City Max Hotels, referred to herein as "CITY MAX" ("we", "our" or "us") is a limited liability company incorporated in Dubai, United Arab Emirates and is a part of Landmark Group which, along with its affiliates and group companies, is a large retail group operating in the Middle East, Africa, India, and Southeast Asia with a diverse portfolio of retail businesses, shopping centres and hospitality brands across several countries (the "Landmark Group Entities").
This Privacy Policy (the "Privacy Policy") discloses the privacy practices for CITY MAX and Landmark Group Entities' websites, related sub-domains, sites, applications, services and tools, or any successor site (jointly or severally referred as "Participating Website/s", as the context so requires). It describes the ways in which we collect, store, use and protect the Personal Data.
Please read this Privacy Policy carefully. By accessing or using our Participating Website/s, you acknowledge that you have read, understand, and agree to be bound by all the terms of this Privacy Policy. If you do not agree to the terms and conditions set forth in this Privacy Policy, please refrain from sharing personal information/data with us.
1. What Personal Data We Collect About You
The Personal Data we collect, or may already have in our records, about you may be broadly described in the following categories:
- Name including username
- Contact information (phone number, mobile number, email address)
- Diversity (nationality, gender, age)
- Location and address (area, city, region, delivery address)
- CCTV footage, photographs, biometrics, fingerprints, face recognition or any other security related measures
- Health data including but not limited to health, allergies, dietary requirements, medical information forms and notes, and disability records etc.
- Other information (which may include special category personal data): date of birth, marital status, details of government identification documents provided, occupation, ethnicity, religion, travel history or any other personal information provided in responses to surveys or questionnaires and your feedback/reviews
- Loyalty program ID (Shukran ID)
- Technical details including but not limited to device details, IP address, digital device name, make, model, operating system, browser type, mobile device identifier, cookies and similar technologies such as tags, pixels and/or SDKs
- Financial information such as credit history, payment details, etc.
- Your purchases, interests, preferences, or other types of procured or publicly available information
- Information about your online browsing behaviour on our websites, mobile apps and public networks and information about when you click on one of our adverts (including those shown on other organisations' websites)
- Transaction information such as the date of the transaction, total amount, transaction history and preferences and related details, in addition to your reviews, feedback and opinions about our products and services
This information helps us to better understand our users, improve the layout and functionality of the Participating Website/s usage habits, frequency of visits or characteristics of our customer base, and to serve any other business purposes.
2. For What Purposes Do We Collect Your Personal Data?
We collect your Personal Data:
- to ship and deliver products and services
- to process your orders and refunds
- for billing and processing of payment, any purchases or other data linked to your use of services
- to operate, evaluate and improve our business and Participating Website/s
- to communicate with you (including to respond to your requests, questions, feedback, social media comments, claims or disputes)
- to invite you to take part in and manage customer surveys, questionnaires and other market research activities carried out by us and/or by other organisations on our behalf
- to customize and improve our services
- to provide you with information about the products
- to develop/offer you new products and services
- for market research and analysis purposes
- for sending marketing communications and publications via SMS, email, push or any other channel about promotions, services, products and facilities offered by us — as part of this, online advertising may be displayed on our Participating Website/s including those of third parties, and we may also measure the effectiveness of our marketing communications and those of our suppliers and partners
- to manage promotions and competitions you take part in, including those we run with our suppliers and partners
- to provide customer support
- to provide you with privileges and benefits, offers (including for vouchers, gifts, etc., and/or services), personalized services and recommendations and improve your experience on our Participating Website/s based on your profile
- to enhance your shopping experience and bring you access to membership programs, rewards and offers across our channels, Participating Website's
- in connection with loyalty programs owned and operated by us or by other Landmark Group Entities
- to collaborate with our business partners, contractors, service providers to provide us services which include but are not limited to enhancing your experience
- to deliver online advertising that we believe is most relevant to you on our Participating Website/s and other organisations' websites
3. How We Collect Your Personal Data
We collect your Personal Data when you register online, update your account, log-in, place an order, communicate with our customer service representatives, interact with our staff/representatives, shop online, request a catalogue, opt-in to receive our marketing communications, participate in a contest, promotion or survey or join our social networking sites. We may also collect data from you in our stores, clubs, hotels, play area, restaurants or through our catalogues or other marketing material.
