Privacy Policy

Last Updated: 8 April 2026

1. Introduction

Thamalakane River Lodge (“the Lodge”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you make a booking, visit our property, or interact with our website or services.

2. Information We Collect

We may collect and process the following categories of personal information:

Identification details (full name, nationality, passport or ID information where required by law)
Contact information (email address, telephone number, physical address)
Booking and stay details (reservation dates, preferences, special requests)
Payment information (processed securely via third-party payment providers)
Communication records (emails, inquiries, and correspondence)
Technical data (IP address, browser type, and website usage where applicable)

3. How We Use Your Information

Your personal information is collected and used strictly for legitimate business purposes, including:

Processing and managing reservations and payments
Providing accommodation, activities, and guest services
Complying with legal and regulatory requirements
Communicating booking confirmations, updates, and service-related notices
Improving our services, website functionality, and guest experience

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds: the performance of a contract (your booking), compliance with legal obligations, our legitimate business interests, and where applicable, your consent.

5. Sharing of Information

We do not sell or rent your personal information. However, we may share your data with trusted third parties where necessary for operational purposes, including:

Payment processors and financial institutions
Travel agents, tour operators, or booking platforms involved in your reservation
Government authorities where required by law (e.g., immigration or registration requirements)
Service providers assisting with IT systems, communications, or operations

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. While we take all reasonable precautions, no data transmission or storage system can be guaranteed to be completely secure.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, and reporting requirements. When data is no longer required, it is securely deleted or anonymized.

8. Your Rights

Subject to applicable laws, you may have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your data where legally permissible
Object to or restrict certain types of processing
Withdraw consent where processing is based on consent

9. Cookies and Website Usage

Our website may use cookies or similar technologies to enhance user experience, analyze traffic, and improve functionality. By using our website, you consent to the use of such technologies unless disabled in your browser settings.

10. International Data Transfers

As we serve international guests, your information may be transferred to and processed in countries outside your country of residence. We take reasonable steps to ensure that such transfers comply with applicable data protection laws and that your data remains protected.

11. Third-Party Links

Our website or communications may contain links to third-party websites. We are not responsible for the privacy practices or content of such external sites and encourage you to review their policies independently.

12. Changes to this Policy

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be effective upon posting on our website. Continued use of our services constitutes acceptance of the updated policy.