Privacy Policy

Effective date: May 2026

Scope: Applies to personal data collected via www.mpiloboutiquehotel.com,
onsite check-in, reservations, and marketing.
 Data collected: Mpilo Boutique Hotel managed by Flame Lilly Lesotho Pty Ltd as the data controller; contact details; payment details; passport/ID for check-in; stay preferences; booking history; device and cookies data.
 Legal bases: performance of contract; legitimate interests (marketing, fraud
prevention); consent where required (e.g., cookies).
 Uses: to process bookings, provide services, comply with legal obligations,
send transactional and marketing communications (optout available).
 Sharing: third-party processors (payment gateways, channel managers,
analytics providers); legal authorities when required.
 Retention: retain booking records for at least 7 years for accounting and
legal compliance unless local law requires otherwise.
 the policy is issued in terms of Lesotho's Data Protection Act, 2011, in addition to any GDPR/CCPA
 Security: administrative, technical, and physical safeguards; data breach
notification procedures.
 Contact: [email protected]:- Main hotel telephone number: +266 5220 3000