4. Sharing Your Personal Data
We will not sell your Personal Data to third parties. We may, however, share selected Personal Data within Landmark Group Entities and with third parties ("Processors") such as:
- our franchisors
- delivery companies and service providers for purposes including but not limited to storage and analysis; protecting and securing our systems; providing search results and links; providing customer service & credit analysis; profiling, user analysis, software services and payment processing; and providing warehousing service, processing your payment and managing your order including delivery and returns
- retail, security, analytics and marketing partners
- supplier of products and services
- purchasers and their advisors following a sale of all or part of our business, so that they can continue to provide services to you
- third party databases to which Landmark Group and/or one of our brands subscribes
- government bodies or other authorities if necessary to comply with regulations or law or to assist with law enforcement, or to protect our property and other rights
- agencies who help us collate statistics about site traffic, sales, demographics and other commercial information to enable us to tailor the services we provide to you and other customers
- advertising and media agencies — we partner with media agencies that run advertising campaigns; while we do not share your Personal Data directly with these agencies, we may securely share limited data with these advertising platforms to enable targeted advertising across our Participating Website/s and external platforms
- in certain cases, to Sub-processors through Processors
And other organisations in the following circumstances:
- if any applicable law or public authority states we must share the Personal Data
- if we need to share Personal Data in order to establish, exercise or defend our legal rights (this includes providing Personal Data to others for the purposes of preventing fraud and reducing credit risk)
- to an organisation to which we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you — if the transfer or sale goes ahead, the organisation receiving your Personal Data may continue to use your Personal Data on the basis of this notice unless and until they agree to other terms with you
- to any other successors in title to our business
- to anyone to whom we transfer or may transfer our rights and duties under our agreement with you
The Personal Data will be shared with the above on the condition that they have access to only such Personal Data required to fulfil their obligations and only on the agreement that they do not use your Personal Data for any other purposes.
5. For How Long We Retain Your Personal Data
We will retain your Personal Data for as long as it is legally required, and to support the purposes for which it was obtained. We will then dispose of it promptly and securely.
6. Where We Process Your Data
Your Personal Data is processed/maintained in our country of incorporation, territory where Landmark Group Entities operate or in any other places where the parties involved in the processing are located. This means that your Personal Data may be transferred and maintained outside your country of residence or our country of incorporation. If the data is transferred to any third-party organization for processing, then the appropriate assessments will be conducted to ensure the organizations have implemented appropriate security and privacy controls. Your consent to this Privacy Policy followed by submission of requested Personal Data indicates assent for such data transfer.
7. Marketing Opt-In and Opt-Out Provisions
When you opt in for receiving marketing communications, you are consenting to receiving promotional communication from us. You can opt-out or unsubscribe from our marketing communications for products, new products, offers and promotions by following the opt-out instructions in the e-mails or SMS or any other channel. In addition, at any time you may access the opt-out section on the Participating Website/s and choose to unsubscribe (opt-out) or send an e-mail to our Data Protection Team at privacy@landmarkgroup.com. We will make commercially reasonable efforts to implement your opt-out requests promptly.
8. Protection of Personal Data
We store all Personal Data on a secure server, and we use procedures designed to protect Personal Data against accidental or unauthorized access, destruction, use, modification, alteration or disclosure. We will seek to ensure that your Personal Data is kept confidential and secure in accordance with this Privacy Policy, and that the appropriate technical and organizational measures to prevent unlawful or accidental destruction, accidental loss, unauthorized disclosure or access or other unlawful forms of processing are implemented.
To keep your Personal Data safe, we ensure that sensitive and private data exchanges between you and Participating Website/s happen over a Secure Sockets Layer (SSL)-secured communication channel and are encrypted and protected with digital signatures. SSL-secured communication channels are specially designed to protect Personal and Sensitive Data (payment details), which is sent over the internet.
9. Special Category Data
We do not collect Personal Data from anyone under the age of 18 years without the consent of the parent/legal guardian, except for necessary security measures or in order to comply with applicable laws. However, it is not possible for us to prevent children from fraudulently representing their age in order to gain access to the Website/s. If you are a parent/legal guardian and you are aware that your child/ward has provided us with Personal Data without your consent, please contact us immediately as described in Clause 15 of this Privacy Policy.
If you are providing or have already provided Personal Data of your child/ward, you are providing us with your affirmative parental consent as the legal parent or guardian to collect, use and process the information of the child, consistent with this Privacy Policy.
In processing children's Personal Data, we ensure the following safeguards:
- processing is clear, direct, safe, and free of fraud and is not misleading; and
- the extent of Personal Data we process is strictly limited to the purposes for which we collect such child's Personal Data
10. Your Rights and Choices
You have the following rights in relation to your Personal Data and you can exercise them by accessing the Participating Website/s or submitting a request at privacy@landmarkgroup.com.
You are entitled to be informed about how your Personal Data is used/processed in line with the Privacy Policy. Any use of Personal Data which is beyond the Privacy Policy shall be communicated to you.
You have the right to get a copy of your Personal Data being processed by us. Based on the request there might be a reasonable fee proportional to the service you are receiving.
You have the right to update, amend, correct or request the deletion of the Personal Data collected by us about you. It is important that the data we hold about you is accurate and current — please keep us informed if your Personal Data changes during the period for which we hold it.
You have the right to have your Personal Data erased/deleted. Your request for the deletion of your Personal Data may not be entertained if we need to retain certain Personal Data to implement a legal obligation or when we have a lawful basis to do so.
