Cookie Policy
This Cookie Policy explains how Festival Hotel Conference Centre & Spa ("Festival Hotel", "we", "us") uses cookies and similar technologies on festivalhotellagos.com, what each one does, how long it lasts, and how you can control them at any time.
It should be read together with our Privacy Policy, which explains more broadly how we handle your personal data.
We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), the NDPA General Application and Implementation Directive 2025 (GAID), and — for guests in the European Economic Area and the United Kingdom — the General Data Protection Regulation (GDPR).
1. Who we are
Data controller: Festival Hotel Conference Centre & Spa, Festac Town, Amuwo Odofin, Lagos, Nigeria.
Contact: info@festivalhotellagos.com · +234 805 049 7475
Data Protection Officer: dataprotection@updcplc.com
The hotel is operated within the Custodian Investment Plc / UPDC group and managed by Premium Swiss Hotels & Resorts (PSH).
2. What cookies and similar technologies are
A cookie is a small text file placed on your device when you visit a website. We also use technologies that work like cookies — local storage and session storage in your browser, and small tracking elements inside embedded content. Throughout this policy, "cookies" means all of these.
Cookies set by festivalhotellagos.com are first-party cookies. Cookies set by another organisation whose content appears on our pages — for example our payment provider or the location map — are third-party cookies, and that organisation's own privacy notice also applies.
3. The categories we use
Strictly necessary — required for the website to function: running the availability and booking window when you open it, keeping the site secure, and recording your cookie choices. These cannot be switched off, and we rely on our legitimate interest in operating the site (NDPA s.25(1); GDPR Art. 6(1)(f)) rather than consent.
Functional — enable optional conveniences such as the embedded location map. Switched off by default; set only with your consent.
Analytics — help us understand, in aggregate, how the site is used so we can improve it. Switched off by default; set only with your consent.
Marketing — used to measure and tailor advertising for the hotel. Switched off by default; set only with your consent.
Except for strictly necessary cookies, nothing is placed on your device until you make a choice. Declining costs you nothing: the site works, and you can still browse, enquire and book.
4. Cookies used on this website
The table below lists every cookie and storage item currently in use. We review it whenever the site changes.
| Name | Provider | Type | Category | Purpose | Duration |
|---|---|---|---|---|---|
fh_consent | Festival Hotel | First-party cookie | Strictly necessary | Stores your cookie choices and a consent receipt reference so we do not ask again on every page | 6 months |
fhBookingConfig | Festival Hotel | Local storage | Strictly necessary | Holds the room rates, availability and promotional codes shown on the site. Written only on a device used by our staff to manage them | Until cleared |
| Session cookies | Premium Swiss Hospitality (crs.premiumswisshospitality.com) | Third-party cookie | Strictly necessary | Runs the availability and booking window. Set only when you open it, because you asked to make a booking — not on page load | Session |
NID | Third-party cookie | Functional | Set by the embedded map showing the hotel location; stores map display preferences | 6 months | |
CONSENT, SOCS | Third-party cookie | Functional | Records your consent state with Google for the map embed | Up to 2 years | |
1P_JAR, OTZ | Third-party cookie | Analytics | Aggregated usage measurement associated with the map embed | 1 month |
The first three rows were confirmed against the website's own code. The Google rows list the cookies Google's map embed is documented to set; the exact set can vary with your location and Google account. No analytics or advertising tools are installed on this website. If that changes, this table and the consent banner are updated before the new tool goes live.
5. Guest reviews
The guest reviews shown on our home page come from our Google Business Profile. We fetch them from our own server once a day and serve them to you from festivalhotellagos.com — including the reviewers' profile pictures. Your browser never contacts Google to display them, so no Google cookies are set and nothing about your visit is shared with Google for this purpose. Opening a review on Google from one of our links does take you to Google, where their own privacy notice applies.
6. How to control cookies
On this website
You chose your settings when you first arrived. You can change them at any time — including withdrawing consent entirely — using the button below or the Cookie settings link in the footer of every page. Withdrawing is as easy as giving consent, and takes effect immediately.
In your browser
You can also block or delete cookies through your browser settings (usually under Privacy or Security). Blocking all cookies, including strictly necessary ones, may stop the booking form or checkout from working.
Third-party cookies
For cookies set by others, see their own notices: Google, Paystack, Cloudflare.
7. Cookies and children
Under the NDPA, a child is anyone under 18 years of age. Our booking and enquiry forms are intended for adults, and we ask you to confirm your age before submitting them. Where we need to process a child's personal data — for example a young guest travelling with you — we require the consent of a parent or legal guardian, and we verify age and guardianship at check-in against a government-issued identification document. We do not knowingly place analytics or marketing cookies on a device we know belongs to a child.
8. International transfers
Some of the providers named above process data outside Nigeria. Where personal data is transferred abroad, we do so on the basis permitted by NDPA ss.41–43 — an adequate level of protection in the recipient country, or appropriate contractual safeguards. Full details are in our Privacy Policy.
9. Your rights
You have the right to access, correct, delete and restrict the personal data we hold about you, to object to processing, to data portability, and to withdraw consent at any time (NDPA ss.34–36; GDPR Arts. 15–22). Contact dataprotection@updcplc.com.
If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. If you are in the EEA or UK, you may instead complain to your local supervisory authority.
10. Changes to this policy
We review this policy at least once a year and whenever the cookies on the site change. Material changes will be signalled by asking you to make your cookie choices again.