隐私政策

At Sirru Fen Fushi – Private Lagoon Resort, we are committed to delivering exceptional service while protecting and respecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and the choices available to you.

This Policy applies whenever you interact with us – through our website (sirrufenfushi.com), our online booking engine, by phone or email, via travel agents or booking platforms, or during your stay at the resort.

1. Personal Information We Collect

We collect information directly from you as well as from third parties such as travel agents, tour operators, and online booking platforms.

For the purposes of applicable data protection laws, GBH Maldives Resort Private Limited, as owner and operator of Sirru Fen Fushi – Private Lagoon Resort, acts as the sole data controller in respect of the personal data described in this Policy.

Further, Sirru Fen Fushi – Private Lagoon Resort is owned and operated by GBH Maldives Resort Private Limited and is not operated under a third-party hotel management or franchise arrangement. Personal data is not shared with any hotel brand licensor or operator in that capacity.

1.1 Contact & Identity Information

Full name, nationality, date of birth, passport or national ID number, postal address, email address, and telephone number.

1.2 Reservation & Stay Information

Arrival and departure dates, villa type, number of guests, room preferences, special requests, services and experiences booked or used, guest feedback, and itemised billing records for services purchased during your stay.

1.3 Payment Information

Credit or debit card details are used to guarantee or settle a reservation. Payment data is processed using PCI-DSS-compliant security protocols.

1.4 Health & Accessibility Information

Any voluntarily provided information regarding dietary requirements, allergies, or accessibility needs. This information is used solely to enhance your comfort and handled with the highest level of confidentiality.

1.5 Communications

Emails, messages, documents, enquiry forms, feedback cards, and post-stay correspondence.

1.6 Device & Technical Information

IP address, browser type, device type, pages visited, time spent on pages, referring URLs, and other browsing data collected via cookies and similar technologies.

1.7 Security & Surveillance Information

CCTV footage and access logs collected for the safety and security of guests and staff.

1.8 Children’s Privacy

We do not knowingly collect personal information from children under 16 without the consent of a parent or legal guardian.

2. Cookies, Tracking Technologies & Advertising

Our website uses cookies, pixel tags, and similar technologies to improve your browsing experience, analyse site usage, and deliver relevant advertising.

2.1 Cookie Consent

On your first visit, you will be asked to set your cookie preferences through our cookie banner. You may change your preferences or withdraw consent at any time.

2.2 Cookies

We use session and persistent cookies to remember preferences, support website functionality, and analyse traffic patterns. Cookies do not, by themselves, collect personally identifiable information.

2.3 Meta (Facebook) Pixel

Used to measure the effectiveness of our campaigns on Meta platforms, understand website actions, and display relevant advertisements. Data collected through the Meta Pixel is processed in accordance with Meta’s Data Policy and is pseudonymised where possible.
This tracking is only activated where you have provided consent.

2.4 Cookies and Trackers We Use

In addition to essential cookies required to operate the website, we use the following third-party technologies, categorised by purpose:

Functional: cookies that allow our online booking engine, Synxis by Sabre, to process your reservation, and cookies used by Weglot to remember your selected language.

Statistics: Google Analytics, deployed through Google Tag Manager, to understand how visitors use our website. This tracking is only activated where you have provided consent.

Marketing: Meta Pixel (Facebook), Google Advertising (including remarketing tags), and DoubleClick, used to measure and improve the relevance of our advertising. Embedded content from YouTube, Instagram, and TikTok may also place cookies when displayed on our pages. This tracking is only activated where you have provided consent.

For a full, regularly updated list of individual cookies, their providers, and retention periods, please visit our cookie preferences centre, accessible via the “Manage Consent” link in the website footer.

2.5 Remarketing

Tracking data may be used to display personalised advertisements for Sirru Fen Fushi on other websites and social media platforms.

2.6 Managing Your Preferences

You can adjust your cookie settings at any time through your browser or our website’s cookie preferences centre. Disabling some cookies may affect website functionality.

Where data is processed by third-party advertising and analytics platforms such as Meta and Google, those platforms operate as independent data controllers in accordance with their own privacy policies, and are engaged only where you have provided the relevant consent.

