Privacy Notice

1. Who is responsible for your data

Giney's View 8 Unit (trading name), Rua de Outubro, Vilanculos, Mozambique is responsible for personal information processed through this website and your stay. We handle personal information in line with Mozambican law and, where it applies to guests and processing in South Africa, POPIA; EU guests' data is handled to an equivalent standard. Privacy contact: stay@gineysview.com.

2. What we collect

• Booking data: names, email, phone, country, party size, stay dates, special requests, billing address.
• Account data: sign-in email and authentication records for your guest account.
• Payment data: amounts, references and payment status. Card details are entered only on PayFast's secure pages — we never see or store card numbers.
• Identity documents: where required for check-in or local registration requirements, processed and stored privately with restricted access.
• Correspondence: emails and WhatsApp messages with our team.
• Technical data: essential cookies and basic logs needed to run the site securely (see the Cookie Notice).

3. Why we process it

To take and manage bookings and payments (performance of a contract); to send booking-related emails such as confirmations, invoices, balance reminders and arrival instructions (contract); to meet legal, tax and local registration obligations (legal obligation); to protect the property and resolve incidents (legitimate interests); and to invite a review after a completed stay (legitimate interests — one invitation, no marketing lists without consent).

4. Who receives it

Trusted processors strictly to run the service: Supabase (database, authentication and storage hosting, EU region — Frankfurt), PayFast and Beachfront Bookings (payment processing), Resend (transactional email delivery), and Xneelo (website hosting). We do not sell personal information. Data may cross borders between Mozambique, South Africa and the EU as part of this processing, protected by each provider's safeguards.

5. How long we keep it

Booking, invoice and payment records are retained for as long as tax and accounting law requires. Identification documents collected for check-in or local registration are normally deleted within 30 days after checkout; they may be retained longer only where required by law or reasonably necessary for an active payment dispute, damage claim, security incident, insurance claim or legal process. Account data is kept while your account is active.

6. Your choices and rights

You may request access to, correction of, or deletion of your personal information, object to specific processing, or ask questions — email stay@gineysview.com. We will respond within a reasonable period and in line with applicable law. You can also ask us to close your guest account.

7. Children

Bookings are made by adults. We do not knowingly collect children's data beyond guest names/ages needed for occupancy and safety.

8. Security and incidents

Data is stored with role-restricted access, encrypted transport, and private storage for sensitive documents. If an incident creates real risk to you, we will notify you and any competent authority as applicable law requires.

9. Marketing

We send only booking-related messages unless you explicitly opt in to anything more. Every non-essential message includes a way to opt out.

10. Changes

We version this notice; the effective date and version history appear on this page. Material changes are highlighted on the website.