This Privacy Policy for Western Isle Hotel (Lagos, Nigeria) is designed to comply with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) 2025.

Privacy Policy

Last Updated: February 2026

1. Data We Collect

To provide hospitality services and comply with Nigerian laws, we collect:

• Identity Information: Full name, nationality, and a copy of a government-issued ID (National ID, Passport, or Driver’s License) as required by the Money Laundering (Prevention and Prohibition) Act.
• Contact Details: Email address, physical address, and telephone number.
• Financial Data: Credit or debit card details for room guarantees and payment processing.
• Stay Preferences: Arrival/departure dates and special requests (e.g., dietary or accessibility needs).
• Security Data: Visual and audible CCTV footage recorded in public areas and the car park for the safety of guests and staff.

2. Why We Process Your Data

Under the NDPA, we process your information based on:

• Contractual Necessity: To manage your booking and provide hotel services.
• Legal Obligation: To comply with security, tax, and anti-money laundering regulations.
• Consent: To send you marketing offers, which you may opt out of at any time.
• Legitimate Interest: For internal analytics and to improve our guest services.

3. Data Sharing and Transfers

We only share your data with:

• Service Providers: Such as booking engine partners and payment processors.
• Legal Authorities: When required by the Nigeria Data Protection Commission (NDPC) or law enforcement.
• Cross-Border Transfers: If data is transferred outside Nigeria, we ensure the destination has adequate data protection laws or use binding contractual clauses.

4. Your Rights (NDPA 2023)

As a data subject, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or outdated information.
• Right to Erasure: Request the deletion of your data when it is no longer needed, subject to legal retention requirements.
• Right to Object: Object to your data being used for direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent as easily as it was granted.
• Right to Complain: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.

5. Data Security and Retention

• Security: We implement technical and organisational measures, including encryption and secure servers, to protect against unauthorised access or data breaches.
• Retention: We retain guest data only as long as necessary to achieve the purpose of collection or as mandated by Nigerian law (e.g., tax records).

6. Contact Us

For any data-related enquiries or to exercise your rights, please contact our support at:

Address: Western Isle Hotel, Abule Ado, Lagos, Nigeria.

Email: support@westernislehotel.com

Phone: +2347075585366