Privacy Policy

Thaton Stays (“Thaton Stays”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, store, disclose and protect information when you use the Thaton Stays website, booking platform, customer accounts, payment services and related services.

By using the Thaton Stays website or submitting information through it, you acknowledge the practices described in this Privacy Policy.

We may collect information you provide directly to us, including your name, email address, telephone number, booking information, arrival and departure dates, residence preferences, guest details, account information, messages and other information submitted through our website.

We may also collect technical information automatically, including IP address, device information, browser type, operating system, pages visited, session information, referral information and website usage data.

Payment card numbers, mobile-money credentials and similar sensitive payment information may be collected and processed directly by our third-party payment service providers rather than being stored by Thaton Stays.

We may use personal information to provide and administer reservations, process and verify payments, communicate with guests, provide booking confirmations and receipts, manage customer accounts, prevent fraud and abuse, maintain the security of our services, respond to enquiries, improve the website, comply with legal obligations and operate our business.

We may also use aggregated or anonymised information for analytics, reporting and service improvement.

Thaton Stays relies on third-party service providers to operate certain parts of its services. These may include payment processors, cloud-hosting providers, authentication providers, database providers, email-delivery services, analytics providers and other technology partners.

When you use these services, certain information may be transmitted to or processed by those providers in accordance with their own privacy policies, terms and security practices.

Thaton Stays does not control the internal systems, networks or security practices of independent third-party providers.

While Thaton Stays takes reasonable measures to protect information under its control, no internet-based system or third-party platform can be guaranteed to be completely secure.

To the maximum extent permitted by applicable law, Thaton Stays shall not be responsible or liable for unauthorised access, loss, disclosure, alteration, destruction or misuse of information arising from a security incident, cyberattack, system compromise, data breach or other failure occurring solely within the systems of an independent third-party service provider and outside the reasonable control of Thaton Stays.

This includes, without limitation, incidents affecting payment gateways, banking systems, telecommunications providers, cloud infrastructure, hosting providers, authentication providers, email providers or other external platforms.

Nothing in this Privacy Policy excludes any responsibility that Thaton Stays is legally prohibited from excluding.

Where we become aware of a relevant third-party security incident, we may take reasonable steps to investigate, contain its impact, cooperate with the affected provider and make any notifications required by applicable law.

We may disclose personal information where reasonably necessary to operate a reservation or provide our services.

Information may therefore be shared with property operators, accommodation staff, payment providers, technology providers, professional advisers, contractors and service providers acting on our behalf.

We may also disclose information when required by law, court order, regulatory authority or other lawful process, or where reasonably necessary to protect Thaton Stays, our customers or others against fraud, misuse, security threats or unlawful conduct.

We do not sell personal information to advertisers.

Payments made through Thaton Stays may be processed by independent payment processors.

Thaton Stays may receive information confirming that a payment has been initiated, completed, failed, cancelled or refunded, together with transaction references and payment amounts.

Sensitive banking or card credentials may be handled directly by the payment provider and may never enter Thaton Stays' systems.

Your use of a third-party payment provider may also be subject to that provider's own privacy policy and terms.

We may use cookies, session technologies and similar tools to keep the website functioning, maintain user sessions, improve security, understand website activity and analyse performance.

You may be able to restrict certain cookies through your browser settings, although doing so may affect the operation of some parts of the website.

We use reasonable administrative, organisational and technical safeguards intended to protect information under our control.

These safeguards may include authentication controls, access restrictions, encryption, database permissions, monitoring, rate limiting and multi-factor authentication for privileged administrative areas.

However, no security system is completely immune from attack, and we cannot guarantee that unauthorised third parties will never overcome security measures.

We may retain information for as long as reasonably necessary to fulfil the purpose for which it was collected, administer bookings, maintain financial and business records, resolve disputes, prevent fraud and comply with legal obligations.

Information may be deleted, anonymised or archived when it is no longer reasonably required.

Some technology providers used by Thaton Stays may process or store information outside Zimbabwe.

Where this occurs, information may be subject to the laws of the country in which it is processed.

By using our services, you acknowledge that information may be transferred to and processed through third-party infrastructure located in other jurisdictions, subject to applicable legal requirements.

Depending on applicable law, you may have rights concerning personal information we hold about you, including the right to request access, correction or deletion of certain information.

Requests may be subject to identity verification and any lawful record-retention requirements.

You are responsible for keeping your account credentials secure.

You should not disclose passwords, authentication codes or other account-security information to another person.

Please notify Thaton Stays promptly if you believe your account has been compromised.

The Thaton Stays platform is intended to be used by adults who are legally capable of making accommodation reservations.

Information concerning children may be supplied as part of a booking where they are travelling with a responsible adult.

Our website may contain links to websites, payment platforms and services operated by third parties.

Thaton Stays is not responsible for the content, availability, security, privacy policies or practices of third-party websites.

Accessing such services is at your own discretion and may be governed by separate terms and policies.

We may update this Privacy Policy from time to time.

The latest version will be made available on the Thaton Stays website and will state the date on which it was last updated.

Questions relating to privacy or personal information may be directed to: