# Privacy Policy

Last Updated: 9 July 2026

Rosewood Hotel Group and its affiliates (collectively, “Rosewood”, “we”, “our” or “us”) are committed to safeguarding your privacy and want you to be familiar with how we collect, disclose and otherwise use information about you. References in this Privacy Policy to “Rosewood,” “we,” “our” or “us” are references to the entity responsible for the processing of your personal data.

This Privacy Policy describes:

- our practices in connection with the information we collect from you when you visit our websites that link to this Privacy Policy (the “Sites”) or when you use any applications made available by us, on or through computers and mobile devices (the “Apps”);
- when we communicate with you through e-mail messages that link to this Privacy Policy (collectively, including the Sites and Apps, referred to as the “Services”);
- our privacy practices when we communicate with you by offline channels, such as when you provide your information to our call centers, or in person (“Offline Services”);
- the basis on which we will process personal data we collect from you or that you provide to us, and your choices with respect to that data.

This Privacy Policy excludes those websites and online services (e.g., online recruitment) that have separate privacy policies and do not incorporate this Privacy Policy by reference or otherwise.

1. **What Information Does Rosewood Collect?**  
1.1 Personal Data from or about You  
“Personal Data” refers to any information relating to an identified or identifiable individual. When you contact us, book as a guest, visit one of our hotels or properties, or use our Sites, we collect certain Personal Data from you. We may collect the following types of Personal Data:

- **Contact Details** (name, e-mail address, phone number, postal address);
- **Demographic Data & Important Dates** (demographic information and location data);
- **Government-Issued ID** (drivers’ license, passport numbers);
- **Financial Details** (credit card or debit card details);
- **Guest Stay Information** (special requests and preferences);
- **Technical Information** (IP addresses, user account details);
- **Travel Details** (frequent flyer affiliations);
- **Your Feedback** (responses to surveys);
- **Images** (CCTV recordings);
- **Correspondence** (emails and messages);
- **Corporate Account Data** (contact details of corporate account employees).

1.2 Sensitive Personal Data: We may collect sensitive personal information under applicable privacy laws. We only process Sensitive Personal Data permitted by law or with your explicit consent.

2. **How Do We Collect Your Personal Data?**  
We collect Personal Data in several ways, such as:

- When you make reservations or stay at a property;
- When you create an account on the Sites;
- Through newsletters or feedback;
- When you make a purchase through our Sites.

2.2 We may also receive Personal Data from other sources:

- _From Other Rosewood Hotels and Properties_;
- _From Affiliates_;
- _From Owners_;
- _From Your Travel Companion_.

2.3 We may also use automatic data collection technologies for certain statistical information about your browsing actions.

3. **Why is Personal Data Used?**  
We use your Personal Data for commercial purposes, including:

3.1 _Performance of a Contract_ to complete your reservation or provide requested services;
3.2 _Legitimate Business Reasons_ to enhance customer service and protect operations;
3.3 _To Comply with Legal Obligations_;  
3.4 _With Your Consent_ to send promotional offers;
3.5 _Vital Interest_ in emergencies.

4. **When and with Whom Do We Disclose Your Personal Data?**  
We share your Personal Data with:

4.1 _To Owners and Properties_ for reservation purposes;
4.2 _To Affiliates_ for service rendering;
4.3 _Commercial Service Providers_ for IT services and support;
4.4 _Travel-Related Guest Service Partners_ for arranging services;
4.5 _Brand Partners_ for promotions.

5. **What Cookies and Other Technologies Do We Collect?**  
We use cookies and similar technologies to recognize devices and improve services. For details, refer to our Cookie Policy.

6. **Security**  
We maintain safeguards designed to protect your Personal Data, although no method of transmission is 100% secure.

7. **Third-Party Websites and Services**  
Our Services may contain links to third-party websites. We are not responsible for their privacy practices.

8. **International Data Transfers**  
Personal Data may be transferred internationally and processed by staff outside the EEA where necessary.

9. **How Long Do We Retain Your Personal Data?**  
Personal Data is retained as necessary unless a longer retention period is required.

10. **Communications, Preferences and Permissions**  
You may opt-out of receiving communications from us by following instructions in our emails.

11. **Your Rights**  
Your rights include access to your Personal Data, rectification or erasure, restriction of processing, and data portability.

12. **What Information is Collected from Children?**  
Our Services are not intended for children under 16.

13. **Updates to this Privacy Policy**  
We may update this Privacy Policy from time to time.

14. **How to Contact Us**  
For questions about our privacy practices, you may contact us via email or phone as outlined above.