Privacy & Policy

Sapphire Hotel & Resort Ltd. we, is committed to protecting the privacy and security of our guests’ personal information. This Privacy Policy outlines how we collect, use, and safeguard your data across our services, including at our physical resort locations, online platforms, and mobile applications, in accordance with international standards, including GDPR (General Data Protection Regulation), BCPA (Bangladesh Consumer Privacy Act), and other applicable laws.

—

1. Information We Collect

Personal Information:
We may collect the following categories of personal data:
Identification Information: Name, contact details (email, phone number), address, nationality, passport/ID number.
Booking and Stay Information: Room preferences, check-in/check-out dates, payment details, special requests.
Health Information: Dietary preferences, allergies, and any health conditions disclosed for special accommodations.
Sensitive Information: In some instances, we may collect sensitive information (e.g., medical or dietary preferences) to provide you with personalized services. Such information will only be collected with your explicit consent.

2. How We Collect Your Information

Direct Collection:
We collect personal information directly from you when you:
– Book a stay or make a reservation online, via phone, or in person.
– Register or create an account on our website or app.
– Participate in surveys or promotional events.
– Contact our customer service team for inquiries or assistance.

Automated Collection:
Cookies & Tracking Technologies: When you interact with our website or app, we collect data using cookies and other automated technologies to understand your preferences and improve your experience.
Surveillance Systems: For the safety and security of guests, we may use CCTV and other surveillance systems on the premises.

—

3. How We Use Your Information

We use your personal information for the following purposes:
Service Delivery: To manage your reservations, provide personalized services, and handle payments.
Customer Support: To communicate with you regarding your stay, respond to inquiries, and offer assistance.
Marketing & Promotions: With your consent, to send you marketing communications, promotional offers, and updates.
Compliance: To comply with legal obligations, such as local regulations, tax requirements, or travel restrictions.
Analytics & Improvements: To monitor, evaluate, and enhance our services and digital platforms for a better guest experience.

4. Sharing Your Information

With Third Parties:
We may share your personal information with:
Service Providers: Third-party vendors such as payment processors, booking platforms, and tour operators who help us provide services.
Business Partners: Travel agencies, transportation services, and other partners when necessary to fulfill your booking.
Government Authorities: In compliance with legal obligations (e.g., immigration requirements or public health mandates).

Cross-Border Data Transfers:
If your data is transferred to jurisdictions outside your home country, we will ensure that appropriate safeguards are in place, such as adherence to **Standard Contractual Clauses (SCCs)** and other international data protection mechanisms.

—

5. Data Security

We implement stringent security measures to protect your personal data:
Encryption: All personal and payment information transmitted online is encrypted using Secure Socket Layer (SSL) technology.
Access Controls: Only authorized personnel with legitimate business needs are granted access to personal data.
Regular Audits: We conduct regular security assessments and audits to ensure data protection standards are upheld.
Data Minimization: We collect and retain only the personal information necessary for the purposes outlined in this policy.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations:
Booking and Stay Information: Retained for a period of 6 Month following your stay.
Marketing Data: Retained until you opt out of marketing communications.
CCTV Footage: Retained for security purposes for a period of 6 Month unless required for legal purposes.

7. Your Rights

You have the following rights concerning your personal information:
Access: You can request access to the personal information we hold about you.
Correction: You can request corrections to any inaccurate or incomplete information.
Deletion: You may request the deletion of your personal data where it is no longer necessary or where consent has been withdrawn.
Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
Objection: You have the right to object to processing based on legitimate interests or direct marketing purposes.

To exercise any of these rights, please contact us!

8. Children’s Privacy

We do not knowingly collect personal information from individuals under the age of 11 without verifiable parental consent. If we discover that we have inadvertently collected such information, we will delete it immediately.

—

—

09. Changes to the Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, our business practices, or technology. We will notify you of significant changes by posting an updated policy on our website and indicating the date of the update.

—

10. *Contact Information

For any inquiries, concerns, or requests regarding this Privacy Policy, please contact us:

– **Email: info@sapphireresortltd.com

—

**By using our services, you agree to the terms of this Privacy Policy.**