World Hotel is committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We collect and process the following personal information:
- Account Information: Name, email address, phone number, and password when you register
- Booking Information: Check-in/check-out dates, number of guests, room preferences, special requests
- Payment Information: Billing details (note: actual payment processing is simulated for this academic project)
- Technical Information: IP address, browser type, device information, and cookies for website functionality
2. How We Use Your Information
Your personal data is used for the following purposes:
- Processing and managing hotel room bookings
- Communicating booking confirmations and cancellations
- Providing customer support
- Improving our website and services
- Generating reports for administrative purposes
- Complying with legal and regulatory requirements
3. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: To fulfill our booking contract with you
- Legitimate Interests: To improve our services and prevent fraud
- Legal Obligation: To comply with applicable laws and regulations
- Consent: For marketing communications (where applicable)
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your data only in the following circumstances:
- With authorized staff for booking management and customer service
- When required by law or legal process
- To protect our rights, property, or safety
5. Data Security
We implement appropriate technical and organizational security measures including:
- Password hashing for user authentication
- Protection against SQL injection and XSS attacks
- Secure database access controls
- Regular security assessments
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Booking records are typically retained for financial and legal compliance purposes.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restriction: Request restriction of processing
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us using the details below.
8. Cookies
Our website uses cookies to enhance functionality and user experience. For detailed information about cookies we use, please see our Cookies Policy.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
10. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date.
11. Academic Project Notice
Please note: This website is developed as an academic project for the Web Development and Databases module at The British College, Nepal (UWE Bristol framework). While we implement industry-standard security practices, this is a learning project and not a commercial booking system.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
- Email: privacy@worldhotel.com
- Phone: +44 (0) 20 1234 5678
- Address: World Hotel Head Office, London, UK