PRIVACY POLICY AND INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

LAST UPDATED JUNE 2024

Alibey Maldives Pvt. Ltd. Company is committed to providing distinctive resorts and unique experiences for our guests. Consistent with that commitment, we are respectful of the privacy of the personal data that we receive and use in order to provide and offer services. Our privacy practises may vary among the countries in which we operate to reflect local practises and legal requirements.

 

This Privacy Policy applies to data that (i) you provide to us when you stay or make enquiries to stay; and (ii) we collect from you with your authorised permission when you visit www.joali.com website (the “Site”). The following sections of this Privacy Policy describe the types of data we collect, how and for what purposes we use that information, with whom we share it, and the choices and rights available to you regarding our use of your information. We also describe the measures we take to protect the security of the data we hold and how to contact us about our privacy practises, and to exercise your rights.

 

As one of our guests and/or a visitor to our Site you understand and agree that we may collect, use and share your personal data in accordance with this Privacy Policy and the Terms and Conditions.

 

This site may contain links to other websites that are not under our control. Please keep in mind that if you use any of these links, you will be solely responsible for your access and the data you provide on the linked internet sites, as our Privacy Policy will not be valid. Also there is no fault attributable to us.

 

  1. Data we collect
  2. Use of data
  3. Sharing data
  4. Transfer of your data to third countries
  5. Your rights
  6. How we protect your data
  7. How long we keep data for
  8. Child safety
  9. Updates to our Privacy Policy
  10. How to contact us

 

1. Data we collect

 

Data you provide on a voluntary basis

 

We will collect, store and process data about you if you voluntarily provide us with such data in connection with the following:

  • Filling in a form on any of our websites;
  • Filling in a physical registration card;
  • Contacting us by telephone or face to face (e.g., in the context of making a reservation);
  • Sending us a letter, e-mail or social media message;
  • Subscribing to receive a service from us (e.g., a newsletter, blog or by following us on social media);
  • Requesting promotional information from us (e.g., information about any of our good or services);
  • Participating in a survey, competition or prise draw; or
  • Contributing content to us (e.g., for display on a JOALI blog).

The types of data we may obtain include:

  • Your name, gender, home and work contact details, business title, e-mail address, telephone number, date and place of birth, nationality;
  • Details of food allergies/dietary requirements and special requests made (for example, relating to a disability) you provide to us;
  • Passport and visa information, payment information, travel history and details of joint travellers;
  • Dates of your stay or travel with us and associated charges;
  • Purchase or delivery of products or services;
  • Reviews and opinions about our brands, products and services;
  • Data we receive about you from any third parties both at home and abroad through whom you have booked your arrangements;

We do not collect “sensitive data ” (e.g., information on racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, sexual life, or trade union membership, genetic or biometric data) unless it is volunteered by you.

 

We may use medical or other sensitive data provided by you to better serve and meet your needs (but under no circumstances will we process any sensitive data for marketing and/or profiling purposes). Such sensitive data  is only shared with our third party service providers like travel agents, vendors, and booking engine management systems, consultants etc. both at home and abroad .) for the purpose of providing the services you request. We use the sensitive data only in case of our job requirements. By making such special requests or notifying us of such preferences, you agree to us sharing your data in this way.

 

Personal data we collect automatically

 

When you visit JOALI website or the mobile application we may also collect certain data through the use of “cookies” and other automated means. Cookies are small pieces of information that are stored by your browser on your computer’s hard drive. Such information may comprise the following information:

  • Date and time;
  • Actions taken on our websites (such as page views, site navigation patterns or application activity;
  • Search terms that visitors use to reach our Websites. 
  • Originating IP address;
  • Domain name;
  • Type of browser and operating system used (if provided by the browser);
  • Object requested;
  • Completion status of the request;
  • Geographic location; or
  • Language preferences.
  • We collect these kind of information only to increase our level of service.

In our website we use cookies to improve the website experience of our guests and to serve you better. You may choose to change or turn off the use of such cookies by changing the relevant settings of your web browser. Please be informed that if you restrict or reject the use of cookies, you may not be able to see some functions of the website or some features may not function properly.

 

2. Use of data

 

Typically, we will use and process your data  to:

  • Help us create content that is relevant to our visitors;
  • Make improvements to our websites and social media pages and ensure that content on these is presented in the most effective manner for you;
  • Provide you with information, products or services that you request from us or which we feel may interest you;
  • Assess and help us understand general trends and patterns relating to our business;
  • Provide for the safety and security of our guests and visitors;
  • Manage general record keeping;
  • Enable us to compile anonymous, aggregated statistics that allow us to understand how users use our websites and to help us improve the structure of our websites;
  • Enable you to make reservations and payments;
  • Meet any legal and/or regulatory requirements;
  • Provide the products or services you request from us; and
  • Improve our products and services and to ensure our products and services are of interest to you.
  • Manage customer relation services.
  • Manage and perform the contractual processes relating to your stay.

