Privacy Policy

Twiza Ningo Lodge ("the Lodge", "we", "us") is a professionally managed accommodation facility located in Kapiri Mposhi, Zambia. This Privacy Policy explains how we handle personal information collected through our website, booking system, and during your stay.

We collect the following categories of personal information:

• Identity data — full name, nationality, national ID or passport number.
• Contact data — email address, phone number, postal address.
• Booking data — check-in/out dates, room type, number of guests, special requests, booking reference.
• Payment data — payment method and transaction references. We do not store full card numbers.
• Usage data — pages visited, browser type, IP address, and referral source when you visit our website.

We use your personal information to:

• Process and manage your reservation, check-in, and check-out.
• Send booking confirmations, updates, and invoices.
• Process payments and issue receipts.
• Comply with legal obligations under Zambian law (immigration, financial record-keeping).
• Improve our services and website experience.
• Contact you about future stays or promotions — only with your explicit consent.

We process your personal data on the following grounds:

• Contract performance — to fulfil your booking and provide accommodation services.
• Legal obligation — to comply with the Tourism and Hospitality Act and Zambian financial regulations.
• Legitimate interests — to operate and improve our business, where not overridden by your rights.
• Consent — for direct marketing, which you can withdraw at any time.

We do not sell your personal information. We may share it only with:

• Payment processors — to handle transactions securely.
• Government authorities — where required by Zambian law (e.g. Zambia Tourism Agency, immigration, tax authorities).
• Technology service providers — operating our booking platform under strict data processing agreements.

We retain guest records for a minimum of seven (7) years to comply with Zambian financial and hospitality regulations. Website usage data is retained for up to twelve (12) months.

We implement technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure — including encrypted data transmission, access controls, and regular security reviews. However, no internet transmission is completely secure.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data where we have no legal obligation to retain it.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant Zambian data protection authority.

Our website uses essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this may affect certain website functionality.

We may update this Privacy Policy from time to time. The most current version will always be published at this URL with the revision date shown at the top of the page.