Privacy Policy | Malliouhana

How we Use Your Information

At Malliouhana Resort (“Hotel”), the privacy and confidentiality of user information is of
utmost importance to us. We are committed to maintaining the privacy and security of
your user information. We may update this policy from time to time, so please check
here frequently. Hotel will not disclose identifiable user information to any third party
without your consent.

Malliouhana Resort is committed to safeguarding your privacy while visiting the Hotel
website, namely, www.malliouhana.com (hereinafter all identified URLs are collectively
referred to as the “Site”). Our goal is to provide you with an Internet experience that
delivers the information, resources and services that are most relevant to you. To
achieve this goal, part of the operation of the Site includes the gathering of certain types
of information about Site users.
Because we understand that your privacy is important, we wish to explain the types of
information we gather and the way in which we use it. This Privacy Policy applies to the
Site.

This Privacy Policy covers two types of information gathered at the Site, personal and
aggregated. The term “personal information” refers to data you voluntarily provide in
connection with use of the Site that identifies you and/or the company on whose behalf
you are accessing and using the Site. Personal information includes, e.g., data
submitted in connection with our services, such as your name, e-mail address, phone
number, company affiliation, physical address and/or certain other personal information.
The term “aggregated data” refers to general information regarding visitors and users of
the Site that relates to use of the Site, e.g., traffic patterns, number of visits to certain
pages, visits from other websites or to third-party web sites linked to the Site, use of
particular services and interest in services, information or features of the Site or other
parties made available through or found at the Site.

What information is collected about you? How is it used?

We take the utmost care to ensure that the personal information we obtain from you is
not used in a way that you may be unaware of or not agreeable to. You may wish to
submit an information request about our Hotel, participate in one of our promotions or
subscribe to our e-mail or postal mail lists. In response, we may ask for information
such as your name and postal address. In the event you opt to provide us with this
information, we will only use it for the purpose specified by you at the bottom of the
information gathering form.

Information collected on the Site may be used to:

  • Register you as a Hotel guest
  • Plan and purchase hotel accommodations
  • Enter your email in our promotions, sweepstakes or newsletter list
  • Send marketing communications or surveys to you
  • Respond to your questions or suggestions
  • Improve the quality of your visit to our site

All forms will provide an opt-out button to allow you to choose not to participate in Hotel
lists and future online marketing. In deciding whether or not to join such lists, please
note that they are only used for Hotel purposes or in joint promotions with a Hotel
partner. We do not sell, rent or share any of your personal information with any other
party including any third-party joint promoters, nor use it for unapproved commercial
purposes. You may request to be removed from our lists at any time. All emails
distributed to our lists will contain easy, online access to unsubscribe.

Permission for Use

Hotel may collect and use personal information that you submit at the Site in any
manner that is consistent with uses stated in this Privacy Policy or disclosed elsewhere
at the Site at the point you submit such personal information. At the time you submit
personal information or make a request, the intended use of the information you submit
will be apparent in the context in which you submit it and/or because the Site states the
intended purpose. By submitting personal information at the Site, you are giving your
consent and permission for any use that is consistent with uses stated in this Privacy
Policy or disclosed elsewhere at the Site at the point you submit such personal
information, and such consent will be presumed by Hotel, unless you state otherwise at
the time you submit the personal information. Please do not request any such
communications on behalf of an individual or company if you are not authorized to make
the request.

Secure Reservations

If you decide to make an online reservation at the Site, you will be linked to a
reservation interface and a third-party booking engine (“Booking Engine”). While it
appears to be part of our site, the Booking Engine is in fact provided by a third party and
is governed by its privacy practices. We understand that security remains the primary
concern of online consumers and have chosen the Booking Engine Vendor carefully.

Protecting Your Information

We would like our Site visitors to feel confident about using the Site to plan and
purchase their accommodations, so the Hotel is committed to protecting the information
we collect. Hotel has implemented a security program to keep information that is stored
in our systems protected from unauthorized access.

Our Site is hosted in a secure environment. The Site servers/systems are configured
with data encryption, or scrambling, technologies, and industry-standard firewalls. When
you enter personal information during the reservation process, or during a customer
email sign-up, your data is protected by Secure Socket Layer (SSL) technology to
ensure safe transmission.

