top of page

Privacy Policy

 

Effective Date: 16 August 2026
Last Updated: 16 August 2026

 

1. Introduction

This Privacy Policy explains how COZY, a luxury boutique hotel located in Zanzibar, Tanzania (“we,” “us,” “our,” or the “Hotel”), collects, uses, stores, discloses, and protects personal information relating to our guests, visitors, website users, and other individuals who interact with us.

We are committed to protecting your privacy while providing a personalised, safe, and exceptional hospitality experience. This Privacy Policy applies to information collected through our hotel, website, booking channels, guest communications, events, and other services we provide.

 

By making a reservation, staying at the Hotel, using our website, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

 

2. Information We Collect

Depending on your interaction with us, we may collect:

​

Information you provide directly

  • Full name and title

  • Contact details, including telephone number, email address, and postal address

  • Passport, identity, visa, or other identification information where required for guest registration or applicable legal requirements

  • Date of birth and nationality

  • Reservation, arrival, departure, and accommodation details

  • Payment and billing information

  • Food, beverage, accessibility, accommodation, or other service preferences

  • Special requests and information you voluntarily provide to help us personalise your stay

  • Feedback, reviews, survey responses, and communications with the Hotel

  • Information provided when you contact our concierge, reception, reservations, or management teams

​

Information collected automatically

When you use our website or digital services, we may collect information such as:

  • IP address

  • Browser and device information

  • Website pages visited and interactions with our website

  • Approximate location information

  • Cookies and similar technologies

  • Date and time of website visits

 

Information from third parties

We may receive personal information from booking platforms, travel agencies, tour operators, corporate clients, payment providers, event organisers, or other business partners involved in arranging your stay.

 

3. How We Use Personal Information

We may use personal information to:

  • Process and manage reservations

  • Provide accommodation, dining, spa, concierge, transportation, and other hotel services

  • Communicate with you before, during, and after your stay

  • Process payments, deposits, refunds, and invoices

  • Verify identity and comply with applicable registration and legal requirements

  • Respond to enquiries, requests, complaints, and feedback

  • Personalise your experience and remember preferences where appropriate

  • Improve our accommodation, facilities, services, website, and guest experience

  • Administer events, weddings, conferences, and other functions

  • Send promotional communications where permitted by law and where appropriate consent has been obtained

  • Detect, prevent, and investigate fraud, security incidents, and other unlawful activity

  • Protect the safety, security, rights, and property of our guests, employees, and the Hotel

  • Comply with legal, regulatory, tax, accounting, immigration, public-health, and law-enforcement obligations

  • Establish, exercise, or defend legal claims

 

4. Legal Basis for Processing

Where applicable, we process personal information on one or more of the following grounds:

  • Performance of a contract: for example, to manage your reservation and provide the services you have requested.

  • Legal obligations: where processing is necessary to comply with applicable Tanzanian law or other lawful requirements.

  • Legitimate interests: such as operating and improving our Hotel, protecting guests and property, preventing fraud, and managing our business, provided those interests do not override your privacy rights.

  • Consent: where we ask for your consent, including for certain marketing or optional uses of personal information. You may withdraw consent where applicable.

 

5. Guest Preferences and Sensitive Information

We may process certain information that you voluntarily provide to us because it is relevant to your stay—for example, dietary requirements, accessibility requirements, or health-related information necessary to respond to a specific request.

We will only use such information for appropriate hospitality, safety, service, or legal purposes and will seek consent where required by applicable law.

We ask guests not to provide sensitive personal information unless it is necessary for us to fulfil a specific request or obligation.

 

6. Sharing Personal Information

We may share personal information with trusted third parties where reasonably necessary to provide our services or operate our business. These may include:

  • Payment processors and financial institutions

  • Booking and reservation platforms

  • Travel agencies and tour operators

  • Technology, hosting, communications, and IT service providers

  • Professional advisers, including lawyers, accountants, auditors, and insurers

  • Transportation, excursion, spa, restaurant, or other service providers engaged to fulfil guest requests

  • Government authorities and law-enforcement agencies where disclosure is required or permitted by law

  • Other parties where you have requested or authorised the disclosure

We require appropriate service providers to handle personal information responsibly and, where applicable, in accordance with contractual confidentiality and security obligations.

