Privacy Policy

When you use our booking forms or contact us, we may collect the following information:

• Personal identification information (name, email address, phone number)
• Booking preferences and special requests
• Communication records between you and our team
• Website usage data collected by cookies and similar technologies, such as pages and packages viewed (see Cookies and Tracking below)

We use the information we collect for the following purposes:

• To process and manage your spa bookings and reservations
• To communicate with you about your bookings and our services
• To improve our website and services based on user feedback
• To send you relevant updates and promotional offers (with your consent, see Marketing Messages below)
• To show you relevant offers on Facebook, Instagram and Google, and to measure how our ads perform
• To comply with legal obligations and resolve disputes

We implement appropriate security measures to protect your personal information:

• Secure data transmission and storage protocols
• Limited access to personal information on a need-to-know basis
• Regular security assessments and updates
• Staff training on data protection best practices

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• To comply with legal requirements or court orders
• To protect our rights, property, or safety, or that of others
• With trusted service providers who assist us in operating our business, such as our online booking and payment systems (under strict confidentiality agreements)
• With Meta (Facebook and Instagram) and Google for advertising and analytics, as described under Cookies and Tracking and Advertising and Customer Matching below

You have the following rights regarding your personal information:

• The right to access and receive a copy of your personal data
• The right to rectify inaccurate or incomplete information
• The right to request deletion of your personal data
• The right to restrict or object to processing of your data
• The right to data portability
• The right to object to direct marketing at any time

To exercise any of these rights, please contact us using the information provided below. You may also lodge a complaint with the Information Regulator of South Africa (inforeg.org.za).

Our website uses cookies and similar technologies, including Google Analytics and the Meta Pixel. We may also send the same information to Meta directly from our server (Meta Conversions API). We use them to understand how the website is used, to measure our advertising, and to show relevant ads on Facebook, Instagram and Google.

They record things like the pages and packages you view, when you open a booking, submit a form or tap to WhatsApp us, and technical details such as your browser, device and IP address.

You can block or delete cookies in your browser settings, manage ads you see on Facebook and Instagram at facebook.com/adpreferences, and manage Google ads at adssettings.google.com.

We may share the email address and phone number of guests in encrypted (hashed) form with Meta and Google. They use it to show you relevant offers, or to avoid showing ads to guests who have already booked. Meta and Google may process this information outside South Africa.

We do not share the details of anyone who has opted out. To opt out, email us at info@crystalroselodge.co.za or reply STOP to any of our messages.

We send specials and news by email or WhatsApp only if you have agreed to receive them, or if you are a guest and the message is about similar services from us. Every message tells you how to opt out. Reply STOP or use the unsubscribe link, and we will stop.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us: