PRIVACY POLICY 

Introduction

Shangri-La International Hotel Management Limited ("Shangri-La", "we", "us", "our") respects your privacy, and is committed to protecting the privacy, confidentiality and security of the personal data you provide to us or that we collect about you when you use our website www.nestrestaurant.com.au or our mobile application and other online products and services ("Site"), when you contact guest services, or when you otherwise interact with us. We are aware of our responsibilities to protect your personal data, to keep it secure and comply with applicable privacy and data protection laws.

This Privacy Policy explains our personal data practices and the choices you can make about the way your personal data is used. This Privacy Policy gives effect to our commitment to protect your personal data and serves as the guidelines to be observed by all of the hotels, resorts and properties managed and/or operated by Shangri-La or its affiliates and subsidiaries.

You will be asked to consent to the terms of this Privacy Policy when making a reservation, joining the Golden Circle or The Table programmes, registering for events or promotions or otherwise corresponding with us via the Site or otherwise where required under applicable law. Otherwise your continued use of the Site will constitute your deemed consent to the terms of this Privacy Policy.

Shangri-La International Hotel Management Limited (a data protection officer (Email) dataprotectionofficer@shangri-la.com (Address) 28/F, Kerry Centre, 683 King’s Road, Quarry Bay, Hong Kong) is responsible for using your personal data.

Types of Personal Data We Collect

Information you provide to us: we collect personal data (including where applicable sensitive personal data) you provide directly to us. This includes: 

 

Information We Collect Automatically When You Use the Site: when you access or use the Site, we automatically collect personal data about you, including:

Log Information: we may collect system log information about your use of the Site, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our Site.

 

Information We Collect From Other Sources: we may also obtain personal data from our hotels and from our third party service providers (such as information relating to the credit of guests) and from public sources and combine that with information we collect through our Site where we believe that it is necessary to help manage our relationship with you.

Where you provide personal data of third parties (for example, names and contact details of your family members in connection with bookings or family memberships), you confirm that you have their consent to provide their personal data to us. We recommend you show them this Privacy Policy.

 

How We Use Your Personal Data

We may use your personal data for the purposes set out below.

 

 

For our legitimate commercial interests, in order to: 

 

To comply with legal obligations to which we are subject: 

Use of information based on your consent:

 

 

In order to register with our mobile application, make an online hotel reservation, enrol with the Golden Circle or The Table programmes or if you make an enquiry, you must provide us with the personal data marked with an asterisk or otherwise indicated as mandatory, otherwise we may not be able to process your request or comply with our legal obligations.

Disclosures of Your Personal Data

We may share your personal data:  

We may also disclose aggregate or de-identified data that is not personally identifiable with third parties, including our commercial and strategic partners.

Overseas Transfers of Your Personal Data

Your personal data will be transferred to, and stored at, locations in Hong Kong and Singapore and in the location of the hotel in which you stay or visit. It will also be accessed and processed by our personnel and the personnel of our partners, affiliates and third party service providers, who operate outside of Hong Kong and Singapore. Your personal data will only be transferred to locations outside of Hong Kong and Singapore where we are satisfied that adequate or comparable levels of protection are in place to protect personal data held in that jurisdiction, and (where we are required to do so) with your consent.

When personal data is transferred from the EU to outside the EU, we use Model Clauses, so ensuring that such data transfers are compliant with applicable privacy legislation.

Direct Marketing

From time to time, we would like to use your name, email address, mobile phone number, and other relevant contact information to send you either via emails, SMS messages, telephone calls, push notifications, post, or social media (e.g. WeChat and Facebook) information that we think may be of interest to you, including about our hotels, products and services, news about our membership programmes (if you become a member of Golden Circle or The Table), satisfaction surveys, events, offers and promotions, but we can only do so with your consent.

We would also like to share (for gain) such data with the operator of the hotel or hub of hotels in which you stay or visit and with selected third party entities, so that they may send you information, news updates, special events, offers and promotions as regards their products and services, including travel, transportation, retail, food and beverage, hotel accommodation, credit cards, financial and investment services, real estate, entertainment, publications, fashion and jewellery, leisure and sports, health and wellness, non-profit and charitable activities, telecommunications, social networking, media and public relations, but we will not use your personal data for direct marketing without your consent.

