Global Privacy Policy

1. Commitment to Discretion & Confidentiality

At Özvural Hospitality, we hold guest privacy to be as fundamental as our dedication to fine craftsmanship. When you entrust us with your travel arrangements, personal preferences, and financial details, we treat that trust with utmost vigilance and transparency.

This Global Privacy Policy explains how Özvural ("we", "our", or "the Group") collects, uses, protects, and discloses personal data gathered across our website, mobile platforms, in-hotel guest services, and Fans of Özvural membership accounts.

2. Information We Collect

We only collect information necessary to tailor and deliver world-class hospitality experiences:

• Identification & Contact Data: Full name, nationality, passport details for mandatory local registration, email address, postal address, and contact telephone numbers.
• Reservation & Stay Records: Arrival and departure dates, room preferences, dietary requirements, spa treatment notes, and special celebratory dates.
• Financial Details: Payment card numbers, billing addresses, and transactional histories processed exclusively through PCI-DSS Level 1 encrypted gateways.
• Fans of Özvural Preferences: Customized choices including bedding firmness, room scent preferences, and private dining arrangements.

3. How We Use Your Information

Your personal information is processed strictly for legitimate operational and guest service purposes:

• Fulfilling hotel, villa, dining, spa, and transportation bookings.
• Providing personalized guest recognition during your stay across all international Özvural properties.
• Administering our complimentary Fans of Özvural membership programme and rewarding loyalty.
• Complying with statutory reporting requirements established by government and law enforcement authorities.

4. International Data Transfers & Protection

As a luxury operator spanning multiple continents, your data may be transferred to and maintained on secure servers outside your home jurisdiction. We enforce strict contractual clauses, ISO 27001 data security certifications, and continuous penetration testing to ensure parity with European Union General Data Protection Regulation (GDPR) standards.

We never sell, rent, or lease your personal information to third-party advertisers or data brokers under any circumstances.

5. Your Rights & Data Protection Officer Contact

Depending on your country of residence (including under GDPR, UK GDPR, and CCPA/CPRA), you possess the right to access, rectify, port, or erase your personal data held within our systems.