Privacy Policy

01Who we are

The Haven Hub is the data controller for the personal data described in this policy. We operate a shortlet accommodation, restaurant, lounge and events destination at Agodo Community, close to Muhammadu Buhari Estate, Abeokuta, Ogun State, Nigeria.

For any privacy question or request, contact us at info@thehavenhub.net or +234 802 067 0979.

02The data we collect

• Identity and contact data: name, email address, phone number, and identification presented at check-in.
• Booking data: arrival and departure dates, room or unit selected, number of guests, quantity of units, special requests and stay history.
• Payment data: transaction reference, amount, currency, payment status, and limited masked card details (card type and last four digits). We never see or store your full card number, PIN, CVV or bank login credentials.
• Communications: enquiry and contact form messages, emails, SMS and WhatsApp correspondence with our team.
• Technical data: IP address, device and browser type, and pages visited, collected when you use the Site.

03How we use it

• To take and manage your booking, confirm it, and provide the accommodation and services you requested (performance of a contract).
• To process payments, refunds and chargebacks, and to detect and prevent fraud (contract and legitimate interests).
• To send booking confirmations, receipts, pre-arrival information and service messages (contract).
• To notify our reception and management team so your stay can be prepared (legitimate interests).
• To keep accounting, tax and guest records required by Nigerian law (legal obligation).
• To send offers and updates where you have asked to hear from us (consent, withdrawable at any time).

04Payment processing (Paystack)

Online card and bank payments are processed by Paystack Payments Limited, a licensed Nigerian payment service provider. When you pay, your card or bank details are captured directly by Paystack on their PCI-DSS compliant systems, not by us.

We share with Paystack the information needed to take the payment: your name, email address, phone number, the booking amount and a transaction reference. Paystack processes that data as an independent controller for fraud prevention, regulatory and payment scheme purposes, under its own privacy policy.

We receive back only the transaction outcome and masked details, which we retain for reconciliation, refunds and dispute handling.

05Booking partners and channel manager

Our room inventory, rates and availability are synchronised through Smoobu, our channel manager, which connects our calendar to travel platforms including Expedia and other online travel agencies.

When you book through one of those platforms, the platform collects your data under its own privacy policy and passes us the details needed to host you: your name, contact details, stay dates, number of guests and booking reference. When you book directly with us, we send those partners only availability and rate information, not your personal details, except where a reservation must be created or amended on the partner's system.

Some partners are based outside Nigeria, so your booking data may be transferred internationally. We rely on the necessity of those transfers for performing your booking contract and on the partners' own contractual data protection commitments.

06Other service providers

We do not sell your personal data, and we do not share it with advertisers.

• Cloud hosting and database services that run this website and store booking records securely.
• Email delivery services used to send your confirmation, receipt and service messages.
• SMS and messaging providers used to alert our reception team and, where relevant, to reach you about your stay.
• Exchange rate data providers used only to display indicative prices in other currencies; no personal data is sent to them.
• Professional advisers, accountants and, where legally required, government or law enforcement authorities.

07Cookies and analytics

The Site uses cookies and similar local storage that are necessary for it to function, such as remembering your currency preference, keeping an admin session signed in, and securing forms.

Where we use measurement tools to understand how the Site is used, they are configured to collect aggregate usage data. You can block or delete cookies in your browser settings, though some features may then not work.

08How long we keep it

Booking and payment records are kept for the period required by Nigerian tax and accounting law, currently six years from the end of the relevant financial year.

Enquiry messages are kept for up to 24 months. Marketing contact details are kept until you unsubscribe. Technical logs are kept for a short period for security and troubleshooting.

09How we protect your data

The Site is served over HTTPS. Guest and booking records are stored in an access-controlled database with row-level security, and only authorised staff accounts on our @thehavenhub.net domain can sign in to the admin platform.

Payment credentials never touch our systems. Internal notification contacts and administrative settings are restricted to administrator accounts.

10Your rights

Under the Nigeria Data Protection Act and comparable laws, you may request access to your personal data, correction of inaccurate data, deletion where we no longer need it, restriction of or objection to certain processing, a portable copy of data you gave us, and withdrawal of consent to marketing at any time.

To exercise any of these rights, email info@thehavenhub.net. We will respond within 30 days. If you are unhappy with our response, you may complain to the Nigeria Data Protection Commission.

11Children

The Site is not directed at children. Children may stay with us as part of a family booking, but the booking must be made by an adult who provides their details.

12Changes to this policy

We may update this policy as our services and partners change. The current version is always published on this page with its effective date.