Data Subject Rights
Subject to legal limits, individuals may request access to their personal data, correction of inaccurate information, deletion where appropriate, restriction of processing, or objection to certain processing activities. Requests are assessed in light of verification, recordkeeping duties, and other lawful grounds for retention.
Available rights depend on the nature of the request and applicable law.
Requests and Verification
To exercise a privacy right, a requester may need to provide sufficient information to verify identity and describe the relevant interaction. We may decline or limit a request where the law permits or requires us to retain the data, or where the request would adversely affect the rights of others.
Requests are reviewed before action is taken to protect data integrity and confidentiality.
Retention of Data
Personal data is retained only for as long as needed to respond to inquiries, manage bookings, maintain records, resolve disputes, comply with legal obligations, and support website security. When data is no longer required, it is deleted or anonymized according to internal retention practices and applicable law.
Retention follows operational need, legal obligation, and recordkeeping requirements.
Policy Updates
When material changes are made, the updated version will be posted on the website and will apply from the stated effective date. Continued use of the website after an update indicates awareness of the revised notice, subject to applicable law.
This policy may be revised to reflect operational, technical, or legal changes.