Privacy policy
The www.sandylane.com website (the "Website") is operated by Sandy Lane Hotel Co. Limited (the "Sandy Lane", "our", "we" and "us"). This Privacy Notice (the "Notice") is intended to explain how your information will be handled by Sandy Lane and sets out the basis upon which we use, process, store or disclose any information including the personal information detailed below relating to you ("Personal Data") that we will collect from you or that you provide to us through the Website. The information provided by you will be held by us as a controller.
This Notice, together with our Terms of Use and our Cookies Policy applies to your use of the Website.
If you have any queries in relation to this Notice or our practices regarding your Personal Data, please contact our Privacy Compliance Manager at [email protected].
2. YOUR PERSONAL DATA COLLECTED & OBTAINED
We collect and process the following Personal Data when you use the Website:
Device Information
When using the Website and availing of services through the Website, Personal Data will be collected from you through the use of cookies and by Sandy Lane. This includes information about:
- your device type, operating system, browser, IP address and other information derived from cookies used on the Website. Please see our Cookies Policy for further information; and
- details of your visits to the Website such as traffic data, location data and the resources, advertisements and linked websites that you access through the Website.
You can choose to provide us with the following Personal Data:
Correspondence Information
- You may choose to give us information such as your name, e-mail address, address, telephone number and other details when contacting us by submitting enquiries through the Website or our Chat With Us function of the website.
Marketing Information
- Where we send you marketing and promotional material, we will use the information that you voluntarily provide us with in order to send this to you.
- We may also process information about how you interact with the emails, letters and SMS messages you receive from us, such as whether or not you open the communication, the links you click on, whether you purchase anything or whether you opt out of the communications.
We may receive the following Personal Data about you from third-party sources and we have set out below where this Personal Data has been obtained from:
Categories of Personal Data Source
Social Media Information We may receive information about you from social media platforms, such as Facebook, Twitter, LinkedIn and Instagram, when you interact with us via such platforms.
3. HOW & WHY WE PROCESS YOUR PERSONAL DATA
The following table details the legal bases on and purposes for which we collect and process your Personal Data:
Category of Personal Data Legal Basis Purpose(s) Important things to Note Device Information Entering into or Performance of a Contract
It is necessary to process your Personal Data to enter into and perform our contract with you in relation to your use of the Website as set out in the Terms of Use. Access to the Website
To provide you with access to the Website and to allow you to use the Website. If you do not wish to provide us with your Personal Data for these purposes, we will not be able to enter into or perform our contract(s) with you and you will need to leave the Website. Device Information
Correspondence Information
Marketing Information
Social Media Information Compliance with a Legal Obligation
It is necessary for us to collect and process your Personal Data in order to comply with the legal obligations imposed on us. To ensure compliance with our obligations under consumer, tax and other applicable laws. Device Information
Correspondence Information
Marketing Information
Social Media Information To Defend, Establish or be a Party to Legal Claims
- We may process your Personal Data as necessary in order for us to establish, investigate, exercise or defend a legal claim to which you are a party. To file legal proceedings
- To investigate, establish, exercise or defend a legal claim
- To settle legal claims
Device Information
Correspondence Information
Marketing Information
Social Media Information Legitimate Interests
It is in our legitimate interests to collect and process your Personal Data for the purposes of improving and monitoring website efficiency, enhancing your use of the Website.
It is also necessary for the purposes of our legitimate interests to process your Personal Data to respond to any queries or requests submitted by you to us.
Improving Website Functionality and Efficiency
• To provide, improve, test and monitor the effectiveness of the Website;
• to monitor metrics such as total number of visitors, traffic data and demographic patterns; and
• to ensure the content on the Website is presented in the most effective manner for you and your device.
Responding to Queries
• To process and respond to any enquiries or requests that you submit to us through the Website or by emailing us on any of our email channels; and
• to seek your views on the Website.
Promotional and Marketing Materials
• To send you marketing communications about us and our services and/or offers Where we process your Personal Data based on our legitimate interests, we make sure to consider and balance any potential impact on you and your privacy rights. We will not process your Personal Data where our interests are overridden by the impact on your privacy rights.
4. DISCLOSURE OF YOUR PERSONAL DATA
We may disclose some or all of the Personal Data we collect from and obtain about you to the following third parties:
Third-Party Service Providers
- To send you communications via third party communications or delivery services providers
- Tour operators and travel service providers
Other Recipients
- Prospective buyers of business assets (to facilitate the acquisition of Sandy Lane or a substantial portion of Sandy Lane's assets by a third party)
- Where we are under a duty to disclose or share your Personal Data in order to comply with any legal or regulatory obligation or request
5. TRANSFERS OF YOUR PERSONAL DATA
The Personal Data that we collect from you may be transferred to, and stored at, a destination outside Barbados and may be transferred outside the European Economic Area ("EEA"). Where such transfers occur, it is our policy that: a) data transfers do not occur without our prior written authority; and b) that an appropriate transfer agreement is put in place to protect your Personal Data. If you would like to find out more about any such transfers, please contact our Privacy Compliance Manager whose details are set out in Section 8 of this notice.
6. RETENTION OF YOUR PERSONAL DATA
In general, we expect to keep your Personal Data for as long as is reasonably necessary for the purposes for which it was obtained. Once we have determined that we no longer need to hold your Personal Data, we will delete it from our systems. Please note that in certain circumstances, we may hold your data for a longer period, for example, if we are processing an ongoing claim or believe in good faith that the law or a relevant regulator may reasonably in our view expect or require us to preserve your Personal Data.
