Privacy Policy

1. Who we are

myBookingHQ is a hotel booking engine operated by Satechnologies LTD (“we”, “us”), Abuja, Nigeria. This policy explains how we collect, use and protect personal data when you visit our website, create an account, subscribe to the service, or make a booking through a hotel’s booking engine powered by myBookingHQ.

For account and billing data, we are the data controller. For personal data belonging to a guest who books a room at a hotel, the hotel is the controller and we act as a data processor on the hotel’s instructions.

2. Data we collect

• Account data — hotel name, your name, email address and telephone number.
• Billing data — plan, billing cycle and payment references. Card details are entered directly on Paystack’s secure checkout; we never see or store full card numbers.
• Guest booking data — the name, email, phone number and booking details a guest submits when booking a stay. We process this on behalf of the hotel.
• Usage data — device, browser, approximate location derived from IP address, pages viewed and actions taken, collected through cookies and similar technologies.
• Communications — messages you send to our support team.

3. How we use it

• To create and manage your account and provision your booking engine.
• To process subscription payments and send receipts, reminders and service notices.
• To deliver booking confirmations, notifications and receipts to guests and hotels.
• To provide support, prevent fraud and misuse, and secure the platform.
• To measure and improve the service, including through analytics and, where you consent, advertising measurement.

4. Legal bases

Where the Nigeria Data Protection Act / NDPR or the UK/EU GDPR applies, we rely on: performance of a contract (providing the service you signed up for); legitimate interests (securing and improving the platform); consent (non-essential cookies and advertising measurement); and legal obligation (tax, accounting and lawful requests).

5. Sharing

We share personal data only with service providers that help us run the platform, under contract, including:

• Paystack — payment processing for subscriptions, and for guest payments on the hotel’s own Paystack account.
• ZeptoMail (and, where enabled, Termii) — transactional email and SMS delivery.
• Cloud hosting and CDN providers — to host and serve the platform.
• Analytics and advertising providers (for example Google Analytics and Meta) — where enabled and, for advertising, where you consent.

We do not sell personal data.

6. Cookies and analytics

We use essential cookies to run the service (for example, to keep you signed in and to remember your cookie choices). These are always active because the site cannot work without them.

With your consent we also use analytics and advertising cookies — including Google Analytics and, where configured, the Meta Pixel and Google Ads — to understand how visitors find and use the site and to measure our advertising. No analytics or advertising cookie or other non-essential third-party script is loaded until you accept in the cookie banner. If you reject or ignore the banner, only essential cookies are used.

You can change or withdraw your consent at any time using the “Cookie settings” link in the page footer. Withdrawing consent stops non-essential scripts from loading on your next page load. You can also control or delete cookies through your browser settings; blocking essential cookies may prevent parts of the service from working.

7. Retention

Account and billing records are kept for as long as your account is active and for the period required for tax and accounting purposes. Guest booking data is retained according to the hotel’s instructions. Where a tenant account is suspended and ultimately closed, personal data is exported and then deleted in line with our retention schedule, except where we must keep it by law.

8. Security

We use encryption in transit, encrypted storage for sensitive credentials, access controls, tenant isolation and audit logging. No system is perfectly secure; please use a strong, unique password and keep it confidential.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request portability. To exercise these rights, email [email protected]. Guests should contact the hotel they booked with; we will assist the hotel as its processor.

10. Children

The service is intended for businesses and is not directed at children.

11. Changes

We may update this policy from time to time. Material changes will be notified by email or in-app, and the “last updated” date above will change.