Withdrawing Consent to Use

If, after permitting use of your personal information, you later decide that you no longer
want Hotel to include you on its mailing list or otherwise contact you or use your
personal information in the manner disclosed in this Privacy Policy or at the Site, simply
tell us by sending an e-mail, or by clicking on the “Unsubscribe” button at the bottom of
our email communication to you.

Use of Aggregated Data

Hotel is interested in improving the Site and may develop and offer new features and
services. We monitor aggregated data regarding use of the Site for marketing purposes
and to study, improve and promote use of the Site. In connection with such purposes,
Hotel may share aggregated data with third parties collectively and in an anonymous
way. Disclosure of aggregated data does not reveal personal information about
individual Site users in any way that identifies who they are or how to contact them.

Exceptions to the Privacy Policy

Hotel has two exceptions to these limits on use of personal information:
Hotel may monitor and, when we believe in good faith that disclosure is required,
disclose information to protect the security, property, assets and/or rights of Hotel from
unauthorized use, or misuse, of the Site or anything found at the Site.
Hotel may disclose information when required by law; however, only to the extent
necessary and in a manner that seeks to maintain the privacy of the individual.

Use of Cookies

To enable features at the Site, Hotel may assign one or more “cookies” to your Internet
browser. Cookies, among other things, speed navigation through our Site, keep track of
information so that you do not have to re-enter it each time you visit our Site, and may
provide you with customized content. A cookie is an Internet mechanism composed of a
small text file containing a unique identification number that permits a web server to
send small pieces of information or text by means of your browser and place them on
your computer’s hard drive for storage. This text lets the web server know if you have
previously visited the web page. Cookies by themselves cannot be used to find out the
identity of any user.

We use cookies to collect and maintain aggregated data (such as the number of
visitors) to help us see which areas are most popular with our users and improve and
update the content on our site. While in the process of browsing our site, you also
provide us with information that doesn’t reveal your personal identity—what type of
guest room you are exploring, for example. We use this aggregated data only as
explained in this Privacy Policy. We do not connect aggregated data to any name,
address, or other identifying information.

You may occasionally receive cookies from unaffiliated companies or organizations, to
the extent they are linked to the Site. These third-party cookies may collect information
about you when you “click” on their content or link. This practice is standard in the
Internet industry. Because of the way in which the Internet operates, we cannot control
collection of this information by these third parties, and these cookies are not subject to
this Privacy Policy.

Children’s Privacy & Parental Consent

Please be aware that Hotel has not designed this Site for children and does not intend
for it to be used by anyone under age 18. Accordingly, this Site should not be used by
anyone under age 18. Our privacy policy prohibits us from accepting users who are
under the age of 18. Hotel specifically requests that persons under the age of 18 not
use this Site or submit or post information to the Site. Should Hotel inadvertently acquire
personal information or other data from users under the age of 18, Hotel will not
knowingly provide this data to any third party for any purpose whatsoever, and any
subsequent disclosure would be due to the fact the user under age 18 used the Site and
submitted personal information without solicitation by or permission from Hotel.

Links Provided to Other Sites

Hotel may provide links to a number of other websites that we believe might offer you
useful information and services. However, those sites may not follow the same privacy
policies as Hotel. Therefore, we are not responsible for the privacy policies or the
actions of any third parties, including without limitation, any website owners whose sites
may be reached through this Site, nor can we control the activities of those websites.
We urge you to contact the relevant parties controlling these sites or accessing their on-
line policies for the relevant information about their data collection practices before
submitting any personal information or other sensitive data.

CALIFORNIA PRIVACY

California residents have additional rights regarding our use of your personal data and
are entitled once a year, free of charge, to request and obtain certain information
regarding our disclosure, if any, of certain categories of personal information to third
parties for their own direct marketing purposes in the preceding calendar year.

California residents under the age of 18 who are registered users of online sites,
services or applications also have the right under California law to request and obtain
removal of content or information they have publicly posted. If you are a California
resident and wish to request removal of such data, you can contact us using the contact
information provided below.

California residents are also entitled to exercise certain rights as expressly set forth by
the California Consumer Privacy Act, including the right to give the instruction ‘Do Not
Sell My Personal Information’ to third parties. For additional details on your California
Privacy rights, see our California Privacy notice.

