Privacy
Policy

1. Introduction

We at Toma Tungi Resort (“we”, “us”, “our”) are committed to protecting your privacy and managing your personal data in a safe, transparent and lawful manner. This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you:

• visit our website;
• make a booking or reservation;
• stay at our resort; or
• otherwise interact with us.

By using our website or staying with us you consent to the practices described in this Privacy Policy.

2. What information we collect

We may collect the following types of personal information:

• Identity & contact information: your full name, address, email address, phone number, nationality.
• Booking & stay details: arrival and departure dates, cottage type, number of guests, special requests, payment details (or payment method information) and any associated billing address.
• Official identification details, where required by law or for security-purposes: passport number, national ID, visa information (if applicable).
• Device and website usage information: IP address, browser type, operating system, referring URLs, pages visited on our website, cookies and similar technologies.
• Preferences & feedback: any dietary or accessibility requirements, guest preferences, surveys or reviews, contact consent for marketing.
• Other information: if you provide additional information such as photographs, social media profile links, or any optional data for loyalty or promotional offers.

3. How and why we use the information

We use your information for the following purposes:

• To process and manage your booking/reservation, confirm your stay, deliver services and fulfil our contract with you.
• To manage payment, billing, charges and refunds.
• To communicate with you (pre-arrival, during stay, after departure) about your booking, changes, special offers, promotions and events (in accordance with your marketing preferences).
• To personalise your experience, including recording your preferences so we can serve you better in future visits.
• To improve our website, services and resort operations through feedback, analytics and business-insights.
• To comply with legal, regulatory or safety obligations (for example check-in requirements, local government registrations, tax or immigration records).
• To protect our rights, property and safety of guests and staff (for example surveillance within public resort spaces, investigation of incidents).

4. How we share your information

We will not sell your personal data to third-parties for marketing. However, we may share your personal information in the following ways:

• With third-party service providers acting on our behalf (such as payment processors, reservation platforms, cleaning/housekeeping, transport suppliers, IT/data hosts) only for the purpose of providing services to you.
• With affiliated companies or business partners, where required to fulfil your booking or stay.
• With government, regulatory, law-enforcement or immigration authorities when required by law or for safety/security reasons.
• If our business or part of our operations are sold, transferred or merged, your personal data may be part of that transaction (with appropriate safeguards).
• We may share aggregated or anonymised data (which does not identify you personally) for business-analysis or marketing-overview.

5. Cookies & similar technologies

We use cookies and similar tracking technologies on our website to:

• Recognise you when you return to our site.
• Understand how you use our website (pages visited, errors encountered) to improve it.
• Provide relevant offers or communications (subject to your consent).

You can choose to disable cookies via your browser settings—but this may affect the functionality of our website.

6. Data retention

We will retain your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will delete or anonymise it in a secure manner.

7. Data security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. However, no internet transmission can be guaranteed completely secure—so please only provide sensitive information via our secure systems.

8. Your rights

Depending on applicable law (including Bangladesh law), you may have the following rights in relation to your personal data:

• To request access to the personal data we hold about you.
• To request correction or update of inaccurate or incomplete data.
• To request deletion or restriction of processing of your personal data, where appropriate.
• To withdraw your consent to processing, where the processing is based on consent.
• To lodge a complaint with the relevant data-protection authority.

If you wish to exercise any of these rights, please contact us (see Contact section below). We may require proof of identity before fulfilling your request.

9. International transfers

Your personal data may be stored or processed in servers located inside or outside Bangladesh. Where the data is transferred abroad, we will ensure appropriate safeguards are in place to protect your data in accordance with law.

10. Children

Our services are not directed at children under the age of 18. If you are under 18 you may only use our services with the involvement of a parent or guardian. If you believe we have collected personal data of a child without consent, please contact us and we will take steps to delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do so, we will revise the “Last updated” date. We encourage you to review this page periodically. Your continued use of our website or stay at the resort after changes signifies your acceptance of the updated policy.

12. Contact & registrations

If you have any questions about this Privacy Policy or want to exercise your rights, contact:

Toma Tungi Resort

Registered Address: Toma Tungi Parjatan Complex, Thanchi, Bandarban, Bangladesh

Email: [email protected]

Phone: +8801831436473 (Booking), 01851436476 (Manager/Service)