Data Governance & Trust
Privacy Policy
Last Updated: October 2026 • Compliant with NDPR 2019 and Nigeria Data Protection Act (NDPA)
1. Introduction
Grace Arena Resorts Ltd. (“GAR”, “we”, “our”, or “us”) is committed to protecting the privacy, personal data, and rights of our guests, visitors, and website users. This Privacy Policy details our practices regarding information collection, storage, and usage in compliance with the Nigeria Data Protection Act (NDPA) and NDPR regulations.
2. Information We Collect
When you interact with our website or reserve accommodations, we may collect:
- Contact data: Full name, phone number, and email address.
- Reservation records: Arrival/departure dates, room selections, and special dietary/prayer requests.
- Transaction records: Payment reference numbers and transaction status (processed via Paystack; we do not store credit card CVVs).
- Technical cookies: Essential security tokens and optional analytics preferences.
3. How We Use Your Data
Your data is strictly utilized to:
- Process reservations and issue booking confirmation receipts.
- Facilitate check-in and room assignments across GAR Elysian and GAR Village.
- Provide concierge assistance via WhatsApp or email.
- Send voluntary newsletter updates and retreat schedules when consented.
4. Data Protection & Your Rights
Under NDPR guidelines, you maintain the right to access, rectify, or request deletion of your personal records. For privacy inquiries or data requests, contact our Data Protection Officer at: privacy@gracearenaresorts.com.