1. The personal data we collect and how we collect it

We may collect, be provided with, store and use the following kinds of personal information:

• Your first and last name, telephone number, postal and e-mail address, fax number.
• Information about your computer and about your visits to and use of our website including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation.
• If you make a reservation or purchase any items using a credit or debit card then we need the card number, cardholder name, expiry date and CVV number.
• Your membership details (if provided), hotel preferences and travel experiences.
• Any survey responses or feedback you provide.

We may ask you for personal information in a variety of circumstances, for instance:

• When you make a hotel reservation or purchase something from our website or on the telephone or by e-mail, letter or fax.
• When you register with us, subscribe to our newsletter, enter competitions or register for promotions (if active), or when you take part in surveys or provide feedback.

We may be provided with personal information by third parties in connection with a reservation at our resort, for instance, by a travel agent you may use to make a reservation.

We may also collect personal information in the course of telephone calls to and from our office or reservation service which may be recorded or monitored for quality control and staff training. Call recordings will be maintained as long as reasonably necessary and will then be deleted. Any personal information obtained from you during the call will be treated in accordance with the provisions of this privacy policy.

2. Using your personal information

WSDR may use your personal data in a number of ways, set out below.

2.1 Reservations

We provide an online reservations facility on our website and a telephone facility for making reservations at our resort. In the course of making and fulfilling a guest reservation it is necessary for us to collect and use personal data which will be subject to our Reservations Privacy Policy.

2.2 Website and marketing

We may also use your personal information to:

• Administer the website.
• Improve your browsing experience by personalizing the website.
• Enable your use of the services available on the website.
• Send statements and invoices to you and track payments.
• Track your use of the reservation process and contact you once via email regarding your experience.
• Send you general (non-marketing) commercial communications.
• Send you e-mail notifications which you have specifically requested.
• Provide third parties with statistical information about our users where such information will not identify any individual user.
• Deal with enquiries and complaints made by or about you relating to the website.
• For internal administrative purposes, such as monitoring and managing WSDR services and member registration processes.

We will not, without your express consent, provide your personal information to any third parties for the purpose of direct marketing.

3. Sharing your personal information

We may disclose information about you to any member of our staff, agents, suppliers insofar as reasonably necessary for the purposes set out in this privacy policy.

It may sometimes be necessary for us to disclose your personal information in order to comply with a legal obligation; in such cases we will only do so in accordance with data protection legislation and will ensure that appropriate security measures are observed.

Except as provided in this privacy policy, we will not provide your information to third parties without your written confirmation.

4. Length of holding your personal information

We will only store your personal data for as long as is necessary for the legitimate purpose for which it was supplied/obtained and it will be destroyed or deleted when it is no longer necessary for us to hold it. You can ask us to erase or delete all or some of your personal data at any time although that may impact upon the benefits you receive from our website or other services.

5. Security of your personal information

We will take reasonable legal, technical and organizational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all the personal information you provide on secure (password and firewall protected) servers. Reservations you make with us will be encrypted using SSL technology.

In the course of processing or transmitting your credit card CVV number, we will observe and fully comply with the current Data Security Standard that we deploy.

You accept that data transmission over the Internet is inherently insecure and we cannot guarantee the security of data sent over the Internet.

6. International data transfers

Personal information that we collect or hold are stored in cloud storage. Besides this we do not transfer your personal data internationally for whatsoever the reasons.

7. Your privacy rights

You have the rights listed below in relation to personal data we hold about you:

• Delete data: You can ask us to erase or delete all or some of your personal data.
• Change or Correct data: You can ask us to change, update or correct your data where it is inaccurate.
• Object to, or Limit or Restrict our Use of data: You can ask us to stop using all or some of your personal data or to limit our use of it.
• Right to Access and/or take your data: You can ask us for a copy of your personal data to be provided in machine readable form.
• Complaint: You have the right to lodge a complaint with our supervisory authority in Oman.

If you wish to exercise any of these rights you can contact our Data Protection Team by email at sugardunesresort@gmail.com.

8. Data Controller and Contact

The data controller responsible in respect of the information collected on the website or otherwise in the course of your dealings with us is White Sugar Dunes Resort whose registered office is at:

PO Box 24, PC 711 Al Khaluf, Al Wusta, Oman.

Any queries regarding our use of your personal data should be addressed to us by email at sugardunesresort@gmail.com. Alternatively, you can contact J. Dunstan Sisirakumara on +968 7938 1314.

9. Our use of ‘cookies’

To make us work even better for you, we also use 'cookies' to collect information about your use of the website.

10. Policy amendments

We may update this privacy policy from time-to-time by posting a new version on the website and, as appropriate, this will be notified to you by email. You should check this page when using the website to ensure you are happy with any changes.