Privacy

( 1 )Who we are

Dar Zilal is a palace hotel on Al Sufouh Road, Jumeirah 3, Dubai. In this policy “we”, “us” and “our” mean the company that operates the hotel. We are responsible for the personal data you share with us when you stay, dine, book a treatment, send an enquiry or use this website.

( 2 )What we collect

We collect only what we need to look after you:

• Identity and contact details: name, email, phone, address, and the passport or Emirates ID details that Dubai law requires us to record at check-in.
• Stay details: dates, room preferences, arrival flights, dietary requirements and requests you share with our team.
• Payment details: card information is handled by our payment provider; we keep only the last four digits and the transaction record.
• Website data: pages visited, device and browser type, and the details you type into our forms.

( 3 )How we use it

We use your data to confirm and manage reservations, arrange transfers and excursions, prepare your room the way you like it, take payment, meet our legal obligations and answer your questions. With your consent we also send our letters from the lagoon, four a year, and you can stop them at any time.

( 4 )Why we are allowed to

We process personal data to perform our contract with you, to comply with the law (for example guest registration with the Dubai authorities), for our legitimate interest in running a safe and well-kept hotel, and with your consent for marketing and optional cookies. This follows the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies, the EU and UK GDPR.

( 5 )Who we share it with

We never sell personal data. We share it only with those who help us look after your stay: our booking and payment providers, the drivers, boat crews and guides who run your transfers and excursions, our IT and email providers, and public authorities when the law requires it. Each is bound to keep your data confidential and secure.

( 6 )International transfers

Some of our providers store data outside the UAE. When that happens we use safeguards recognised by UAE law, such as contractual clauses, so your data keeps the same level of protection.

( 7 )How long we keep it

Guest records are kept for as long as the law requires, usually five years after your stay. Enquiries that do not become a booking are deleted after twelve months. Marketing preferences are kept until you unsubscribe.

( 8 )Your rights

You can ask us at any time to:

• see the personal data we hold about you and receive a copy of it;
• correct anything that is wrong or incomplete;
• delete your data, or limit how we use it, where the law allows;
• object to marketing or withdraw a consent you gave us.

( 9 )Cookies

This website uses a small number of cookies that it needs to work, such as remembering your booking dates. With your permission we also use analytics cookies to understand which pages are useful. You can change your choice in your browser settings at any time.

( 10 )Security

Access to guest data is limited to the colleagues who need it. Our systems are encrypted in transit and at rest, and we review our providers each year.

( 11 )Children

We collect data about children only when a parent or guardian books for them, and only what we need for the stay.

( 12 )Changes to this policy

We may update this policy when our services or the law change. The date at the top of this page shows when it was last revised.