Data Protection Policy
Turtle Bay Hotels limited is committed to protecting the privacy and personal data of our website users and visitors. Our Data Protection Policy outlines how we collect, use, disclose, store, and protect your personal data in accordance with Data Protection Act 2019 including the General Data Protection Regulation (GDPR) and other relevant privacy legislation.
Data Collection
We shall collect and process the following types of personal data:
-
Name, email address, contact details (when submitted through forms)
-
IP address and browser type (for analytics and security)
-
Usage data (pages visited, time spent on site)
-
Cookies and similar tracking technologies
Purpose of Data Processing
We process your personal data for the following purposes:
-
To provide and maintain our website and services
-
To communicate with you, including responding to inquiries
-
To improve user experience and website performance
-
For security, fraud prevention, and legal compliance
Legal Basis for Processing
We rely on the following legal bases for processing personal data:
-
Your consent (where required) or when your access our website
-
Performance of a contract
-
Compliance with legal obligations
-
Legitimate interests pursued by us or a third party
Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
-
Service providers who assist us in operating the website upon consent (e.g. hosting providers, analytics tools)
-
Legal and regulatory authorities when required by law
-
Business partners in case of a merger, acquisition, or asset sale
Data Retention
We shall retain your personal data only for as long as necessary for the purposes set out in this policy or as required by law.
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.
Your Rights
You have the following rights regarding your personal data:
-
Right to access your data
-
Right to rectify inaccurate data
-
Right to erase your data ("right to be forgotten")
-
Right to restrict or object to processing
-
Right to data portability
Your Rights
You have the following rights regarding your personal data:
-
Right to access your data
-
Right to rectify inaccurate data
-
Right to erase your data ("right to be forgotten")
-
Right to restrict or object to processing
-
Right to data portability
-
Right to withdraw consent at any time
To exercise your rights, please contact us at reservations@turtlebay.co.ke
International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with data protection laws.
Updates to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated "Effective Date."
If you have any questions about this Data Protection Policy or our data practices, please contact: it.admin@turtlebay.co.ke
