIFIC DATA POINTS

Full Name, Address, Phone Number, Email Address, Nationality, Passport/ID details (required at check-in).

 

 

 

Booking history, payment card tokens, billing address, transaction IDs.

                                                                                                                                       

Arrival/Departure dates, Room type, Special requests, Dietary restrictions, Loyalty program status.

 

 

IP address, Browser type, Website activity (via cookies), CCTV footage (public areas).

Collection                       Method(s)

Online Booking Form, Physical Check-in Card, Third-Party Booking Sites.

 

 

                                                                                                         

Online Booking Form, Payment Gateway (Paystack), Physical Check-in Card.

                                                                                   

Online Booking Form, Physical Check-in Card, Direct Communication.

 

 

 

Website (via Cookies), CCTV cameras.

 

2. Legal Basis for Processing (NDPA Compliance)

We only process your Personal Data when we have a lawful justification under the NDPA:

• Performance of a Contract: Processing your data (e.g., identity, financial, stay details) is essential to manage your reservation, provide your room stay, and process payments.
• Legal Obligation: We process data (e.g., passport/ID details, transaction records) when necessary to comply with mandatory Nigerian laws, such as government mandates for guest registration, tax reporting, and security requirements.
• Legitimate Interest: We rely on this basis for purposes like fraud prevention, service improvement (using anonymized or aggregated analytics data), and maintaining physical security (via CCTV cameras).
• Consent: We process data based on your explicit consent (e.g., for sending direct marketing emails, newsletters, or placing non-essential cookies on your device). You have the right to withdraw this consent at any time.

3. How We Share Your Personal Data

We share your data only with trusted third-party processors who assist us in operating our business and providing services. We require these parties to protect your data under strict data processing agreements.

• Payment Gateway: We share necessary data with our secure processor, Flutterwave, to handle card transactions. We do not store your full payment card number.
• Booking Platforms: Data is shared with platforms like Royal Park CRM and PMS to confirm and manage reservations you made through their channels.
• Government/Law Enforcement: We disclose data when legally compelled to do so by Nigerian authorities, courts, or law enforcement agencies.
• IT & Marketing Providers: We use service providers like HubSpot (for website hosting, CRM, and email marketing) and Google Analytics (for website performance tracking).

 

4. Your Data Subject Rights (NDPA)

Under the NDPA, you have specific rights concerning your Personal Data. To exercise any of these rights, please contact our Data Protection Contact (details below).

 

YOUR RIGHT

Right to be Informed

 

 

 

 

Right of Access

 

 

 

 

Right to Correction

 

 

 

 

Right to Erasure

 

 

 

 

Right to Withdraw Consent

 

 

 

 

Right to Object

DESCRIPTION

To know the details of how your data is collected and used (fulfilled by this policy).

 

 

 

To request a copy of the Personal Data we hold about you.

 

 

 

 

To request the modification of any inaccurate or incomplete data we hold about you.

 

 

 

To request the deletion of your data (Right to be Forgotten), subject to our overriding legal obligations (e.g., tax or security records).

 

 

 

To withdraw your consent for processing activities based on consent (e.g., opting out of marketing emails).

 

 

 

 

To object to processing based on our legitimate interests if you believe it impacts your fundamental rights.

5. Cookie Policy Summary

We use cookies and similar tracking technologies to ensure our website functions correctly and to enhance your experience.

• Essential Cookies: Strictly required for core website functionality, such as security and the booking/shopping cart process. (No consent needed).
• Performance (Analytics) Cookies: Used by tools like Google Analytics to measure website traffic, user behavior, and to improve our service offerings. (Consent Required).
• Marketing Cookies: Used for advertising and retargeting purposes (e.g., Google Ads, Facebook Pixel) to deliver relevant promotions. (Consent Required).

You can manage your cookie preferences at any time via the Cookie Consent Banner or the Cookie Preferences link typically found in our website footer.

 

6. Data Protection Contact

For all questions, requests to exercise your rights, or matters concerning this Privacy Policy, please contact:

• Data Controller: Royal Park Hotels and Suites, Kano, Nigeria
• Data Protection Contact: privacy@royalparkkano.com.ng
• Physical Address: 28/30 Zungeru Road, Sabo Gari, Kano; 32 Aitiken Road, Sabo Gari Kano.