Data Governance & Trust

Privacy Policy

Last Updated: October 2026 • Compliant with NDPR 2019 and Nigeria Data Protection Act (NDPA)

1. Introduction

Grace Arena Resorts Ltd. (“GAR”, “we”, “our”, or “us”) is committed to protecting the privacy, personal data, and rights of our guests, visitors, and website users. This Privacy Policy details our practices regarding information collection, storage, and usage in compliance with the Nigeria Data Protection Act (NDPA) and NDPR regulations.

2. Information We Collect

When you interact with our website or reserve accommodations, we may collect:

  • Contact data: Full name, phone number, and email address.
  • Reservation records: Arrival/departure dates, room selections, and special dietary/prayer requests.
  • Transaction records: Payment reference numbers and transaction status (processed via Paystack; we do not store credit card CVVs).
  • Technical cookies: Essential security tokens and optional analytics preferences.

3. How We Use Your Data

Your data is strictly utilized to:

  • Process reservations and issue booking confirmation receipts.
  • Facilitate check-in and room assignments across GAR Elysian and GAR Village.
  • Provide concierge assistance via WhatsApp or email.
  • Send voluntary newsletter updates and retreat schedules when consented.

4. Data Protection & Your Rights

Under NDPR guidelines, you maintain the right to access, rectify, or request deletion of your personal records. For privacy inquiries or data requests, contact our Data Protection Officer at: privacy@gracearenaresorts.com.