Privacy Policy

BookNow.NG ("BookNow.NG", "we", "us" or "our") operates booknow.ng and its BookNow-owned subdomains, including flight.booknow.ng and tour.booknow.ng (together, the "Platform"). We help travelers discover, compare and book hotels, apartments, resorts, flights, shortlets, tours, visa assistance and other travel services across Nigeria.

This Privacy Policy describes how we collect, use, share and protect your personal information when you visit the Platform, create an account, make a booking, or contact our support team. It applies across all BookNow-operated services listed above, not only hotel bookings. By using BookNow.NG, you agree to the practices described here.

BookNow.NG is operated by Zamxa Hotels Limited, a company registered in Nigeria with RC number RC 1488804 and registered address at 2 Ezekiel Street, Ikeja. (the "Company", "we", "us"). The Company is the data controller responsible for the personal information described in this Policy.

If we appoint a Data Protection Officer or designated privacy contact, their details will be provided here and in the Contact Us section below.

We collect information you give us directly, information generated when you use our services, and information from trusted partners who help us deliver those services.

• Account & contact details: name, email address, phone number, and password when you sign in or register.
• Hotel, shortlet & tour bookings: check-in/check-out dates, guest names, property or tour selections, and any special requests you share with us.
• Flight passenger information: where you book a flight through the Platform, we may also collect the categories of information required by airlines, Global Distribution Systems (GDS) or NDC providers to issue a ticket, including full legal name, date of birth, gender where required, nationality, passport number, passport expiry date and issuing country, frequent-flyer number, visa or residency information where required for the itinerary, passenger type, seat and meal preferences, special-assistance requests, and baggage information. We collect only what a given airline or fare rule requires for a specific booking.
• Visa-assistance information: where you use our visa-assistance service, we may collect supporting documentation and personal details reasonably required to process the relevant visa application, as instructed by the applicable embassy, consulate or visa partner.
• Payment information: billing details processed securely through our payment partner, Paystack. BookNow.NG does not store your full card number.
• Device & usage data: IP address, browser type, pages visited, and general location, collected automatically to keep the Platform secure and easy to use.
• Communications: messages you send to our support team, reviews, and responses to surveys or promotions.

We use the information we collect to:

• Process and confirm your hotel, flight, shortlet, visa-assistance or tour bookings.
• Communicate booking confirmations, changes, reminders and customer support responses.
• Verify payments and prevent fraudulent transactions.
• Personalize search results, offers and destination recommendations.
• Improve the performance, security and content of the Platform.
• Send newsletters and promotional offers, where you have opted in, with an option to unsubscribe at any time.

Where the Nigeria Data Protection Act (NDPA) 2023 requires a legal basis for processing, we rely on one or more of the following, depending on the activity:

• Performance of a contract: to create your account and process bookings, payments and related communications.
• Consent: for marketing communications and non-essential cookies, which you can withdraw at any time.
• Legitimate interests: to secure the Platform, prevent fraud, and improve our services, balanced against your rights.
• Legal obligations: to comply with tax, accounting, aviation, immigration or other regulatory requirements.

BookNow.NG uses cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, security, booking sessions and shopping/booking state. These cannot be switched off, as the Platform will not function correctly without them.
• Preference cookies: remember your currency, search preferences and language.
• Analytics cookies: help us understand traffic, performance and how travelers use the Platform, where such tools are enabled.
• Marketing cookies: used only if we enable advertising or remarketing technologies; this section will be updated to name the relevant tools if and when we do.

You can disable non-essential cookies in your browser settings, though features such as saved searches or your wishlist may not work correctly without them.

We do not sell your personal information. We share it only where necessary to deliver our services:

• Hotels & travel partners: booking details are shared with the hotel, tour operator or shortlet host you book with, so they can fulfil your reservation.
• Airlines & flight-booking infrastructure: for flight bookings, passenger information may be transmitted to the relevant airline, flight inventory provider, Global Distribution System (GDS), NDC provider, or other fulfilment partner where necessary to issue and manage your reservation.
• Visa partners: for visa-assistance requests, relevant application details may be shared with the visa partner, embassy or consulate handling the application.
• Payment processing: Paystack handles payment transactions on our behalf under its own security standards.
• Service providers: vendors who support hosting, database infrastructure, analytics, email/SMS delivery, customer support and marketing, under confidentiality obligations.
• Legal requirements: where required by Nigerian law, regulation, or a valid legal request.

We only share the categories of information above with providers we actually use; we will update this section as our list of partners changes.

We retain personal information for as long as necessary to provide our services and for legitimate business purposes, including:

• Fulfilling booking, ticketing and customer-support obligations.
• Meeting accounting, tax and other regulatory record-keeping obligations.
• Preventing fraud and resolving disputes.
• Complying with applicable legal or contractual requirements.

Retention periods vary by data category and purpose. When information is no longer needed, we delete or anonymize it in line with our internal retention practices.

We maintain technical and organizational safeguards designed to protect your personal information from unauthorized access, alteration or disclosure, including secure payment processing through our payment partner, Paystack, access controls, and regular review of our security practices. While no method of transmission over the internet is completely secure, we work continuously to protect your data.

Because BookNow.NG handles identity, booking, payment and, in some cases, passport information, we also maintain procedures for identifying, assessing and responding to security incidents, and for notifying affected users and relevant authorities where required by law.

In line with the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated data, subject to legal or contractual retention requirements.
• Object to or restrict certain uses of your information, including marketing communications.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at support@booknow.ng with your request. To protect your account, we may need to verify your identity before acting on a request. We aim to acknowledge requests promptly — our support operates every day of the week — and to resolve them without undue delay, or explain any delay. If you're not satisfied with our response, you may escalate your complaint to the Nigeria Data Protection Commission (NDPC).

To create a BookNow.NG account or enter into a booking contract with us, you must be at least 18 years old and legally able to do so. This does not mean minors cannot travel: a parent, guardian or other adult account holder may make bookings that include children or other minors as guests or passengers, and airlines, hotels and tour operators may separately require certain information about minor travelers to provide the service.

We do not knowingly allow individuals under 18 to create their own BookNow.NG account or independently enter into a booking contract. If you believe a child has created an account or provided personal information to us directly, please contact us so we can review and remove it as appropriate.

booknow.ng, flight.booknow.ng and tour.booknow.ng are all part of the BookNow.NG Platform and are covered by this Privacy Policy. The Platform may separately link to websites we do not operate, such as individual hotel websites, airline websites, visa partners, payment providers, and social media pages. This Privacy Policy does not cover those genuinely external, third-party sites, and we encourage you to review their privacy policies before sharing personal information with them.

We may update this Privacy Policy from time to time to reflect changes to our services or legal requirements. We will post the revised policy on this page with an updated "Last updated" date, which we change only when the policy itself changes. Continued use of BookNow.NG after changes take effect means you accept the revised policy.

If you have questions about this Privacy Policy, how we handle your personal information, or wish to exercise any of your rights, reach us at:

• Phone: 07076878557
• Email: support@booknow.ng
• Registered office: Zamxa Hotels Limited (RC 1488804), 2 Ezekiel Street, Ikeja.