EUROPEAN UNION PRIVACY

We comply with the provisions of the European Union’s General Data Protection
Regulation (“GDPR”) as to any information in its possession regarding EU-based
persons (“data subjects”). Accordingly, we only process personal information on data
subjects where we have a lawful basis to do so, which may include the consent of each
person (especially in the case of website visitors who provide their information) or
compliance with a legal obligation.

EUROPEAN UNION PRIVACY

If you are a resident of the European Union (the “EU”) or reside in the European
Economic Area (the “EEA”) and we collect personal data relating to you in the context of
the offering the Services, your personal data will be subject to Regulation (EU)
2016/679 (General Data Protection Regulation, “GDPR”).

LEGAL BASIS FOR PROCESSING PERSONAL DATA UNDER GDPR

We may process your personal data pursuant to one of the following conditions:

  • Consent: You have given your consent for processing personal data for one
    or more specific purposes.
  • Performance of a contract: Provision of personal data is necessary for the
    performance of an agreement with you and/or for any pre-contractual
    obligations thereof.
  • Legal obligations: Processing personal data is necessary for compliance
    with a legal obligation to which we are subject.
  • Vital interests: Processing personal data is necessary in order to protect your
    vital interests or those of another natural person.
  • Legitimate interests: Processing personal data is necessary for the purposes
    of the legitimate interests of Malliouhana Resort.

In any case, upon reasonable request we will gladly help to clarify the specific legal basis that applies to the processing,
and whether the provision of personal data is astatutory or contractual requirement, or a requirement necessary to enter
into a contract.

YOUR RIGHTS UNDER THE GDPR

Malliouhana Resort undertakes to respect the confidentiality of your personal data and
to guarantee you can exercise your rights.
You have the right under this Privacy Policy, and by law if you are within the EU, to:

  • Request access to your personal data. You can access, update or request
    deletion of your personal data, please contact us and we will attempt to assist
    you as possible. You also have a right upon request to receive a copy of the
    personal data we hold about you.
  • Request correction of the personal data that we hold about you. You have
    the right to have any incomplete or inaccurate information we hold about you
    corrected.
  • Object to processing of your personal data. This right exists where we are
    relying on a legitimate interest as the legal basis for our processing and there
    is something about your particular situation which makes you want to object to
    our processing. You also have the right to object where we are processing
    your personal data for direct marketing purposes.
  • Request erasure of your personal data. You have the right to ask us to
    delete or remove personal data from further processing.
  • Request the transfer of your personal data. We will provide to you, or to a
    third-party you have chosen, your personal data in a structured, commonly
    used, machine-readable format. Please note that this right only applies to
    automated information which you initially provided consent for us to use or
    where we used the information to perform a contract with you.
  • Withdraw your consent. You have the right to withdraw your consent on
    using your personal data. If you withdraw your consent, we may not be able to
    provide you with access to certain specific functionalities of the Service.

EXERCISING YOUR GDPR DATA PROTECTION RIGHTS

You may exercise your rights of access, rectification, cancellation and opposition by
contacting us via email at ma.services@malliouhana.com or mail at Malliouhana Resort,
Meads Bay, British West Indies 2640, Anguilla. Please note that we may ask you to
verify your identity before responding to such requests. If you make a request, we will
try our best to respond to you as soon as possible.
You have the right to complain to a Data Protection Authority about our collection and
use of your personal data. For more information please contact your local data
protection authority in the EEA.

CALIFORNIA PRIVACY NOTICE

This California Privacy Notice (“Notice”) supplements Malliouhana Resort’s (hereinafter
“Malliouhana Resort,” “we,” “us,” or “our”) Privacy Policy and applies specifically to
visitors and users who are California residents (“consumer(s)” or “you”). This Notice
details Malliouhana Resort’s compliance with, and the rights of consumers under, the
California Consumer Privacy Act of 2018 (“CCPA”) as well as other California privacy
laws. Any terms defined in the CCPA have the same meaning when used herein.

YOUR RIGHTS AS A CONSUMER

The CCPA grants you specific rights in and to your personal information. Specifically,
you have the rights set forth below and may exercise them, as applicable, as further
described below.

