Privacy policy
Last updated: 3 October 2026
This privacy policy explains how Zororo Lodge (“we”, “us”, “our”) processes personal information when you visit our website, enquire about a stay, create a guest account, or book accommodation online. We comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
1. Responsible party
Zororo Lodge
39 Dalmada Road, Dalmada AH, Polokwane, Limpopo, South Africa
Email: [email protected]
Telephone: +27 (0) 15 263 6856
2. Information we collect
- Identity & contact: name, email, phone, billing details you provide when booking or contacting us.
- Stay details: arrival and departure dates, room type, guest count, special requests, confirmation codes.
- Account data: login credentials for the guest portal (stored securely; passwords are hashed).
- Payment data: card and bank details are processed by PayFast (Pty) Ltd; we do not store full card numbers on our servers.
- Technical data: IP address, browser type, device information, and cookies necessary for site security and booking (see website terms).
3. Why we use your information
- To confirm, manage, and invoice your reservation.
- To communicate about your stay (email, SMS where you opt in, phone).
- To meet legal, tax, and accounting obligations (including VAT records).
- To improve our website, prevent fraud, and protect our systems.
- With your consent, to send marketing about Zororo Lodge (you may opt out anytime).
4. Legal basis (POPIA)
We process personal information when necessary to perform a contract (your booking), comply with law, protect legitimate interests (operating a safe lodge), or with your consent where required.
5. Sharing with third parties
We may share data with:
- PayFast and your bank/card issuer for payment processing.
- Professional advisers (accountants, lawyers) where required.
- Regulators or law enforcement when legally obliged.
- Technology providers who host or support our booking platform (under confidentiality and data-processing terms).
We do not sell your personal information.
6. Cross-border transfers
Some service providers may process data outside South Africa. Where this occurs, we ensure appropriate safeguards consistent with POPIA.
7. Retention
We keep booking and financial records as required by tax and commercial law (typically at least five years). Marketing consent records are kept until you withdraw consent.
8. Security
We use access controls, encryption in transit (HTTPS), and industry practices to protect your data. No method of transmission over the internet is completely secure; please use strong passwords for guest accounts.
9. Your rights
Under POPIA you may request access, correction, deletion (where applicable), objection to processing, and lodge a complaint with the Information Regulator (South Africa). Contact us at [email protected]. We will respond within a reasonable period.
10. Children
Our online booking is intended for guests aged 18 or older. Reservations including minors must be made by a parent or legal guardian.
11. Changes
We may update this policy. The “Last updated” date will change; material changes will be highlighted on this page.