Privacy Policy
Introduction
Sarita Chalet and Spa International Hotel Management Limited (“Sarita Chalet and Spa“, “we“, “us“, “our“) respects your privacy, and is committed to protecting the privacy, confidentiality and security of the personal data you provide to us or that we collect about you when you use our website saritachaletandspa or our mobile application(s) and other online products and services (“Site“), when you contact guest services, or when you otherwise interact with us. We are aware of our responsibilities to protect your personal data, to keep it secure and comply with applicable privacy and data protection laws. For the purposes of this Privacy Policy, “personal data” shall have the meaning as given to it by applicable privacy or data protection laws.
This Privacy Policy explains our personal data practices and the choices you can make about the way your personal data is used. This Privacy Policy gives effect to our commitment to protect your personal data and serves as the guidelines to be observed by all of the hotels, resorts and properties managed and/or operated by Sarita Chalet and Spa or its affiliates and subsidiaries.
You will be asked to consent to the terms of this Privacy Policy when making a reservation, joining the Sarita Chalet and Spa Circle programme, registering for events or promotions, or otherwise corresponding with us via the Site or otherwise where required under applicable law. Subject to the requirements of applicable law, your continued use of the Site will constitute your deemed consent or acknowledgement to the terms of this Privacy Policy.
Types of Personal Data We Collect
Information you provide to us: we collect personal data you provide directly to us. The personal data collected by us include sensitive personal data under applicable data protection laws. Please note that these sensitive personal data are necessary for us to provide the relevant services to you, and our processing of such sensitive personal data is unlikely to impact your rights and interests. This includes:
- your full name, gender, date of birth, contact information (e.g. country of residence, physical address, email address and phone number) ,identification information, and passport and visa information;
- guest stay information, including the hotels where you have stayed, date of arrival and departure, goods and services purchased, special requests made, your service preferences, telephone numbers dialled and email, faxes, telephone and other messages received;
- your credit card, mobile payment and other payment details;
- your membership information, account details, profile or password details and any frequent flyer or travel partner programme affiliation;
- any information necessary to fulfill special requests (for example, leisure, travel and guest preferences);
- your reviews, feedback, opinions and interactions you have with us about our hotels, resorts, Sarita Chalet and Spa Circle programmes and services;
- information collected through the use of closed circuit television (“CCTV”) systems and other security systems; and
- any other personal data you choose to provide to us (e.g. health data, social media information).
How We Collect, Use and Disclose Your Personal Data
Subject to the requirements of applicable law, we may collect, use and disclose your personal data for the purposes set out below. For the performance of our agreement with you, in order to:
- process, confirm, provide and charge for hotel arrangements, restaurant and spa reservations and our goods and services, and administer mobile (where applicable) and in person check in and check out;
- fulfill contractual obligations to you, anyone involved in the process of making your travel arrangements (e.g. travel agents, group travel organisers and your employer) and vendors (e.g. credit card companies, airline operators and other loyalty programmes);
- provide you with access to the content on our Site, and respond to your enquiries and requests for information and services; and
- administer, and disclose the winner of, contests and lucky draw competitions conducted by us or on our behalf.
For our legitimate commercial interests, in order to:
- understand how our products and services impact you, provide you with a better, more personalised level of service, and further develop our products and services, including linking or combining with information we get from others to do so;
- provide privileges, benefits and services to you, process applications for and administer membership programmes, verify and validate your ability to access and use certain products, services, facilities and information (such as Sarita Chalet and Spa Circle member-only information), and administer Sarita Chalet and Spa Circle membership, including as regards points and rewards redemption, points donation, and facilitation of family membership benefits;
- monitor your use of our Site and your bookings, and conduct analysis of the use of our Site in order to operate, evaluate, protect and improve our Site and our services, understand your preferences, display customised content to you on our Site which may be of interest to you and troubleshoot any problems;
- conduct market analysis, market research, customer satisfaction and quality assurance surveys to improve our hotels, resorts, membership programme and services; and
- manage and provide for the safety and security of guests, premises and services (including but not limited to handling any incidents, accidents or claims made by guests or customers, conducting investigations and/or audits, carrying out CCTV surveillance and conducting security clearances, handling lost and found).
Our Commitment to Data Security
We have in place reasonable technical and organisational measures to prevent unauthorised or accidental access, processing, erasure, loss or use of your personal data and to keep your personal data confidential. These measures are subject to ongoing review and monitoring. To protect your personal data, we also require our third party service providers to take reasonable precautions to keep your personal data confidential and to prevent unauthorised or accidental access, processing, erasure, loss or use of personal data, and to act at all times in compliance with applicable data protection laws.
We cannot guarantee that our Site will function faultless and without any interruptions. We shall not be liable for damages that may result from the use of electronic means of communication, including, but not limited to, damages resulting from the failure or delay in delivery of electronic communications, interception or manipulation of electronic communications by third parties or by computer programs used for electronic communications and transmission of viruses.
We recommend that where applicable, you change your passwords often, use a combination of letters and numbers, and ensure that you use a secure browser. If applicable, you undertake to keep your username and password secure and confidential and shall not disclose or permit it to be disclosed to any unauthorised person, and to inform us as soon as reasonably practicable if you know or suspect that someone else knows your username and password or believe the confidentiality of your username and password has been lost, stolen or compromised in any way or that actual or possible unauthorised transactions have taken place. We are not liable for any damages resulting from any security breaches, on unauthorised and/or fraudulent use of your username and password.