At The Astor Goa, its affiliates, and subsidiaries (hereinafter collectively referred to as "The Astor Goa", "we", "us" or "our"), we endeavour to provide our guests outstanding services and experiences. We value your business and your faith in us in delivering you a superior level of service. We recognise that privacy is important to our guests — this Privacy Policy explains our practices regarding the personal information we collect when you visit or use our hotels, restaurants, bars, spas, gyms, our website, mobile applications, or other services. You are advised to carefully read this Privacy Notice before using or availing of any of our products and/or services.

Definitions

• Data — personal information, including sensitive personal information and special category personal data about you, which we collect, receive, or otherwise process in connection with your use of our stores, website, and/or mobile application.
• Cookies — a small file placed on your device by our website or mobile application when you either visit or use certain features of our website or mobile application.
• Data Protection Laws — any applicable law for the time being in force relating to the processing of Data.
• Partners — select third parties with whom we have contracts for the businesses described in this Privacy Notice.
• Service Providers — entities that provide services to The Astor Goa and to whom we may disclose your Data for a specific purpose pursuant to a written contract.
• The Astor Goa — a company incorporated in India whose registered office is at 22/7 Village Candolim, Bardez, North Goa, Goa – 403515.
• User or you — the natural person who accesses our services, websites, or mobile applications.

What data do we collect about you

The Astor Goa collects Data for various purposes set out in this Privacy Notice. This Data includes, without limitation:

• (a) Contact information: first and last name, email address, postal address, country, phone number, and other similar contact data.
• (b) Financial information: payment instrument information, transactions, transaction history, preferences, method, mode and manner of payment, spending patterns or trends, and other similar data.
• (c) Technical information: website, device, and mobile app usage, IP address, and similar information collected via automated means such as cookies and pixels.
• (d) Your reviews, feedback, and opinions about our products, programs, and services.
• (e) Transaction information: date of the transaction, transaction amount, transaction history, and related details.
• (f) Other information (which may include special category personal data): age, sex, date of birth, marital status, nationality, details of government identification documents provided, occupation, ethnicity, religion, travel history, or any other personal information provided in responses to surveys or questionnaires.

How we collect data

• Information You Give Us: We receive and store any information you enter on our website or mobile application or give us in any other way (e.g., at our outlets, hotels, or kiosks).
• Automatic Information We Collect: We use cookies, pixels, and similar technologies to receive and store certain types of information whenever you interact with us.
• Email Communications: We often receive a confirmation when you open an email from us or click on a link in the email. You can choose not to receive marketing emails by clicking the unsubscribe link.
• Information from Other Sources: We may obtain information from other sources, for example when you authorise a third-party website to interact directly with our website or mobile application.
• Information Previously Provided to The Archer Group of Hotels: Where you have shared any information previously with any of the Archer Group and Archer Group is permitted to further share such information with us.

Data shared by you

The Astor Goa may collect your Data in several ways from your use of our stores, website or mobile application — including when you register with us, conduct a transaction, complete surveys, elect to receive communications from us, or from the information gathered by your visit to our hotel, website, or mobile application.

Data that is collected automatically

We automatically collect some information when you visit our website or use our mobile application, including your IP address, operating system details, browsing details, device details and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. We may also collect your Data automatically via Cookies, pixels, and similar technologies in line with the settings on your browser.

Our use of data

Data collected by us may be used to carry out our obligations arising from any contract entered between you and us; provide products and/or services and communicate with you; enable The Astor Goa and Partners to offer their products and/or services; process and share Data with third parties which have business dealings with us; provide personalised services and recommendations; operate, evaluate, and improve our business; generate aggregated insights to understand customer behaviour; provide privileges, benefits, and marketing campaigns; communicate with you and customise and improve our services; enforce the terms of use of our website and mobile application; and protect against fraud, illegal activity, harm, and financial loss.

Minors

Our website and mobile application do not offer products or services for use by minors. If you are under 18, you may use our website or mobile application only with the involvement of a parent or guardian.

Sharing of data

We may release Data when we believe that disclosure is reasonably necessary to comply with a law, regulation or compulsory legal request; to protect The Astor Goa or The Archer Hospitality's intellectual property rights; to protect against harm or financial loss; when we believe disclosure is necessary to protect individuals' vital interests; or in connection with an investigation of suspected or actual fraudulent or illegal activity.

We may also share your Data with other third parties where you request or authorise us to do so; where we need to comply with applicable law or respond to valid legal process; or where we need to operate and maintain the security of our website or mobile application.

Keeping data secure

We will use technical and organisational measures to safeguard your Data and we store your Data on secure servers. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us by email.

Retention of data

The Astor Goa retains Data for as long as necessary for the use of our products and/or services, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Even if we delete your Data, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.

Where we store data

We may transfer your Data internationally where it is necessary for the conclusion or performance of a contract between us and a third party and the transfer is in your interests, or where you have consented to the data transfer.

Your rights and choices

Depending on which country's laws are applicable to you, you may have the following rights in relation to the Data that we hold about you:

• Right to Rectification — you have the right to request that we rectify any inaccurate or incomplete Data that we hold about you.
• Right to Restrict Our Use of your Data — you have the right to request that we restrict our processing of your Data in certain circumstances.
• Right to Object — this right enables you to object to us processing your Data where we do so for certain reasons.
• Right to Data Portability — you have the right to request that we transfer your Data to another third party.
• Right to Withdraw Consent — where we have obtained your consent to process your Data for certain activities, you may withdraw this consent at any time.
• Right to File Complaints — you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Processing your data

We take steps to ensure that your Data is processed according to the provisions of this Privacy Notice and the requirements of applicable law. To ensure that your Data receives an adequate level of protection, we have put in place appropriate written contracts with the partners and service providers that we share your Data with.

Severability

If any court or competent authority finds that any provision of this Privacy Notice is invalid, illegal, or unenforceable, that provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Notice will not be affected.

Cookies, pixels and similar technologies

Our website and mobile application may place and access certain Cookies on your device. Cookies are unique identifiers that we transfer to your device to enable our systems to recognise your device. We also use pixels and similar technologies to analyse traffic on our website and mobile application.

When you first visit our website, you will be presented with a pop-up screen informing you of our use of Cookies and asking you to provide your consent. You may adjust your web browser software if you do not wish to receive Cookies, but this may prevent you from taking advantage of some features of our website.

Changes to this privacy notice

Our business changes constantly and our Privacy Notice will change also. The updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

How to contact us

To request to review, update, or delete your personal information, please submit a request by emailing us at rdm@astorgoa.com. We will respond to your request within 30 days.