Privacy Policy

Last Updated: 28 March 2026

Welcome to Elysium Premier. We are committed to safeguarding the privacy and personal data of our guests, visitors, and users. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you interact with our hotel, website, mobile application, and related services.

By accessing our services, making a reservation, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and agree to the practices described in this policy.

1. Information We Collect

We may collect the following categories of personal information:

• Identity Information: full name, title, date of birth, nationality, and government-issued identification details (e.g. passport or driving licence number).
• Contact Information: email address, telephone number, postal address, and emergency contact details.
• Financial Information: credit or debit card details, billing address, and transaction history related to your bookings and purchases.
• Booking and Stay Information: reservation dates, room preferences, special requests, dietary requirements, loyalty programme membership details, and guest history.
• Technical Information: IP address, browser type and version, device identifiers, time zone settings, operating system, and browsing activity when using our website or application.
• CCTV and Security Data: images and recordings captured by security cameras on our premises for the safety of guests and staff.
• Communication Records: correspondence and interactions with our staff, including emails, telephone calls, chat messages, and feedback or survey responses.
• Health and Accessibility Information: any medical or dietary information voluntarily provided by you to enable us to accommodate special needs during your stay.

2. Bookings and Cancellations

When you make a booking with Elysium Premier, we collect and process personal data necessary to fulfil your reservation and deliver our services. The following terms apply:

1. All bookings are subject to availability and confirmation by Elysium Premier. Personal data provided during the booking process will be retained in accordance with Section 6 of this policy.
2. Any change or cancellation made within 24 hours of the booking date is strictly non-refundable. This includes, but is not limited to, modifications to room type, dates of stay, guest names, and full cancellations. By confirming your booking, you expressly acknowledge and accept this non-refundable condition.
3. Cancellations made outside the 24-hour window may be subject to cancellation fees as outlined in our Booking Terms and Conditions, which are provided at the time of reservation.
4. Refund requests, where applicable, will be processed to the original payment method within 10-14 business days.
5. We reserve the right to cancel or modify a booking where we reasonably suspect fraudulent activity, in which case the guest will be notified promptly.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To process and manage reservations, check-ins, check-outs, and related services.
• To process payments, issue invoices, and manage billing enquiries.
• To personalise your experience, including room preferences, amenities, and special requests.
• To communicate with you regarding your booking, stay, or any promotional offers you have opted into.
• To administer our loyalty and rewards programme.
• To comply with applicable legal and regulatory obligations, including tax reporting and anti-money laundering requirements.
• To ensure the safety, security, and integrity of our premises, systems, and services.
• To conduct internal audits, analytics, and research to improve our services.
• To enforce our terms and conditions and protect our legal rights.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: processing required to fulfil our obligations under your booking or service agreement.
• Legitimate Interests: processing necessary for our business operations, including fraud prevention, security, service improvement, and direct marketing (where you have not opted out).
• Legal Obligation: processing required to comply with applicable laws, regulations, or court orders.
• Consent: where you have provided explicit consent, such as for marketing communications or the processing of sensitive personal data (e.g. health information).

5. Sharing Your Information

We do not sell your personal data. We may share your information with the following categories of recipients:

• Service Providers: trusted third-party vendors who assist with payment processing, IT infrastructure, marketing, analytics, and other operational services, under strict data processing agreements.
• Legal and Regulatory Authorities: where required by law, regulation, or valid legal process.
• Affiliated Entities: companies within the Elysium Premier group of companies for operational, administrative, and marketing purposes.
• Business Transfers: in connection with a merger, acquisition, restructuring, or sale of assets, your data may be transferred as part of the transaction, subject to appropriate safeguards.
• Emergency Services: where necessary to protect the vital interests of any individual.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements.

• Booking and transaction records are retained for a minimum of 7 years in compliance with financial and tax regulations.
• CCTV footage is typically retained for 30 days unless required longer for security investigations or legal proceedings.
• Marketing preferences and consent records are retained until you withdraw your consent or request deletion.
• Guest profiles and loyalty programme data are retained for the duration of your membership and for a reasonable period thereafter.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols.
• Secure access controls with role-based permissions and multi-factor authentication.
• Regular security audits, vulnerability assessments, and penetration testing.
• Staff training on data protection and confidentiality obligations.
• Physical security measures for premises where personal data is stored or processed.

While we take every reasonable precaution, no method of electronic storage or transmission is entirely secure. We cannot guarantee absolute security of your information.

8. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of Access: to request a copy of the personal data we hold about you.
• Right to Rectification: to request correction of inaccurate or incomplete data.
• Right to Erasure: to request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: to request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within the timeframe required by applicable law.

9. Cookies and Tracking Technologies

Our website and application use cookies and similar technologies to enhance your experience, analyse usage patterns, and deliver personalised content. Categories of cookies we use include:

• Strictly Necessary Cookies: essential for the operation of our website, such as session management and security features.
• Performance and Analytics Cookies: to collect anonymised data on how visitors interact with our site, helping us improve functionality.
• Functional Cookies: to remember your preferences and settings for a more personalised experience.
• Marketing Cookies: to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of our website.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the relevant data protection authority.
• Transfers to countries recognised as providing an adequate level of data protection.
• Binding Corporate Rules for intra-group transfers where applicable.

11. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children without verifiable parental or guardian consent. If we become aware that we have inadvertently collected data from a child without appropriate consent, we will take prompt steps to delete such information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any material changes will be communicated through our website, application, or by direct notification where appropriate. We encourage you to review this policy periodically.

Thank you for entrusting Elysium Premier with your personal information.