Privacy Policy

Seraphina Hotel & Spa

Effective Date: 01/01/2026

At Seraphina Hotel & Spa, we are committed to protecting your privacy and ensuring that your personal data is handled with the highest standards of care, transparency, and compliance. This Privacy Policy outlines how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and the Uganda Data Protection and Privacy Act, 2019.

1. Information We Collect

We may collect the following categories of personal data:

• Identification Data: Name, address, email, phone number, nationality, passport/ID details.

• Reservation & Stay Data: Room preferences, check-in/check-out dates, payment details.

• Wellness & Lifestyle Data: Spa treatments, dining preferences, special requests.

• Digital Data: IP address, browser type, device information, cookies, and usage analytics.

• Employment & Partnership Data: For career applications or business collaborations.

2. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contractual Necessity: To fulfill reservations, provide services, and manage your stay.

• Consent: For marketing communications, wellness preferences, and optional services.

• Legitimate Interests: To improve guest experiences, ensure security, and maintain operations.

• Legal Obligations: To comply with applicable laws and regulatory requirements.

3. How We Use Your Information

Your data is used to:

• Deliver personalized hospitality and wellness experiences.

• Process reservations, payments, and service requests.

• Communicate offers, promotions, and updates (with your consent).

• Ensure safety, security, and compliance with legal obligations.

4. Sharing of Information

We do not sell your personal data. We may share information only with:

• Service Providers: Trusted partners assisting with reservations, payments, or guest services.

• Legal Authorities: When required by law or to protect rights, safety, and property.

• Affiliated Partners: For exclusive travel, wellness, or hospitality collaborations, with your consent.

5. Data Security

We employ industry-standard safeguards, including:

• Encrypted communications and secure servers.

• Restricted access to personal data by authorized staff only.

• Regular monitoring and compliance audits.

6. Guest Rights (GDPR & International Law)

You have the right to:

• Access: Request a copy of your personal data.

• Rectification: Correct inaccurate or incomplete information.

• Erasure (“Right to be Forgotten”): Request deletion of your data, subject to legal obligations.

• Restriction of Processing: Limit how your data is used.

• Data Portability: Receive your data in a structured, machine-readable format.

• Objection: Opt out of certain processing, including direct marketing.

• Withdraw Consent: At any time, for services or communications requiring consent.

7. International Transfers

As a global hospitality brand, your data may be transferred outside Uganda or the EU. We ensure such transfers comply with GDPR and Uganda’s Data Protection Act through appropriate safeguards, including contractual clauses and secure processing standards.

8. Cookies & Digital Tracking

Our website uses cookies to enhance browsing, analyze traffic, and personalize content. You may disable cookies in your browser settings, though some features may be limited.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above, or as required by law.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on our website with a revised effective date.

11. Contact Us

For questions or requests regarding this Privacy Policy, please contact:

Data Protection Officer Seraphina Hotel & Spa [Insert Address] [Insert Email Address] [Insert Phone Number]