Privacy notice

Galaxy La-Palm Royal Resort Limited (“Galaxy La-Palm”, “we”, “our”) is committed to protecting your personal data. This notice explains what we collect, why, and your rights under the Nigeria Data Protection Act 2023.

1. Who we are

Galaxy La-Palm Royal Resort operates six hotels across Rivers, Ebonyi and Abuja. Our registered office is at #3 Olaka Street, off Abacha Road, GRA Phase 3, Port Harcourt, Rivers State, Nigeria. Our data-protection contact is privacy@galaxylapalm.com.

2. Information we collect

• Identity & contact data — name, email, phone number, country, preferred language.
• Booking data — stay dates, room type, number of guests, special requests, on-property purchases.
• Payment data — handled exclusively by our payment processor (Paystack). We never store full card numbers, CVVs or PINs.
• Account data — your Galaxy Elite Rewards balance, tier, stay history and preferences.
• Technical data — IP address, device, browser, pages visited and cookies (see our Cookies policy).

3. How we use your information

• To take and confirm reservations.
• To process payments and refunds.
• To operate the Galaxy Elite Rewards programme.
• To personalise your stay (room preferences, dietary requirements, anniversary recognition).
• To send service messages (booking confirmations, pre-arrival, post-stay survey).
• With your consent, to send marketing communications. You can unsubscribe at any time.
• To comply with legal, accounting and tax obligations.

4. Lawful bases

We rely on contract necessity for booking-related processing, legitimate interest for security and service quality, consent for marketing communications, and legal obligation for invoicing and tax records.

5. Sharing your information

We share data only with vetted processors acting on our behalf — including our booking engine (Firebase / Google Cloud), payments processor (Paystack), email provider, and analytics. We do not sell your data. We may disclose data when legally required, e.g. to law-enforcement on lawful request.

6. International transfers

Some of our service providers process data outside Nigeria. Where this happens we rely on adequacy decisions or standard contractual clauses to keep your data protected.

7. Retention

Booking records: seven years (tax law). Marketing-consent records: until you withdraw consent plus three years. Loyalty-account data: while your account is active plus three years.

8. Your rights

You may access, correct, port or erase your data, restrict or object to processing, and withdraw consent at any time. To exercise any right, email privacy@galaxylapalm.com. You may also complain to the Nigeria Data Protection Commission.

9. Security

We protect your data with role-based access controls, encryption in transit, audit logs and regular security reviews. No system is perfectly secure — if you suspect a breach involving your account, contact us immediately.

10. Children

Our services are not directed to anyone under 18. Minors may stay with us as guests of an adult member, but we do not knowingly collect data from minors directly.

11. Changes to this notice

We will publish any material changes here and notify members by email. Your continued use of our services after the effective date means you accept the updated notice.