Your Data, Handled With Care
This page explains what personal information Raynez Resort & Suites collects when you book, enquire or visit our website, why we need it, who we share it with, and the choices you have.
1 Who we are
Raynez Resort & Suites Ltd ("Raynez", "we", "us") operates Raynez Resort & Suites, a hotel at Plot 1705, Mabushi District, Abuja, Federal Capital Territory, Nigeria. We are the data controller for the personal information described in this policy.
We handle personal data in line with the Nigeria Data Protection Act 2023 and the regulations of the Nigeria Data Protection Commission (NDPC).
2 What we collect
We collect only the details you give us through our forms, plus a small amount of technical information needed to run the site securely.
| When you… | We collect |
|---|---|
| Book a room | Full name, email address, phone number, check-in and check-out dates, number of adults and children, the room you chose, any promo code, and your special requests. |
| Book from abroad | Full name, email, WhatsApp number, country, dates, number of guests, room type and notes. |
| Request an airport transfer | Full name, email, phone, arrival date and time, flight number, number of passengers, pickup type and notes. |
| Enquire about an event or venue | Full name, email, phone, event type and date, venue, expected guest count, budget and details. |
| Contact us | Name, email, phone, subject, category and your message. |
| Create an account | Username, email address and password. Passwords are stored only in scrambled (hashed) form, so we cannot read them. |
| Join our newsletter | Your email address (and your name, if you give it). |
| Order from our restaurant | The details you enter for the order and its payment reference. |
| Use the website | Your IP address, browser and device type, and the time and pages of your visit. These appear in our server and security logs and are used to keep the site and your account safe. |
If you contact us by WhatsApp or phone, we also see the number and the messages you send us.
At check-in, our front desk asks to see a valid photo ID and may record the details needed for our guest register, as hotels in Nigeria are expected to do. This is done at the desk and not through our website.
3 Why we use it
- To deliver your stay: confirm and manage your reservation, prepare your room, arrange airport pickup, and handle events and restaurant orders.
- To take payment and issue receipts for your booking.
- To communicate with you: booking confirmations, payment and cancellation notices, replies to your enquiries, and help on WhatsApp, email or phone.
- To improve our services and the guest experience, using feedback and what we learn from running the hotel.
- To protect the hotel and our guests: prevent fraud, spam and misuse of the booking system, and secure accounts.
- To meet legal duties: accounting, tax and any request from a lawful authority.
- To send you offers, only if you ask: if you subscribe to our newsletter, we use your email to send news and offers. You can unsubscribe at any time.
Our lawful bases under the NDPA are: contract (to provide the stay you booked), legal obligation (records and tax), legitimate interest (security and fraud prevention), and consent (newsletter).
5 Payments
You can pay by card or online via Paystack, or by bank transfer to the hotel's account shown at checkout.
- Card details are typed into Paystack's own secure page, not on raynezresort.com. We never see, receive or store your full card number or security code.
- We keep your booking reference, the amount, the payment status and Paystack's transaction reference, so we can confirm your payment and issue a receipt.
- For bank transfers, we record the transfer details you or our team enter so we can match the payment to your booking.
6 Cookies & local storage
We keep this to a minimum. We do not use advertising cookies, tracking pixels or third-party analytics on this site.
| Item | What it does |
|---|---|
| Session cookie | Keeps you signed in and protects forms and bookings from forgery. Strictly necessary; expires with your session (about one hour of inactivity). It is set as HttpOnly and Secure. |
| Theme preference | Remembers whether you chose the light or dark display. Stored in your browser only. |
| Room comparison | Remembers the rooms you added to compare. Stored in your browser only. |
| Newsletter pop-up | Remembers that you closed the pop-up so it does not keep reappearing. Stored in your browser only. |
You can clear cookies and site data from your browser settings at any time. Blocking the session cookie will stop sign-in and online booking from working.
Embedded content from Google Maps and fonts or icons loaded from third-party content networks may be set up by those providers according to their own policies.
7 How long we keep it
We keep personal data only as long as we need it for the reasons above:
- Booking and payment records: 5 years, for legal and tax purposes.
- Enquiries and messages: for as long as needed to deal with your request and any follow-up.
- Your account: until you ask us to delete it.
- Newsletter: until you unsubscribe.
- Security logs: for a limited period, then removed.
When we no longer need data, we delete it or make it anonymous.
8 Security
- The website is served over an encrypted (HTTPS) connection.
- Passwords are stored hashed with a modern algorithm (Argon2id), never in plain text.
- Forms are protected against forgery and spam, and repeated failed sign-ins are limited.
- Staff access to the admin system is restricted by role, so each person sees only what their job needs, and our team is trained to keep guest information confidential.
- 24/7 CCTV surveillance and security at the hotel.
- Card data never reaches our servers (section 5).
No system is perfectly secure. If a breach affecting your personal data occurs, we will act quickly and notify you and the NDPC as the law requires.
9 Your rights
Under the Nigeria Data Protection Act 2023 (and the GDPR, for guests in the EU or UK) you can ask us to:
- Access the personal data we hold about you and get a copy;
- Correct information that is wrong or incomplete;
- Delete your data, where we no longer have a legal reason to keep it;
- Restrict or object to certain uses, including marketing;
- Receive your data in a common, portable format;
- Withdraw consent at any time, for example by using the unsubscribe link in any newsletter.
To make a request, email reservations@raynezresort.com from the address you booked with, and include your booking reference if you have one. We may need to confirm your identity first. We respond within 72 hours.
If you are not satisfied with our response, you have the right to complain to the Nigeria Data Protection Commission (NDPC).
10 Children
Our website and booking forms are meant for adults. We only collect a child's details when a parent or guardian includes them in a reservation, such as the number of children staying. We do not knowingly collect personal data from children through the website or send them marketing.
11 Changes & contact
If we change how we handle personal data, we will update this page and the "last updated" date at the top. For significant changes, we will tell you by email or a notice on the website.
Questions about this policy, or want to use your rights? Contact our Data Protection contact through our reservations team: