Privacy Policy

This website is mainly an informational site. It does not process payments and does not run a live online booking engine, and it has no general enquiry or contact form.

Two pages do collect personal data: the First Look guest registration at /first-look and the Founding Guest activation at /founding-guest, both of which are reached from a printed invitation. Section 2 sets out exactly what those forms collect, why, where it is stored and for how long.

We use one optional marketing tool, the Meta Pixel, and only if you accept it. It is switched off unless you choose “Accept”, and you can withdraw that choice at any time. Section 12 explains exactly what it does and what Meta receives. If you decline, no Meta code loads and no Meta cookies are set.

If you contact us using the telephone number or email address provided, we will receive the information you choose to share in order to respond to you.

Our homepage also offers an optional interactive Google Maps view of the resort’s location, which loads only if you choose to open it. Section 12 explains what that involves.

If you were given an NJS Royale invitation, you can register your attendance on one of two pages. Registration is optional, and both forms tell you at the point of collection what they are for.

What we collect

On the First Look guest page: your invitation or reference code; your full name; your email address; your mobile or WhatsApp number; whether you will attend on 12 December 2026; how many people will attend (one or two); your companion’s full name if you are bringing one; and whether you have asked to hear about the Grand Opening.

On the Founding Guest page: your invitation or reference code; the primary guest’s full name; your email address; your mobile or WhatsApp number; the second guest’s full name; your confirmation of the stay from 23 to 25 July 2027; your expected arrival time; anything you add about your arrival; and whether you have asked to receive NJS Royale updates.

With either form we also record which page you registered on, the date and time, your browser’s user-agent string, and a one-way hash of your IP address. The hash is used only to limit automated submissions; we do not keep the address itself.

Why we use it

To verify your invitation, confirm your RSVP, prepare your guest privileges and manage entry on the day — and, for Founding Guests, to prepare your accommodation. If you are registering a companion or second guest, please make sure they are content for you to give us their name.

We rely on your consent, given when you submit the form, and on taking steps at your request to confirm your attendance. Updates about the Grand Opening or about NJS Royale are sent only if you tick the optional box, which is never ticked for you; you can withdraw that consent at any time by emailing info@njsbeachresort.com.

Where it is stored

Registrations are stored in a Postgres database provided by Neon, reached only from the server side of this website, which is hosted by Vercel. The database is located in Amazon Web Services’ Europe (London) region, eu-west-2, so registration data is stored in the United Kingdom. Both Neon and Vercel are processors acting on our instructions; section 11 explains how we approach transfers outside Nigeria. We do not sell your personal data, and we do not publish invitation lists or guest details on this website.

How long we keep it

We keep a registration until the event it relates to has taken place, and then only for as long as we reasonably need it to deal with anything arising from it or to meet a legal or record-keeping obligation. After that it is deleted or securely disposed of.

What Meta is told

If — and only if — you have accepted optional marketing cookies, we also tell Meta that a registration was completed, so that we can measure our advertising. What we send is limited to your IP address, your browser’s user-agent string, the address of the registration page, and the Meta cookies described in section 12 if your browser has them.

We do not send Meta your email address or telephone number at all, not even in hashed form, and we do not send your name, your invitation code, your companion’s name, your arrival time or anything you wrote in the notes. We made that choice deliberately: a registration form cannot show that the person filling it in owns the contact details they type, so sending those details could identify someone who never asked to be included. The same event is sent once from your browser and once from our server, sharing a single identifier so that Meta records one registration rather than two.

If you declined marketing cookies, or never made a choice, nothing about your registration is sent to Meta, and your registration works exactly the same way. If you withdraw consent later, nothing further is sent. Section 12 explains the cookies themselves and how to change your choice.

We intend to add an online enquiry / contact form in the future. The remainder of this policy explains how personal data will be handled once that form is activated, so that our approach is clear in advance. We will keep this policy up to date as our services change.

When the enquiry form is activated, we expect to collect only the information you choose to provide, which may include:

• your name;
• your telephone number and any contact detail you supply;
• details relevant to your enquiry, such as intended dates, number of guests, and any message you send us.

We will not require more information than is necessary to respond to your enquiry.

We will use the information you provide to:

• respond to your enquiry and communicate with you;
• help you plan a potential visit and provide information you have requested;
• keep a record of our correspondence with you.

We will not use your enquiry details for unrelated marketing without your consent.

Where we process your personal data, we rely on one or more of the lawful bases recognised under the NDPA, namely:

• Your consent — given when you submit an enquiry or otherwise ask us to contact you;
• Steps taken at your request — to respond to your enquiry and take steps prior to any potential agreement;
• Our legitimate interests — in responding to enquiries and operating the resort, where these are not overridden by your rights.

