Privacy Notice

Boga Legaba Guest House & Conference Centre, Mahikeng, North West Province, is the responsible party for the personal information described in this notice. [TODO: confirm registered business name, registration number and physical address with Boga Legaba]

Depending on how you interact with us, we may collect:

• Name and surname
• Email address and phone number
• Company, department or government-entity details
• Booking dates, room requirements and arrival details
• Purchase order (PO) numbers and billing contacts, for corporate and government bookings
• Mailing-list subscriptions (name and email address where you opt in)
• Messages you send through our enquiry and contact forms

Card payments are processed on our payment provider's own secure pages - card details are never entered on, or stored by, this website.

We use your information only for the purpose you gave it to us:

• To answer enquiries and prepare quotes and proposals
• To make, confirm and administer bookings and stays
• To issue invoices and meet tax and record-keeping obligations
• To send mailing-list updates you have subscribed to (you can unsubscribe at any time)

We do not sell your personal information and do not use it for unrelated marketing.

We share information only where necessary to deliver the service you asked for: our reservation partner NightsBridge (bookings and availability), our transactional email provider (booking and enquiry emails), and our payment provider (card and EFT payments, processed on their own pages). [TODO: confirm the exact booking, email and payment providers to name here with Boga Legaba]

Where you follow a link to a third party such as WhatsApp, Google, TripAdvisor or Paystack, that party's own privacy policy applies from that point. We may also disclose information where the law requires it.

This website is served over HTTPS so form submissions are encrypted in transit. Stored enquiry and booking records sit in access-controlled systems available only to authorised staff. [TODO: confirm internal access controls, device and backup practices with Boga Legaba]

We keep personal information only as long as needed for the purpose it was collected for, or as the law requires. [TODO: confirm retention periods (enquiries, booking records, invoices, mailing list) with Boga Legaba]

Under POPIA you may:

• Ask what personal information we hold about you (access)
• Ask us to correct it where it is wrong (correction)
• Ask us to delete it, or stop using it, where the law allows (deletion and objection)
• Withdraw any consent you previously gave, such as a mailing-list subscription

To exercise any of these rights, email info@bogalegaba.co.za or use our contact page.

[TODO: confirm the appointed Information Officer's name and contact details with Boga Legaba]

If you believe we have handled your information unlawfully, you may lodge a complaint with the Information Regulator of South Africa. [TODO: confirm current Regulator contact details and complaints procedure link with Boga Legaba]

See also our Cookie Notice and Terms of Use.