Updated 29 October 2026
This notice explains how Sumix Hotel handles personal information when you visit sumixhotel.com, make a reservation, contact us, or use online payment services.
Who is responsible
Sumix Hotel, Bwebajja, Akright, Entebbe Road, Uganda. Contact: info@sumixhotel.com. The payment merchant is displayed as SUMIX HOTEL LIMITED. Please contact the hotel with any privacy request.
Information we collect
Booking information includes your name, email, phone number, country, stay dates, accommodation, guest numbers, and any requests you enter. Payment records include the booking or order reference, amount, currency, payment method, and transaction status. Technical information may include IP address, browser and device details, security logs, and cookies used to operate the site. Please avoid including unnecessary sensitive information in booking notes.
How we use information
We use information to process and manage reservations, communicate arrival and booking details, provide requested services, reconcile payments and refunds, answer enquiries, prevent fraud, secure the website, and meet applicable legal and accounting obligations. Processing may be necessary to arrange or perform your booking, meet a legal obligation, or pursue legitimate operational and security interests, subject to your rights. Where consent is required, we will seek it separately. Booking a room does not itself enrol you in marketing.
Online payments
Online payments are processed through Pesapal and participating banks, card networks, or mobile-money providers. Necessary customer and transaction details are passed to those providers. Enter payment credentials only into the provider’s secure payment interface; do not send PINs, passwords, or full card details to the hotel by email or booking notes. Providers process information under their own notices. See Pesapal’s Privacy Policy. The hotel retains the references and status needed to manage the booking and payment.
Service providers and other disclosures
Information is accessible to authorised hotel staff and providers supporting hosting, reservations, payment processing, email delivery, security, and services you request. We may disclose information where required by law or to protect legal rights. We do not sell guest information. If information is processed outside Uganda, applicable cross-border data-protection requirements must be met.
Cookies and external services
WordPress, WooCommerce, and the reservation system use cookies or similar storage for login, carts, bookings, and security. Blocking essential cookies may prevent checkout. Pages may embed YouTube or social-media content, Google reCAPTCHA, or links to WhatsApp and external services. Those services may receive technical information and apply their own privacy policies. You can manage browser cookies; any non-essential tracking requiring consent should remain inactive until that consent is obtained.
Retention and security
We keep information only for as long as needed for its purpose, applicable legal and accounting obligations, dispute handling, and security. Retention can vary by record type. We use appropriate organisational and technical safeguards, but no internet service can guarantee absolute security.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion, or restriction of your personal information, object to relevant processing, or withdraw consent where processing depends on it. Withdrawal does not affect earlier lawful processing. We may verify your identity and retain records where legally required. Contact info@sumixhotel.com. You may also raise a concern with Uganda’s Personal Data Protection Office.
Children and changes
Reservations should be made by an adult. Provide children’s information only where needed for the stay. We may update this notice; the revised date will appear above. Material changes affecting your choices will be communicated where required.