We collect only the personal data that is adequate, relevant and limited to what is necessary for the purpose of responding to your enquiry.

We keep personal data only for as long as necessary to deal with your enquiry and for a reasonable period afterwards, or for as long as required to meet any legal or record-keeping obligation. When it is no longer needed, we take steps to delete or securely dispose of it.

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, alteration or disclosure. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

We currently use the following providers:

• Vercel — hosting for this website;
• Neon — the Postgres database in which invitation registrations are stored;
• Meta Platforms — advertising measurement, only where you have accepted optional marketing cookies (sections 2 and 12);
• Google — the interactive location map, only if you choose to open it (section 12).

These providers are permitted to process personal data only in accordance with our instructions and applicable data-protection obligations. If we later use a provider to help us receive and manage general enquiries, we will update this section before doing so.

Some of our service providers store or process data outside Nigeria. In particular, invitation registrations are held in the United Kingdom, in Amazon Web Services’ Europe (London) region (eu-west-2), and Meta Platforms Ireland processes the advertising measurement data described in section 12.

Where personal data is transferred outside Nigeria, we take steps intended to ensure it continues to receive an appropriate level of protection consistent with the NDPA.

Essential cookies. A small number of cookies are needed for the website to work. They do not track you across other websites and cannot be switched off.

Meta Pixel (optional). We use the Meta Pixel from Meta Platforms so that we can measure how our advertising on Facebook and Instagram performs. It is optional and is not loaded unless you accept it in the cookie banner or under “Cookie Preferences” in the footer.

If you have accepted it, two things are measured: the pages you view, and the completion of an invitation registration. Registrations are also reported to Meta from our server, carrying no contact details of any kind; section 2 sets out precisely what is and is not sent. Nothing is reported to Meta if you declined, and nothing further is reported once you withdraw.

If you accept, Meta may set the following cookies in your browser:

• _fbp — identifies your browser so that visits and advert performance can be measured. Typically expires after about 90 days.
• _fbc — records that you arrived from a Meta advert. Set only if you click such an advert, and typically expires after about 90 days.

When the Pixel is active, Meta receives your IP address, browser and device details, the page address you are viewing and the cookie identifiers above. We do not send Meta your name, telephone number or email address through this website, and the Pixel does not read anything you type into a form.

Your control. You may accept or decline when first asked, and you can change or withdraw your choice at any time under “Cookie Preferences” in the footer. Withdrawing stops any further tracking and deletes the Meta cookies that your browser allows us to remove. It cannot undo processing that already took place while consent was in force, and you may also clear cookies in your browser settings or use Meta’s own advertising controls in your Facebook or Instagram account.

Lawful basis and transfers. We rely on your consent for this processing. Meta Platforms Ireland Limited acts as the recipient of this data and may process it outside Nigeria, including in the European Union and the United States, under its own terms and privacy policy. Where personal data is transferred outside Nigeria, we take steps intended to ensure it continues to receive an appropriate level of protection consistent with the NDPA.

Where it does not run. The Pixel does not run on internal or draft pages, or on print and proof pages used for producing printed material.

Google Maps. The location section on our homepage shows the resort’s address and coordinates without contacting Google. The interactive map loads only after you choose “View Interactive Map”. When you do, your browser connects to Google, which may receive technical information such as your IP address and device and browser details, and may set its own cookies. Google handles that information under its own privacy policy. The “Get Directions” link opens Google Maps in a new tab in the same way.

If you apply for a role through our Careers section, you will email your CV and details to careers@njsbeachresort.com. Applications may contain your CV, contact information and other details you choose to share.

We use recruitment information only to:

• assess your suitability for the role;
• communicate with you about your application;
• arrange interviews;
• maintain necessary recruitment records.

Recruitment information is accessible only to authorised personnel involved in the recruitment process. We retain it only for as long as necessary for recruitment purposes and to meet applicable legal obligations, after which we take steps to delete or securely dispose of it.

Subject to the conditions of the NDPA, you have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data in certain circumstances;
• ask us to restrict or object to certain processing;
• withdraw your consent where we rely on it;
• request a copy of certain data in a portable format where applicable.

To exercise any of these rights, please contact us using the details below.

If you have any question about this policy or wish to exercise your rights, you can reach us at:

NJS Royale Beach Resort
Mosere-Kogo Village, via Eko Akete, Ibeju-Lekki, Lagos State, Nigeria
Telephone: 0707 533 4158
Email: info@njsbeachresort.com

If you believe your data has not been handled properly, you also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. When we do, we will revise the “Last updated” date at the top of this page.