You may opt-out from receiving marketing communications at any time, free of charge, by following the unsubscribe instructions contained in the marketing communications or contacting Shangri-La in accordance with the section “Your Rights and Contact Us” below. If you opt out of these communications, we may still send you non-promotional communications, such as those about your reservation or Golden Circle programme members communications, unless we are prohibited from doing so by applicable laws.

Retention of Personal Data

To the extent required by law, we take reasonable steps to destroy, or de-identify or redact, personal data in a secure manner when we no longer need it for the purposes for which it was collected (as set out in this Privacy Policy) and retention is no longer necessary for legal or business purposes. In any event, we do not retain your personal data for longer than six (6) years, subject to local laws and regulations.

Our Commitment to Data Security

We have in place reasonable technical and organisational measures to prevent unauthorised or accidental access, processing, erasure, loss or use of your personal data and to keep your personal data confidential. These measures are subject to ongoing review and monitoring. To protect your personal data, we also require our third party service providers to take reasonable precautions to keep your personal data confidential and to prevent unauthorised or accidental access, processing, erasure, loss or use of personal data, and to act at all times in compliance with applicable data protection laws.

We cannot guarantee that our Site will function faultless and without any interruptions. We shall not be liable for damages that may result from the use of electronic means of communication, including, but not limited to, damages resulting from the failure or delay in delivery of electronic communications, interception or manipulation of electronic communications by third parties or by computer programs used for electronic communications and transmission of viruses.

Children and Minors

Except where required by local laws, we do not knowingly collect personal data from minors. If you are a minor, you may only use our Site and services with the permission of your parent or guardian.

If you are in the EU, our online services are not directed at children under the age of 13. If you believe we have collected information about a child under the age of 13, please contact us so that we may take appropriate steps to delete such information. If you are at least 13 but under the age of 16, please get the consent of your parent or legal guardian before giving us any personal data about yourself.

Third Party Sites

The Site may contain links to other websites, apps, content, services or resources on the internet which are operated by third parties. If you access other websites, apps, content, services or resources using the links provided, please be aware they may have their own privacy policy, and we do not accept any responsibility or liability for these policies or for any personal data which may be collected through these sites. Please check these policies before you submit any personal information to these sites.

Your Rights and Contact Us

You are entitled to the following rights: right of access to the personal data we hold about you, right of rectification, right to erasure, right to restrict data processing, right to object against profiling and your personal right to data portability. Whenever reasonably possible and required, we will strive to grant these rights within one (1) month. You may also withdraw your consent to receiving direct marketing communications, or more generally to our processing of your personal data, at any time, and you may in certain circumstances ask us to delete your personal data. However, we may not be able to continue providing services to you if you entirely withdraw your consent or ask us to delete your personal data entirely. To make these requests, or if you have any questions or complaints about how we handle your personal data, or would like us to update the data we maintain about you and your preferences, please contact our data protection officer by email at dataprotectionofficer@shangri-la.com or by post at 28/F Kerry Centre, 683 King’s Road, Quarry Bay, Hong Kong.

Changes to the Privacy Policy

We may modify this Privacy Policy from time to time. Any changes to this Privacy Policy will be posted to the Site so that you are always informed of the way we collect and use your personal data, and we encourage you to review this Privacy Policy whenever you access the Site or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy. Updated versions of this Privacy Policy will include the date of the revision at the end of this Privacy Policy so that you are able to check when the Privacy Policy was last amended. Any changes to this Privacy Policy will become effective upon posting of the revised Privacy Policy on the Site. Use of the Site following such changes constitutes your acceptance of the revised Privacy Policy then in effect but, to the extent such changes have a material effect on your rights or obligations as regards our handling of your personal data, such changes will only apply to personal data after the changes are applied.

Miscellaneous

This Privacy Policy is governed by and shall be construed in accordance with the laws of Hong Kong Special Administrative Region. 

This Privacy Policy is written in the English language and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Privacy Policy, the English version shall prevail.

 

Last Updated: 14 May 2018