Privacy Policy

DON MAAGA MALDIVES respects the privacy of all its customers and business clientele and treats personal information provided by you as confidential. We pledge to fully comply with the requirements of the International Personal Data (Privacy) Ordinance. We use your personal data and information in order to fulfill our commitment to provide you with distinctive standards of hospitality service.

This Privacy Policy explains our practices regarding the personal information we collect from you or about you on this site or via our apps, through written or verbal communications with us, when you visit one of our properties, or from other sources.

Capturing Personal Information

We collect personal information at every touch point or guest interaction and in conducting every aspect of our business.

This personal information may include:

• Your name, mailing address, billing address, email address, phone number.
• Information related to your reservation, stay, or visit to a property.
• Information related to the purchase and receipt of products and/or services.
• Nationality, passport number, and date and place of issue.
• Travel history and payment information (such as your payment card number, authentication information, and other billing details).
• Guest preferences, marketing and communication preferences, and reviews or opinions about our properties.

Additional Information Collection

• Surveys: We may request demographic data or other personal information in customer surveys.
• On-property Collection: We collect additional personal information during registration/check-in, including information required by local laws. We may also use CCTV and other security measures that capture or record images and location information for the protection of our guests and staff.
• Social Media: If you participate in DON MAAGA-sponsored social media activities, we may collect certain information from your social media account consistent with your settings (such as location, check-ins, photos, videos, or interests).

In addition to information we collect directly from you, we may also infer or collect information from other sources.

Application of Personal Information

• We use captured personal information to personalize the services you request and expect from DON MAAGA, conduct direct marketing and promotions, and as further detailed below.
• We will collect your consent prior to processing your data where required by law. Some information (like your name, address, and payment details) is required to process your reservation.

Uses of Personal Information

• Marketing and Communications: To send newsletters, promotions, and featured specials; to conduct surveys; to send alerts or confirmations; and to deliver marketing messages in accordance with your communication preferences.
• Service Enhancements: To improve services and ensure that our site, products, and offerings are relevant to your needs.
• Data Accuracy, Analytics, and Personalization: To keep information up to date, improve analytics, and personalize your experiences using aggregated or third-party data.

Distribution of Personal Information

To offer you the expected level of hospitality and the best service, we may share your personal information with our service providers and third parties as outlined below.

• On-property Services: We may share personal information with third-party providers of services such as concierge, Wi-Fi, transport, spa, or dining.
• Service Providers: We rely on third parties for some products and services, who are contractually obligated to protect your personal information.
• Other Disclosures: DON MAAGA may disclose personal information to:
• Comply with laws or legal processes.
• Respond to governmental or regulatory requests.
• Protect the rights, privacy, or safety of DON MAAGA, our guests, or the public.
• Enforce website terms and conditions.
• Respond to emergencies or pursue legal remedies.

Other Information

When you visit and interact with DON MAAGA websites and apps, we collect information that does not directly identify you (“Other Information”), such as pages visited and visit frequency.

We use cookies and other technologies (pixel tags, web beacons, JavaScript, device IDs, etc.) to collect this data and to deliver online and mobile advertisements.

You may remove or block cookies via your browser settings. For guidance, visit www.allaboutcookies.org.

Sensitive Information

“Sensitive information” refers to data such as racial or ethnic origin, religious beliefs, health data, sexual orientation, and other identifiers. DON MAAGA does not generally collect sensitive information unless required by law or volunteered by you.

Health data may be used only to serve you better and meet your particular needs (e.g., disability access).

Personal Information from Children

We do not knowingly collect personal information from individuals under 18 years of age. Parents or guardians should not allow minors to submit personal information without permission.

Links to Third-Party Websites and Services

Our site may contain links to third-party websites. DON MAAGA is not responsible for the collection, use, or disclosure of data by such third parties. Please read the privacy policies of other websites before submitting personal information.

Protecting Personal Information

DON MAAGA takes reasonable measures to:

• Protect personal information from unauthorized access, disclosure, alteration, or destruction.
• Keep personal information accurate and up to date.
• We maintain PCI and IT compliance programs. In the event of a security incident, we will notify regulators and/or consumers as required by law.

For your safety, DON MAAGA will never ask for confidential information or payment details via email or text. If you receive such a request, please report it to [email protected].

Changing and Accessing Your Personal Information

You may request information about the personal data we hold about you, withdraw consent, or ask that we correct or delete your information. Requests can be made in writing to [email protected].

Retaining Personal Information

We retain personal information for as long as needed to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Guest reservation data is retained for seven years after the stay is completed; other information is retained for shorter periods where possible.

When destroyed, personal data is securely deleted or shredded to prevent reconstruction.

Choices – Marketing Communications

If you have provided your contact details, we may send information about products, services, and events (according to your consent and preferences).

You may opt out at any time by emailing [email protected].

Opt-out requests may take up to ten business days to process.

Privacy Policy Modifications

DON MAAGA may modify this policy from time to time. Changes will be posted on our website homepage, and registered users will be notified via their chosen communication channel.

Use of our site or services following such updates constitutes your acceptance of the revised policy.

Contact Us

If you have any questions, compliments, or complaints regarding this policy, please contact us by email at [email protected].

We will respond within 30 days or sooner where practicable.

Additional Information – Residents in the European Economic Area (EEA)

For individuals residing in the EEA, this section outlines your rights and DON MAAGA's obligations under applicable data protection laws.

Data Protection Officer

You may contact our Data Protection Officer at [email protected].

Purposes and Legal Basis for Processing

DON MAAGA collects personal information for your stay at our properties under legal bases including contractual obligations, legal compliance, legitimate business interests, and your consent.

Retention

We retain personal information for as long as necessary to fulfill its purpose or as legally required.

Data Subject Rights

Residents of the EEA have the right to:

• Be informed about data collection and use.
• Access and rectify personal data.
• Request erasure or restriction of processing.
• Object to processing and data portability.
• Lodge complaints with supervisory authorities.
• Requests may be submitted through the Data Subject Rights Request Portal or in writing to DON MAAGA. We will respond within 30 days (or up to 60 in exceptional cases).

International Data Transfers

DON MAAGA may transfer personal information to countries without equivalent data protection laws, including to the Maldives, for the purposes described in this policy.

Policy on Cookies and Other Technologies

DON MAAGA's websites may use cookies and similar technologies to analyze traffic patterns, personalize content, and deliver relevant advertisements.

You can manage or block cookies anytime using your browser settings.

Guidance is available at www.allaboutcookies.org.