YASA Boutique Hotel and yasazanzibar.com (“the Property”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of its guests, visitors, and website users. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR).
2. Personal Data We Collect
We may collect and process the following personal data:
Full name, nationality, and identification details (passport or ID, where required by law)
Contact details (email address, telephone number, postal address)
Booking and stay information (arrival/departure dates, preferences, special requests)
Payment and billing information (processed securely via authorised payment gateways)
Communication records (emails, messages, enquiries)
Technical data when using our website (IP address, browser type, cookies)
3. Lawful Basis for Processing
We process personal data only where legally permitted, including:
Performance of a contract (to manage bookings and provide accommodation services)
Legal obligations (immigration, tax, and regulatory requirements)
Consent, where explicitly provided (marketing communications)
4. Use of Personal Data
Personal data is used strictly for:
Managing reservations, stays, and guest services
Processing payments and invoices
Complying with legal and regulatory obligations
Responding to enquiries and providing customer support
Sending operational communications related to your booking
Marketing communications only where consent has been given (with the right to opt out at any time)
5. Data Sharing
We do not sell or rent personal data. Data may be shared only with:
Trusted service providers (payment processors, booking systems, IT providers)
Government or regulatory authorities where required by law
All third parties are required to comply with GDPR standards and confidentiality obligations.
6. Data Storage & Security
Personal data is stored securely using appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse. Data is retained only for as long as necessary to fulfil the purposes outlined or to comply with legal requirements.
7. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), such transfers are carried out using GDPR-compliant safeguards, including standard contractual clauses where applicable.
8. Your Rights Under GDPR
You have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (“right to be forgotten”), subject to legal obligations
Restrict or object to processing
Request data portability
Withdraw consent at any time (where processing is based on consent)
Requests may be submitted in writing using the contact details below.
9. Cookies & Website Tracking
Our website may use cookies to improve functionality and user experience. You may control or disable cookies through your browser settings. Detailed cookie information may be provided separately.
10. Complaints
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your local data protection authority.
11. Contact Details
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:
This Privacy Policy may be updated from time to time to reflect legal or operational changes. The most current version will always be available via our official channels.