RIGHT OF ACCESS TO COLLECTED INFORMATION; DATA PORTABILITY

You have the right to request that Malliouhana Resort disclose the categories and
specific pieces of personal information that we have collected about you. Upon receipt
of any request, we will send you a verification notice and, once your identity has been
verified, we will disclose to you:

  • The categories of your personal information that we have collected.
  • The specific pieces of your personal information that we have collected.
  • The categories of sources from which we have collected your personal information.
  • The commercial reason for our collection or sale of your personal information.
  • The categories of third parties, if any, with whom we have shared your personal information.

Malliouhana Resort will disclose this information to you either electronically or by mail. If
provided electronically, the information will be in a portable and, to the extent feasible,
readily usable format so as to allow you to transmit the information to another party
without hindrance.

RIGHT OF ACCESS TO INFORMATION SOLD OR DISCLOSED FOR A
BUSINESS PURPOSE

You have the right to request that the Malliouhana Resort disclose the categories of
personal information that we have sold or otherwise disclosed to a third party about you.
Upon receipt of any request, we will send you a verification notice and, once your
identity has been verified, The categories of your personal information that we have otherwise disclosed
to a third party for a business purpose.we will disclose to you:

  • The categories of your personal information that we have collected.
  • The categories of your personal information that we have sold.
  • The categories of your personal information that we have otherwise disclosed to a third party for a business purpose.
  • The categories of third parties to whom we have sold your personal information.

RIGHT TO REQUEST DELETION

You have the right to request that Malliouhana Resort delete any of your personal
information that we have collected and retained about you, subject to certain
exceptions. Upon receipt of any request, we will send you a verification notice and, once
your identity has been verified, we will delete (and direct any third-party service
providers to delete) your personal information.

The Malliouhana Resort may deny your deletion request if retaining your personal
information is necessary for us to: complete the transaction for which we originally
collected your personal information; provide a service that you requested; take
reasonably anticipated actions within the context of our ongoing business relationship;
to comply with a legal obligation; or otherwise as set forth in the CCPA. If we deny your
deletion request, we will provide you with the reason(s) for such denial.

RIGHT TO OPT-OUT OF THE SALE OF YOUR PERSONAL INFORMATION

You have the right to request that Malliouhana Resort not sell your personal information.
This right is also referred to as the right to “opt-out” of the sale of your personal
information. Malliouhana Resort does not sell consumers’ personal information.

RIGHT OF NON-DISCRIMINATION

You have the right to exercise any or all of the rights identified above free of
discrimination. To exercise your rights to access about your personal information that is collected
and/or sold by Malliouhana Resort, or to request the deletion of your personal
information or an opt-out from the sale of your personal information, you can submit a
verifiable request by:a Resort will not discriminate against you for exercising your
CCPA rights.

EXERCISING YOUR CALIFORNIA PRIVACY RIGHTS

To exercise your rights to access about your personal information that is collected
and/or sold by Malliouhana Resort, or to request the deletion of your personal
information or an opt-out from the sale of your personal information, you can submit a
verifiable request by:

Email: ma.services@malliouhana.com
Mail:
Malliouhana Resort ATTN: Legal
Meads Bay, British West Indies 2640, Anguilla
Only you or an individual authorized to act on your behalf with the California Secretary
of State’s office may make a valid request as relates to your personal information. If you
are a parent or guardian of a minor child, you may make a request on their behalf.

Malliouhana Resort uses commercially reasonable efforts to respond to any verifiable
consumer request within 45 days of our receipt of such request. If we require additional
time, we will inform you of the same along with our reason(s) and any extension period
in writing via the contact information that you provide to us upon request. Any
information disclosure that we provide will cover the 12-month period immediately
preceding our receipt of your request. You may make a request for disclosure at any
time, but we will not provide any such disclosures more than two times in a 12-month
period.

Your Consent to This Privacy Policy

Use of the Site signifies your consent, as well as the consent of the company for whom
you use the Site and whose information you submit (if any), to this on-line Privacy
Policy, including the collection and use of information by Hotel, as described in this
statement, and also signifies agreement to the terms of use for the Site. Continued
access and use of the Site without acceptance of the terms of this Privacy Policy
relieves Hotel from responsibility to the user.

Policy Modifications & Contacting Hotel

Hotel reserves the right to change this Privacy Policy at any time; notice of changes will
be published on this page. Changes will always be prospective, not retroactive. If you
have questions about our policies, please contact us at:
Malliouhana Resort
Meads Bay, British West Indies 2640, Anguilla