Welcome to Dream Palace. Your privacy is important to us, and we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website, book a stay, or use our services, in compliance with the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect the following types of information:

1.1 Personal Information

• Name, email address, phone number, and postal address
• Payment details (processed securely through third-party payment gateways)
• Government-issued ID (if required for booking)

1.2 Non-Personal Information

• IP address, browser type, and device information
• Cookies and usage data (for website analytics and improvements)

2. Legal Basis for Processing Personal Data (GDPR Compliance)

Under the GDPR, we process your data based on the following legal grounds:

• Contractual Necessity – To process bookings, payments, and provide our services.
• Legitimate Interest – To improve our services, prevent fraud, and enhance security.
• Consent – When you subscribe to marketing emails or accept cookies.
• Legal Obligation – When required by law or regulatory authorities.

3. How We Use Your Information

We use your information to:

• Process bookings and payments
• Provide customer support
• Improve our services and website experience
• Send promotional offers and updates (only with your consent)
• Comply with legal obligations

4. Your GDPR Rights

As per GDPR, you have the following rights:

• Right to Access – Request a copy of the personal data we hold about you.
• Right to Rectification – Request corrections to inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten") – Request deletion of your data, unless we have a legal obligation to retain it.
• Right to Restriction of Processing – Request limited processing under certain conditions.
• Right to Data Portability – Request to transfer your data to another service provider.
• Right to Object – Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent – Withdraw consent for marketing communications or cookies.

To exercise these rights, please contact us at [Your Email].

5. How We Protect Your Data

We implement strict security measures, including encryption, secure servers, and access controls, to protect your personal information. However, no online transmission is 100% secure.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes.

7. Sharing of Information

We do not sell or rent your personal data. We may share your information with:

• Service providers (payment processors, email services)
• Legal authorities (if required by law)

8. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards such as:

• Standard Contractual Clauses approved by the EU Commission
• Transferring to countries with adequate data protection laws

9. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience. You can control or disable cookies through your browser settings.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

11. Updates to This Policy

We may update this policy from time to time. Any changes will be posted on our website.

12. Contact Us

For GDPR-related inquiries or to exercise your rights, contact our Data Protection Officer (DPO) at:

Dream Palace Resort
Tokha 3, Kathmandu, Nepal
dreampalace666@gmail.com
015159723