We do not sell guests' personal information.

 

7. International Transfers

Some of our service providers or business partners may process personal information outside Tanzania.

Where personal information is transferred internationally, we will take reasonable steps to ensure that the information is handled with appropriate safeguards and in accordance with applicable data-protection requirements.

 

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain appropriate business and financial records, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.

Retention periods may vary depending on the type of information and the reason it was collected.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

 

9. Cookies and Website Technologies

Our website uses cookies and similar technologies to provide essential website functionality, remember preferences, understand how visitors use our website, improve our services, and, where permitted, support marketing activities.

For more detailed information about the cookies we use, their purposes, and how you can manage your preferences, please see our Cookies Policy.

​

10. Marketing Communications

Where permitted by applicable law, we may send you information about Hotel offers, experiences, events, promotions, and services that we believe may be relevant to you.

You can unsubscribe from marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us using the details below.

Even if you opt out of marketing communications, we may continue to send service-related messages, such as reservation confirmations, payment information, important information about your stay, and responses to enquiries.

 

11. Photography, Video, and Events

The Hotel may occasionally photograph or record events, public areas, promotional activities, weddings, or other experiences for security, operational, archival, or marketing purposes.

Where an identifiable individual is intended to be featured in promotional material, we will seek appropriate permission or otherwise comply with applicable legal requirements.

If you have concerns about appearing in a photograph or recording, please contact Hotel management.

 

12. Security

We take reasonable technical, organisational, and physical measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no method of transmitting or storing information is completely secure. We therefore cannot guarantee absolute security of personal information.

If we become aware of a personal-data incident that requires notification under applicable law, we will take appropriate steps to investigate, mitigate, and notify relevant parties where legally required.

 

13. Your Privacy Rights

Subject to applicable Tanzanian law and any applicable limitations, you may have rights relating to your personal information, including the right to:

  • Request access to personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Request deletion of personal information where legally applicable

  • Object to or request restriction of certain processing

  • Withdraw consent where processing is based on consent

  • Request information about how your personal information is processed

  • Complain about our handling of your personal information to the relevant data-protection authority

To exercise a right, please contact us using the details below. We may need to verify your identity before processing your request.

 

14. Adults-Only Policy

Our services and facilities are exclusively intended for adults aged 18 years and over. The Hotel operates as an adults-only property and does not accommodate children under any circumstances.

Accordingly, we do not knowingly collect personal information from minors. Any personal information provided in relation to an individual under the age of 18 will not be processed for accommodation or service purposes, except where required for legal compliance or verification purposes, in which case it will be handled strictly in accordance with applicable law.

We reserve the right to refuse reservations or services where it is determined that the guest or intended occupant does not meet the minimum age requirement.

 

15. Third-Party Websites

Our website or communications may contain links to third-party websites, booking platforms, social-media services, or other websites that are not operated by us.

We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing personal information.

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or privacy practices.

The updated version will be posted through the appropriate Hotel website or made available by the Hotel, with the effective date shown at the beginning of the Policy.

 

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have a concern about the way we handle your personal information, please contact:

COZY Zanzibar
Address: Makunduchi Beach, Zanzibar, Tanzania
Email: contact@cozyzanzibar.com
Telephone: +255 (0)7 72 55 55 57
Data Protection Contact: contact@cozyzanzibar.com

We will endeavour to respond to privacy requests within a reasonable period and in accordance with applicable law.

 

18. Applicable Law

This Privacy Policy is intended to operate in accordance with the laws and applicable data-protection requirements of the United Republic of Tanzania, including the applicable legal framework governing personal data protection.

Where mandatory local law provides additional rights or protections, those requirements will apply.

bottom of page