Welcome to Crystal Suites Apartments (hereafter “we”, “us”, “our”, or “Crystal Suites”). At Crystal Suites we are committed to protecting your privacy and safeguarding any personal data you share with us. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, book accommodation, or engage with our services.

1. What information we collect

We may collect the following types of personal information from you:

• Identity & contact information: name, residential address, billing address, email address, telephone number.

• Booking and stay information: dates of stay, room/apartment type, preferences, guest names, payment information.

• Payment & billing details: bank account number, card number (or masked version), transaction history, billing records.

• Website & usage data: IP address, browser type, device type, referring pages, pages viewed, time spent on site, cookies/settings.

• Optional information: special requests, feedback, ratings, surveys, promotional preferences.

2. How we collect it

We collect personal information when you:

• Make a booking or inquiry via our website, phone, email or in-person.

• Register for our newsletter, subscription, or promotions.

• Use our website, which employs cookies, tracking and analytics tools.

• Interact with our staff or third-party service providers (e.g., payment processors, cleaning services).

3. How we use your information

Your information is used for the following purposes:

• To process and manage your booking, stay, check-in / check-out, billing and payment.

• To provide customer support, respond to your enquiries, manage guest relations.

• To personalise your experience (e.g., your preferred room type, services, offers).

• To send you promotional offers, updates and marketing (if you opted in).

• To monitor, analyse and improve our website, services, security and internal operations.

• To comply with legal obligations and manage any complaints, disputes or investigations.

4. Legal basis for processing (where applicable)

Where required (for example under GDPR), we process your personal data based on one or more of the following legal bases:

• Your consent (for newsletters, marketing).

• Performance of a contract (your booking agreement with us).

• Compliance with legal obligations (e.g., accounting / tax).

• Our legitimate interests (improving our services, fraud prevention) provided your rights are respected.

5. Sharing your information

We may disclose your personal information to:

• Service providers and contractors (e.g., payment processors, housekeeping, maintenance) when required to deliver our services.

• Our trusted partners (for marketing or loyalty programs) – we will ensure appropriate safeguards.

• Legal/regulatory authorities when required (e.g., under court order, audit, law enforcement).

• In the event of a sale, merger or restructuring of the business, personal data may be transferred (with appropriate safeguards) as part of the transaction.

6. Cookies & tracking technologies

Our website uses cookies and similar tracking technologies to enhance your experience, remember your preferences, and gather usage statistics. You may choose to disable cookies via your browser settings; however, some features of the website may no longer be available or work properly.

7. Data retention

We will retain your personal information for as long as is necessary to fulfil the purposes set out in this Privacy Policy (e.g., while you remain a guest, as required for billing/tax records, or to comply with legal obligations). When no longer needed, we will securely dispose of or anonymise the data.

8. Your rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Access: request a copy of the data we hold about you.

• Correction: request correction of inaccurate or incomplete data.

• Deletion: request deletion of data (subject to legal / contractual retention obligations).

• Objection or restriction: object to or request restriction of certain processing.

• Data portability (if applicable): receive a machine-readable copy of your data.

• Withdraw consent: where processing is based on consent, you can withdraw it at any time (this will not affect processing carried out prior to withdrawal).

To exercise your rights, please contact us at: [insert email address].

9. Security

We employ appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure, alteration or destruction. However, no internet or electronic storage system can be guaranteed 100 % secure; you use the website and provide data at your own risk.

10. International data transfers

If you are located outside of Nigeria, please note that your information may be transferred to, stored or processed in Nigeria or any other country where our service providers operate. We will ensure that such transfers comply with applicable data protection laws and that safeguards are in place.

11. Third-party links & services

Our website may contain links to third-party sites or services (e.g., payment gateways, social media). This Privacy Policy does not apply to those external sites. Please review the privacy policies of any such third-party before providing your personal information.

12. Children’s privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe that your child has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will appear on our website with “Last updated” date. We encourage you to review this page periodically.