Privacy Policy | Atoll Discovery

Introduction

Atoll Discovery Pvt. Ltd. ("Atoll Discovery," "We," "Us," or "Our") is committed to protecting the privacy and security of the personal data collected from users of Our website (www.atolldiscovery.com). This Privacy Policy explains how We collect, use, disclose, and safeguard Your information when You use Our Services.

1. Data We Collect

1.1 Personal Information you provide: when you register, book, or contact us, you may provide your name, email address, postal address, phone number, passport details, date of birth, payment information, travel preferences, guest names, special requests, etc.

1.2 Automatically collected data: when you visit our Site we may collect your IP address, device type, browser type, operating system, device identifiers, browsing behaviour, pages viewed, referral source, date/time of access, cookie IDs.

1.3 Third-party / supplier data: we may receive data about you from travel service providers (resorts, transfers) and from payment processing providers when you make payment.

2. How We Use Your Data

We use your personal data for the following purposes:

to process your booking, issue confirmations and travel documents;
to communicate with you about your Booking (changes, cancellations, support);
to manage payments, refunds, cancellations;
to provide transfers, accommodations and other travel-related services;
to send marketing/promotional communications (with your consent, where required);
to improve our Site, services and user experience;
to comply with legal obligations (tax, regulatory, anti-money-laundering, identity verification);
to detect and prevent fraud or misuse of our Site.

3. Legal Basis for Processing

Where applicable, we rely on the following legal bases:

performance of a contract (when you book);
your consent (for marketing);
legitimate interests (for improving services, fraud prevention) as long as your rights are respected;
compliance with legal/regulatory obligations.

4. Cookies & Tracking Technologies

We use cookies, web beacons, tracking pixels and similar technologies to:

remember your device and preferences;
enable site functionality (search, login);
analyse traffic and user behaviour;
measure marketing campaign effectiveness.

You may set your browser to refuse cookies, but some features of the Site may not work.

5. Sharing Your Data

We may share your personal data with:

the resort or travel service provider that you have booked with, for booking fulfilment;
transfer and other service providers (airport transfers, excursions) if you have requested them;
payment service providers and financial institutions;
analytics and advertising providers (to improve our services and marketing);
law enforcement, regulatory or tax authorities where required by law.

We require that such third parties handle your data consistent with this policy and applicable laws.

6. International Transfers

Your data may be processed or stored outside the Maldives (for example by our service providers). When we do this, we ensure appropriate safeguards are in place to protect your data (e.g., contractual clauses, security measures).

7. Data Security

We implement administrative, technical and physical safeguards designed to protect your data from unauthorised access, alteration, disclosure or destruction. However, no internet or electronic system is 100% secure, so we cannot guarantee absolute security.

8. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected (e.g., servicing your Booking), comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.

9. Your Rights

Depending on your locality and applicable law, you may have the following rights:

to access your personal data;
to correct or update your personal data;
to request deletion of your personal data (subject to legal and contractual requirements);
to request restriction of processing;
to object to processing (including for marketing);
to withdraw consent (where processing is based on consent) — note this will not affect processing based on other lawful grounds.

To exercise any of these rights, please contact us (see Section 14).

10. Marketing Communications

If you have given your consent, we may send you promotional offers, newsletters and other marketing messages about the Maldives, resorts, special deals, etc. You may opt-out of marketing communications at any time by clicking the “unsubscribe” link in the email or contacting us directly. Even if you opt-out, we may still send you transactional communications (Booking confirmations, changes, important updates).

11. Third-Party Links

Our Site may contain links to external websites (for example resort or partner sites). We are not responsible for the privacy practices or content of these other sites. We recommend you review their privacy policies.

12. Children’s Privacy

Our Site is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected data of a child under 16, we will delete it as soon as reasonably possible.

13. Changes to This Policy

We may update this Privacy Policy from time to time (for example to reflect new legal requirements or changes in our services). We will post the updated version on our Site with the “Effective Date”. Continued use of the Site after updates means you accept those changes.

14. Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy or our data practices, please contact us at:

Atoll Discovery Pvt. Ltd.

Email: hello@atolldiscovery.com