7. HOW WE STORE AND SAFEGUARD YOUR PERSONAL DATA
We care about protecting your information. That's why we put in place appropriate measures that are designed to prevent unauthorized access to, and misuse of, your Personal Data. These include measures to deal with a suspected data breach. We are committed to taking reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorized access. We do this by having in place a range of appropriate technical and organizational measures.
8. CHANGES TO THIS NOTICE & QUESTIONS
We may amend this notice on occasion, in whole or part, at our sole discretion. Any changes will be effective immediately upon communicating the revised notice to you.
If at any time we decide to use your Personal Data in a manner significantly different from that stated in this notice, or otherwise disclosed to you at the time it was collected, we will notify you by the contact details you provide us with, and you will have a choice as to whether or not we use your Personal Data in the new manner.
If you have any questions, comments or concerns about the way your Personal Data are being used or processed by the Company, please submit your question, comment or concern in writing to request to our Privacy Compliance Manager in writing to [email protected].
9. EU GUESTS - YOUR RIGHTS
For our guests from the European Union, the following section sets out the rights applicable under the General Data Protection Regulation.
The table below sets out the rights which you have to address any concerns or queries with us about our processing of your Personal Data:
Right Further Information Right of Access You have the right to request a copy of the Personal Data held by us about you. We will only charge you for making such an access request where we feel your request is unjustified or excessive. Right to Rectification You have the right to request that we amend any inaccurate Personal Data that we have about you. Right to Erasure You have the right to ask us to erase your Personal Data where:
1. your Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by us;
2. you withdraw your consent and no other legal ground permits us to process your Personal Data;
3. you object to the processing and there are no overriding legitimate grounds for the processing;
4. your Personal Data have been unlawfully processed; or
5. your Personal Data must be erased in order to comply with a legal obligation.
We may not be able to comply with a request where we require your Personal Data for compliance with a legal obligation or in connection with legal proceedings or for exercising the right of freedom of expression and information.
Right to Restriction of Processing You have the right to ask us to restrict processing your Personal Data in the following situations:
(1) where you contest the accuracy of your Personal Data;
(2) where the processing is unlawful and you do not want us to delete your Personal Data;
(3) where we no longer need your Personal Data for the purposes of processing but you require the data in relation to a legal claim; or
(4) where you have objected to our processing of your Personal Data pending the verification of whether or not our legitimate business interests override your interests, rights and freedoms or in connection with legal proceedings.
When you exercise this right we may only store your Personal Data. We may not further process the data unless you consent or the processing is necessary in relation to a legal claim or to protect the rights of another person or legal person or for reasons of important public interest. We will inform you before the processing restriction is lifted.
Right to Data Portability You may request us to provide you with your Personal Data which you have given us in a structured, commonly used and machine-readable format and you may request us to transmit your Personal Data directly to another data controller where this is technically feasible.
This right only arises where:
(1) we process your Personal Data on your consent or where it is necessary to perform our contract with you; and
(2) the processing is carried out by automated means.
Right to Object You have a right to object at any time to the processing of your Personal Data where we process your Personal Data on the legal basis of pursuing our legitimate interests.
You have a right to object at any time to the processing of your Personal Data for direct marketing purposes.
You can exercise any of these rights by submitting a request to our Privacy Compliance Manager in writing to [email protected].
We will provide you with information on any action taken upon your request in relation to any of these rights without undue delay and at the latest within one month of receiving your request. We may extend this up to 2 months if necessary however we will inform you if this arises. Please note that we may ask you to verify your identity when you seek to exercise any of your privacy rights.
You also have the right to lodge a complaint with your privacy or data protection supervisory authority in the European Union.
SANDY LANE HOTEL COOKIE POLICY
Sandy Lane Hotel Co. Limited ("Sandy Lane", "we", "us", "our") respects the privacy of all visitors to our website.
This is our policy on the use of cookies on www.sandylane.com. We may update this Cookie Policy from time to time to reflect any changes in technology or legislation affecting the way we use cookies and how you, as a user, can manage them.
What are cookies and how do we use them?
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you visit our website and also assists us in making improvements.
A cookie is a small file (consisting of letters and numbers) that we store on your browser or elsewhere on your device.
We use the following flavors of cookies:
- Functionality cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, including (where applicable) greet you by name and remember your preferences (for example, content tailored for your region or choice of language).
You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
Cookie Description Expiry CMS Preferred Culture Stores the website user's preferred content culture, which is predominantly regarding the relevant language of the user. 30 Days ASP.net Session ID Keeps the user session ID for security reasons. Session How to control and delete cookies
The majority of web browsers accept cookies, but you can usually change the web browser’s settings to refuse new cookies, disable existing ones or simply let you know when new ones are sent to your device.
In order to do this, follow the instructions provided by your browser (usually located within the “Help”, “Tools” or “Edit” facility) or you can click on the links below to access instructions from some of the most popular browsers:
- Google Chrome
- Internet Explorer
- Firefox
- Safari
- Safari Mobile
- Opera
For more information on how to manage cookies, please visit https://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm.
However, please be aware that, if you refuse or disable cookies, some of the website’s functionality may be lost.
In addition, disabling a cookie or category of cookie does not delete the cookie from your browser, you will need to do this yourself from within your browser.
Changes to our use of cookies
Any changes to our use of cookies for this website will be posted here and if appropriate, signposted from our web pages highlighting any changes.
Contact Information
If you have any queries in relation to this notice, please contact us at [email protected].