Privacy Policy

At PoolAura-Sky, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our services, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Make a reservation or booking
• Create an account on our website
• Subscribe to our newsletter
• Contact us through our contact forms or email
• Participate in surveys or promotional activities
• Check in or check out of our hotel

This information may include:

• Full name and title
• Email address
• Phone number
• Postal address
• Date of birth
• Passport or identification details
• Payment information (credit card details, billing address)
• Preferences and special requests
• Communication preferences

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device identifiers
• Clickstream data

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process and manage your reservations, provide accommodation services, and fulfill your requests
• Communication: To send booking confirmations, updates, and respond to your inquiries
• Payment Processing: To process transactions and prevent fraudulent activities
• Personalization: To customize your experience and provide tailored recommendations
• Marketing: To send promotional materials, special offers, and newsletters (with your consent)
• Analytics: To analyze website usage and improve our services
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To maintain the security and integrity of our systems

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website.

3.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly and enable basic features
• Performance Cookies: Collect information about how visitors use our website to help us improve its functionality
• Functional Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing habits to deliver relevant advertisements

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our website. For more information, please refer to our Cookie Policy.

4. Analytics and Third-Party Services

We use third-party analytics services to understand how visitors interact with our website and improve user experience. These services may include:

• Google Analytics: Tracks website traffic and user behavior patterns
• Social Media Pixels: Measure the effectiveness of our social media campaigns
• Booking Analytics: Monitor reservation patterns and optimize our services

These third-party services may collect information about your online activities over time and across different websites. They operate under their own privacy policies, and we encourage you to review them.

5. Data Sharing and Disclosure

We may share your personal information with the following parties:

• Service Providers: Third-party companies that help us operate our business (payment processors, IT service providers, marketing agencies)
• Business Partners: Travel agencies, tour operators, and other hospitality partners
• Legal Authorities: When required by law or to protect our legal rights
• Corporate Transactions: In connection with mergers, acquisitions, or asset sales

We ensure that all third parties are contractually obligated to protect your data and use it only for specified purposes. We do not sell your personal information to third parties for their marketing purposes.

6. International Data Transfers

PoolAura-Sky operates in Dubai, UAE. If you are located in the European Economic Area (EEA) or other regions with data protection laws, please note that your information may be transferred to and processed in countries that may not have the same data protection standards. We implement appropriate safeguards, such as Standard Contractual Clauses, to ensure your data receives adequate protection during international transfers.

7. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (right to be forgotten)
• Right to Restriction: Request limitation of processing your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of data and the purpose for which it was collected:

• Booking Information: Retained for 7 years for accounting and legal purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Analytics: Typically retained for 26 months
• Account Information: Retained until account deletion is requested

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using SSL/TLS protocols
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and privacy
• Secure payment processing through PCI-DSS compliant providers
• Regular backups and disaster recovery procedures

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

11. Marketing Communications

With your consent, we may send you promotional emails about special offers, new services, and other information we think you may find interesting. You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at booking@poolaura-sky.ae
• Updating your communication preferences in your account settings

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your bookings and account.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries or to exercise your data protection rights, please include "GDPR Request" in the subject line of your email. We are committed to addressing your concerns promptly and transparently.

14. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., providing accommodation services)
• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, website analytics)
• Legal Obligation: Processing is required to comply with legal or regulatory requirements