3. Online Booking Engine (Synxis by Sabre)

Reservations made through our website are processed via Synxis, a secure, PCI-DSS-compliant booking engine operated by Sabre Hospitality Solutions.

During the booking process, you may provide:

• Full name and contact details 
• Travel dates and number of guests 
• Villa type and special requests 
• Payment information for reservation guarantee 

All data is protected with SSL encryption. Synxis processes your information solely on our behalf and operates under its own security and privacy framework. In this context, Synxis acts as a data processor processing personal data on our instructions. We encourage you to review Synxis’s privacy documentation for additional details.

Reservations may also be made through third-party travel agents, tour operators, or directly with our reservations team.

4. How We Use Your Information

We use your personal information for the following purposes:

• Processing, confirming, and managing reservations 
• Communicating with you before, during, and after your stay 
• Personalising your experience based on preferences or past stays 
• Providing services and experiences 
• Compiling accurate billing records and processing payments 
• Sending marketing communications and resort updates (with consent or where legitimate interest applies) 
• Analysing website performance and marketing effectiveness 
• Operating CCTV and ensuring guest and staff safety 
• Complying with legal and regulatory obligations, including mandatory disclosures under Maldivian immigration, tourism, tax, and law-enforcement regulations.
• Responding to enquiries, feedback, or complaints 

5. Legal Basis for Processing

Where required by applicable data protection laws, we rely on the following legal grounds:

• Performance of Contract: To fulfil your reservation and stay 
• Legitimate Interests: To improve services, ensure security, and operate marketing activities 
• Consent: For marketing communications and non-essential cookies 
• Legal Obligation: Where required under Maldivian law (e.g., passport details for immigration)

6. Sharing Your Information

We do not sell your personal information. We may share it with:

• On-property service partners: Spa, dining, excursions, and activity providers 
• Technology and marketing platforms: Meta, Google, and Synxis, as required to operate digital services 
• Travel agents and booking platforms: If you booked via a third party 
• Email and communication service providers 
• Legal or regulatory authorities: Where required by law 
• Future owners or operators: In the event of a sale, corporate restructuring, or transfer of ownership or business of the resort, personal data may be transferred to the relevant successor entity to the extent permitted by law, subject to appropriate safeguards.

All third parties operate under contractual confidentiality obligations and data protection safeguards.

7. International Transfers

Your information may be transferred to countries outside the Maldives where our technology partners or service providers operate. Where applicable, we implement recognised safeguards such as Standard Contractual Clauses (SCCs) or equivalent protection to ensure an adequate level of security.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy or to comply with legal requirements.

• Guest records and billing data may be kept for audit and legal compliance. 
• Marketing consent data is retained until you withdraw your consent. 

9. Your Rights

Depending on your country of residence, you may have the right to:

• Access your personal information 
• Correct inaccurate or incomplete information 
• Withdraw consent for marketing or cookies at any time 
• Request deletion of your data (subject to legal retention requirements) 
• Object to processing based on legitimate interests 
• Opt out of direct marketing at any time (via the “unsubscribe” link in our emails) 

We do not use your data for automated decision-making that produces legal or significant effects.

10. Data Security

We implement appropriate technical and organisational measures to safeguard your information, including:

• SSL encryption for online transactions 
• Access controls limiting data access to authorised personnel 
• PCI-DSS-compliant handling of payment information 
• Regular review and strengthening of our security systems 

No system is entirely secure, but we take all reasonable steps to protect your data. If you have concerns, please contact us.

In the event of a personal data breach, we will assess the incident and take appropriate steps in accordance with applicable data protection laws, including notification to regulators or affected individuals where legally required.

10A. This Privacy Policy does not apply to personal data relating to employees, contractors, or job applicants, which is handled in accordance with separate internal policies.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will always be available at: sirrufenfushi.com/privacy-policy/

12. Contact Us

For questions, concerns, or requests regarding your personal information, please contact:

Sirru Fen Fushi – Private Lagoon Resort GBH Maldives Resort Private Limited Shaviyani Atoll, Republic of Maldives

Email: info@sirrufenfushi.com

Reservations: reservations@sirrufenfushi.com

Tel: +960 654 8888

© 2026 Sirru Fen Fushi. All rights reserved.