The processing of your personal data for:

  • Marketing and profiling purposes is managed solely by JOALI as data controller. Your decision to provide your data for such purposes is optional and will have no consequence on your ability to stay with us or benefit from the requested services;
  • All purposes concerning your booking, your stay and to provide you with the services you have requested, is managed by JOALI . Your decision to provide data to us is voluntary however, if you do not provide such data you may no longer be able to benefit from our services.

We may process your personal data by both automated and manual means. We may use your data in other ways for which we provide specific notice at the time of collection.

 

3. Sharing data

 

We do not sell, otherwise disclose, or share data we collect and hold about you, except as described in this Privacy Policy.

 

We may share your data with service providers who perform functions and services on our behalf. Such third parties will be appointed as data processors and will be provided only with data necessary to perform the services on our behalf but are not authorised to use such data for any other purposes. In this regard, we may share your data with our vendors, consultants, and other third-party service providers. We may share your data with third-party vendors, service providers, contractors, or agents ('third parties') who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal data and to ensure that they cannot do anything with your personal data unless we have instructed. They will also not share your personal data with third party. These contracts also constitute a commitment by those Third Parties to protect your data and to retain it for the period we instruct.

 

The categories of third parties we may share personal information with are as follows:

  • Advertising Networks
  • Affiliate Marketing Programmes
  • Cloud Computing Services
  • Communication & Collaboration Tools
  • Data Analytics Services
    • Payment Processors
    • Performance Monitoring Tools
    • Retargeting Platforms
  • Sales & Marketing Tools
  • Social Networks
  • Website Hosting Service Providers

We also may need to share your data in the following situations:

  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • When we use Google Maps Platform APIs: We may share your information with certain Google Maps Platform APIs (e.g. Google Maps API, Places API). We obtain and store on your device ('cache') your location. You may revoke your consent anytime by contacting us at the contact details provided at the end of this document.
  • Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.

We disclose personal data to other companies within our corporate structure for the purposes described in this Privacy Statement, such as providing Services and personalising our communication with you.

 

We may disclose data about you if we are required to do so by law or pursuant to legal process, or in response to a request from law enforcement authorities or other government officials.

 

4. Transfer of your personal data to a third country

 

Your personal data may be transferred to third party recipients or third countries only upon your consent or if it is permitted by applicable law. Where data is transferred, we will maintain that appropriate safeguards are implemented.

 

5. Your rights

 

You have certain rights to the data we process about you as expressly provided for by applicable law.

 

You have the right to, to be informed about the controller, processor of the personal data, the means and purpose of processing your personal data, or whether such processing is conducted in accordance with the relevant purposes or whether the personal data is transformed to a third parties abroad.


You may withdraw your consent for the processing of your data at any time by sending us a request to this end. In certain circumstances, you also have the right to request the erasure of your personal data.

 

You have right to request from us access to the data we hold about you, update, amend, complete or correct the data, and in some circumstances you may object to our processing of your data.

 

In certain circumstances you have the right to request the transfer of your personal data to another data controller or limit the use of personal data.

 

You further have the right not to be subject to a decision based solely on automated processing, including profiling.

 

You also have the right to request that we cease sending marketing communications, whether by email or otherwise, to you. You can do this by (i) checking the applicable box(es) on any form used to collect data from individuals, or (ii) clicking the unsubscribe link displayed in any of the marketing e-mails you receive, or (iii) otherwise requesting that we do not process your data for marketing purposes, or (iv) via JOALI online contact us.

 

To exercise these rights or to make a complaint or submit an enquiry about our privacy practises, please contact us at privacy@joali.com. You can also write to us at:

Marketing Department
JOALI Maldives
Muravandhoo Island, Raa Atoll
Republic of Maldives

 

To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the data. Please note that if you opt out as described above, we will not be able to remove your data from the databases of third parties both at home and abroad with whom we have already shared your data, with your consent. You should contact such third parties to opt out directly.

 

6. How we protect your data

 

We maintain administrative, technical and physical safeguards designed to protect the data you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. Services providers and contractors who might have access to your data in order to provide services on our behalf will be contractually obliged to keep such data in confidence, provide adequate data security measures, and may not use that data for any other purpose.

 

For your own protection, we encourage you not to include sensitive personal data, credit card or similar data in any e-mails you send us or our staff.

 

7. How long we keep data for

 

JOALI only retains your information for as long as needed to fulfil the purposes for which it is collected, unless otherwise provided by law.


Your credit card details are not stored on our servers.

 

8. Child safety

 

We are not intended to collect identifiable personal data from individuals under the age of 18 without the consent of their parents. None of the pages on this website has been designed to attract the attention of young people aged 18 years.

 

9. Updates to our Privacy Policy

 

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our processing of your information and privacy practises. We will post a prominent notice to notify you of any significant changes to our Privacy Policy and indicate at the top of the Privacy Policy when it was most recently updated.

 

10. How to contact us

 

If you have any questions or comments about this Privacy Policy, if you would like us to update information we have about you or your preferences, or to exercise your rights of access, rectification, blocking, or deletion, or to object to the processing of your information, please contact us by email at privacy@joali.com or write to us at:

Marketing Department
JOALI Maldives
Muravandhoo Island, Raa Atoll
Republic of Maldives

or via telephone on +960 658-4400