Privacy Policy

Nilathra Collection respects your privacy and is committed to protecting your personal data. This privacy policy is designed to tell you about our information collection practices – that is, the ways we collect information; what kinds of information we collect; why we collect information; how we use information we collect; with whom we share information we collect; how you can access, amend, and delete information we collect from you; and what kinds of security we use to protect information you provide.

It is important that you read this privacy policy together with any other privacy policy or fair processing notice that we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

Controller

Nilathra Hotel Management (Pvt) Ltd is the data controller and responsible for your personal data (referred to as "Nilathra Collection", "we", "us" or "our" in this privacy policy).

We have appointed a Data Privacy Manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the Data Privacy Manager at concierge@nilathra.com.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, username, title, and date of birth.
• Contact Data: includes billing address, email address, and telephone numbers.
• Financial Data: includes bank account and payment card details.
• Transaction Data: includes details about payments and travel services purchased.
• Technical Data: includes IP address, browser type, and device information.
• Profile Data: includes itinerary preferences, feedback, and survey responses.
• Usage Data: includes information about how you use our website and services.

Special Category Data

Health/mobility data: When you make a travel booking, we may ask you to disclose medical conditions or mobility restrictions to ensure your safety and welfare during your trip. Providing this constitutes your consent for us to use this information to make your travel arrangements.

Religious beliefs: We may ask for dietary requirements or religious beliefs if they inform your itinerary choices. Providing this confirms your consent for us to use this for your travel arrangements.

We use different methods to collect data, including:

• Direct interactions: By filling in forms, or communicating by email or phone.
• Automated technologies: Using cookies and server logs as you interact with our website.
• Third parties: Technical data from analytics providers (e.g., Google Analytics).

We only use your data when the law allows us to, including:

• To perform the contract we are about to enter into with you.
• Where it is necessary for our legitimate interests.
• To comply with a legal obligation.

We may share your personal data with:

• Travel Suppliers: Airlines, hotels, and destination management companies to fulfil your booking.
• Public Authorities: Customs, immigration, and security agencies as required by law.
• Professional Advisers: Lawyers, bankers, and insurers for business operations.

Nilathra Collection is hosted on Vercel, which utilizes a global cloud infrastructure. By using our website and services, you acknowledge and agree that your personal data may be transferred to, and stored on, servers located in various regions worldwide to ensure optimal performance and availability.

Furthermore, many of our external travel suppliers (e.g., airlines, international hotel groups) are based outside your home country. Your data processing will involve transfers across borders to fulfil your travel itineraries. Whenever we transfer your personal data, we ensure a similar degree of protection is afforded to it by ensuring at least one legal safeguard is implemented.

Under certain circumstances, you have rights under data protection laws, including the right to request access, correction, erasure, or restriction of your personal data. You also have the right to withdraw consent at any time.