Privacy Policy

Mbweni Ruins & Gardens

Last updated: 14 January 2026


General Information

Mbweni Ruins & Gardens is operated by Holy Rock Limited, a private company limited by shares, with its registered office in Zanzibar, United Republic of Tanzania (the "Company", "we", "us", or "our").

We are committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website www.mbweniruinsandgardens.com, make a reservation, stay at our property, or otherwise interact with us.

We process personal data in accordance with applicable data protection laws, including principles aligned with the EU General Data Protection Regulation ("GDPR"), where applicable.

If you provide us with personal data relating to other individuals (such as travel companions or minors), you confirm that you are authorized to do so and that they have been informed of this Privacy Policy.


Data Controller

The data controller responsible for processing your personal data is:

Holy Rock Limited
Mbweni Ruins & Gardens
District: West 'B', Ward: Mbweni
Plot No. 143/93
Zanzibar
United Republic of Tanzania

Management / Authorized Representative:
Jay Misseghers – General Manager
📧 jay@mbweniruinsandgardens.com

General Contact:
📧 accounts@mbweniruinsandgardens.com
📞 +255 778 242 424


Categories of Personal Data We Collect

Website Use

When you visit our website, technical information may be collected automatically by our hosting providers, including:

  • Anonymized IP address
  • Browser type and version
  • Device information
  • Date and time of access
  • Pages visited

This data is used to ensure website security, functionality, and performance.


Reservations & Guest Stays

When you make a reservation or stay with us, we may collect and process:

  • Full name
  • Email address
  • Phone number
  • Nationality
  • Passport or government-issued identification details (where legally required)
  • Arrival and departure dates
  • Accommodation preferences and special requests
  • Communication history related to your stay

Some of this data is required by local tourism, immigration, or tax authorities and is processed based on legal obligation.


Booking & Payment Processing (Cloudbeds)

Online reservations and payments are processed through Cloudbeds, a third-party booking and property management platform.

By making a reservation, you acknowledge that:

  • Your booking data is processed by Cloudbeds
  • Payment information is handled securely by Cloudbeds and/or its payment partners
  • Cloudbeds acts as a separate data controller or processor under its own Privacy Policy

We do not store full payment card details on our servers.


Communications

If you contact us via email or contact forms, we may process:

  • Name
  • Email address
  • Phone number
  • Message content

This data is used solely to respond to your inquiry or manage your reservation.


On-Property Data

During your stay, we may process additional data, such as:

  • Guest Wi-Fi usage logs (where applicable)
  • Incident or security records
  • CCTV footage in common areas (if installed), used solely for safety and security

We do not use CCTV in private guest areas.


We process personal data based on one or more of the following legal bases:

  • Performance of a contract (reservation and accommodation services)
  • Legal obligation (immigration, tourism, tax, or safety requirements)
  • Legitimate interests (property security, service improvement, communication)
  • Consent, where required (e.g. newsletters, non-essential cookies)

Cookies & Analytics

Our website may use cookies to enhance user experience and analyze website performance.

Cookies

Cookies are small text files stored on your device. You may control cookie preferences via your browser settings.

We may use:

  • Strictly necessary cookies (website functionality)
  • Analytical cookies (e.g. Matomo Analytics)
  • Functionality cookies (preferences, language settings)

Non-essential cookies are only used where consent is required by law.


Analytics (Matomo)

We may use Matomo Analytics to analyze website usage. Data collected may include:

  • Anonymized IP address
  • Pages visited
  • Session duration
  • Device type

This data is used solely to improve website functionality and user experience.

You may opt out of analytics tracking at any time through your browser settings.


Sharing of Personal Data

We may share personal data only where necessary with:

  • Cloudbeds (booking and payment processing)
  • Hosting and IT service providers
  • Accounting or legal advisors
  • Local authorities, where legally required

We do not sell or rent personal data to third parties.


International Data Transfers

Personal data may be transferred and processed outside Tanzania, including by Cloudbeds or hosting providers.

Where international transfers occur, we take reasonable measures to ensure appropriate safeguards are in place to protect your data.


Data Retention

We retain personal data only for as long as necessary to:

  • Fulfill contractual obligations
  • Comply with legal and regulatory requirements
  • Resolve disputes or enforce agreements

Once no longer required, data is securely deleted or anonymized.


Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.


Your Rights

Depending on applicable law, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to certain processing
  • Withdraw consent where processing is based on consent

Requests may be submitted using the contact details above.


Minors

We may process personal data of minors only when provided by a parent or legal guardian in connection with a reservation or stay.

We do not knowingly collect data from minors for marketing purposes.


Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies separately.


Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website with an updated revision date.

Continued use of our website or services after updates constitutes acceptance of the revised policy.


Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

📧 accounts@mbweniruinsandgardens.com
📧 jay@mbweniruinsandgardens.com
📞 +255 778 242 424


© 2026 Mbweni Ruins & Gardens. All rights reserved.