You have the right to have your Personal Data protected and lawfully processed. We are responsible for protecting your Personal Data that we process, or that is processed on our behalf, in accordance with the Applicable Data Protection Law and regulations.
You have the right to withdraw your consent at any time. Upon withdrawal, we will cease processing your data.
You have the right to object to processing your Personal Data if such processing is not necessary to achieve the purposes for which such Personal Data has been collected or where such collected Personal Data is beyond the extent required, discriminatory, unfair or illegal. In the event of objection, we will verify and confirm if the objection is valid; if a valid objection exists, we will erase such data. Your objection may not be entertained if we need to retain the data for a contractual or legal obligation, or to demonstrate that explicit consent was obtained.
We might use your Personal Data for profiling through internal mechanisms of filtering and Artificial Intelligence so we can recommend you better products and combinations.
11. Cookies
We may use cookies, or other technologies, to remember Personal Data or to provide you with relevant online advertising, when you use the Participating Website/s. Cookies are small files or records that we may place on your web browser for collecting information about your activities on the Participating Website/s, preparing reports, assessing trends, in order to determine relevant interest-based advertisements to serve the customers and otherwise monitor the way in which the Participating Website/s is being used.
These cookies may collect information about your online behaviour, such as your IP address, the website you arrived from and information about your purchase history or the content of your shopping basket. This means that you may see our adverts on our websites and on other organisations' websites. To help us to deliver online advertising that is relevant to you, we may also combine data we collect through cookies in the browser of your desktop computer or other devices with other data that we have collected (e.g. loyalty program). We may also use services hosted by third parties to assist with these matters, which may collect information such as your IP address, sent by your browser or via cookies.
This is intended to enhance convenience for you, and to assist us to run an efficient operation. The use of cookies is relatively standard — most browsers are initially set up to accept cookies. However, if you prefer not to store cookies, you can choose to:
- not use Participating Website/s
- set your browser to notify you when you receive a cookie
- set your browser to refuse to accept cookies
- delete our cookies after visiting Participating Website/s; or
- browse our Participating Website/s using your browser's anonymous usage setting
By accepting the Privacy Policy, you confirm your consent to our use of cookies, and other such technologies, for these purposes. Any information that we collect and store that is personally identifiable is protected using appropriate means. The Participating Website/s may contain links to other websites — please be aware that we are not responsible for the privacy practices of third-party websites (Participating Website/s excluded) not operated by us, and cannot guarantee the security of any of your Personal Data collected there. We encourage you to read the privacy statements of each and every third-party website that collects your Personal Data.
12. Aggregate Data, Data Analytics and Social Media Functionality
We may aggregate your Personal Data and remove any identifying elements in order to analyse patterns and improve our marketing and promotional efforts, to improve our services, to analyse Participating Website use, to improve our content and product offerings, and to customise our Participating Website's content, layout, products and services, and we may appoint third parties to do this on our behalf, as set out above.
We gather certain usage information like the number and frequency of visitors to our Participating Website/s. This information may include which webpage you just came from, which webpage you next go to, what browser you are using, your device and your IP address. We only use such data in the aggregate. This collective data helps us to determine how much our customers use parts of our Participating Website/s, and do research on our users' demographics, interests, and behaviour to better understand and serve you.
If you use buttons on our Participating Website/s linked to social media or similar sites (for example "Like" and/or "Share" buttons), content from our Participating Website/s may be sent back to that other website or service and, depending on your privacy settings, may be privately or publicly visible (for example to friends, followers, or generally to anyone who has access to your profile page).
We may also use demographic information and details about your preferences that we collect when you use our services and/or our products, in aggregate form, to help us determine which customers use certain services and products, and to allow us to tailor these services/products and our marketing to specific user demographics and interests.
We may share aggregate and anonymised information with our affiliates, business partners and third parties to improve our services and for advertising business and marketing practices.
13. Links and Third-Party Privacy Policies
Our Participating Websites may contain links to other websites or platforms operated by third-party organisations that have their own privacy policies. Please make sure you read the terms and conditions and privacy policies of the third-party organisation carefully before providing any Personal Data on a website or platform, as we do not accept any responsibility or liability for websites or platforms of other organisations.
14. Change in the Privacy Policy
Changes in law or changes in our business may require changes to be made to the terms of this Privacy Policy from time to time, so we encourage you to review this Privacy Policy updates periodically for any such changes. It is your responsibility to carefully read, agree to the Privacy Policy on each occasion you use the Participating Website/s, and your continued use of the Participating Website/s shall signify your acceptance to be bound by the latest Privacy Policy.
15. Contact Us
If you have any concerns or comments about the processing of your Personal Data or this Privacy Policy, or if you want us to change information or preferences you provided to us, please contact us at: privacy@landmarkgroup.com.
16. Complaints
If you think your rights have been breached in any way by us, you can write to us at privacy@landmarkgroup.com.
If you feel that we do not comply with applicable privacy rules, you have the right to lodge a complaint with a competent data protection authority in your country of residence.