Last updated: 28 July 2023
Belmond Management Limited, together with our holding company(ies), affiliates, subsidiaries and the hotels, trains, cruises or other properties we own, operate or manage (“Properties”) (together, “Belmond”, “Belmond Group”, “we” or “our”), respect the privacy of every individual who visits our Properties and/or uses any of our websites. For a list of Properties belonging to the Belmond Group, please click here.
This Privacy Policy applies to personal data that:
The following sections of this Privacy Policy describe the types of personal data we collect, how and for what purposes we use that personal data, with whom we share it, and the choices and rights available to you regarding our use of your personal data. We also describe the measures we take to protect the security of the personal data we hold and how to contact us about our privacy practices, and to exercise your rights.
If you are a Californian resident, for more information about your privacy rights, please click here.
Click on one of the links below to jump to the listed section:
1. Data Controller 2. Personal data we collect 3. Use of personal data 4. Sharing personal data 5. Your rights 6. Data transfers 7. How we protect your personal data 8. How long we keep personal data for 9. Links to other websites 10. Updates to our Privacy Policy 11. California Consumer Privacy (California Residents only) 12. How to contact us
1. Data Controller
Belmond Management Limited (UK company number 1680876) is the data controller with respect to your personal data and is registered with the UK Information Commissioner's Office with reference number Z1894972.
2. Personal data we collect 2.1 Personal data you provide on a voluntary basis
We will collect, store and process information about you if you voluntarily provide us with such information in connection with the following:
The types of information we may obtain include:
‘Special category’ personal data
We do not collect data which is, by its nature, particularly sensitive (e.g. genetic data, biometric data, data revealing racial or ethnic origin, political opinions, sex life, sexual orientation, religion or other beliefs, data concerning health, criminal background or trade union membership) unless it is volunteered by you.
We may use certain sensitive (or “special category”) personal data where you have given your explicit consent to us doing so, to better serve and meet your needs. Such sensitive data is only shared with other members of the Belmond Group or our third party service providers acting as data processors (e.g. excursion providers, restaurants, transport providers) for the purpose of providing the services you request and will not be shared or used by us for any other purposes.
Examples of sensitive personal data we may collect and process include:
2.2 Personal data we collect automatically
When you visit a Belmond website, we may also collect certain data through the use of “cookies” and other automated means. Cookies are small pieces of data that are stored by your browser on your computer's hard drive. We use cookies to gather data about the visitors to our websites, to enable us to improve our websites and deliver a better and more personalised service.
Data we collect through such means may comprise the following:
To learn more about cookies, how they are used and how to exercise your choice with respect to their collection of information on this site, please click here.
Please note that the Belmond website (www.belmond.com) uses YouTube API Services, in relation to the videos we showcase. By using the Belmond website, you agree to be bound by the YouTube Terms of Service applicable to the YouTube API Services. A copy of those YouTube Terms of Service is available at https://www.youtube.com/t/terms
3. Use of personal data
As a provider of luxury hospitality experiences worldwide, Belmond has a legitimate business interest in operating and improving its business and the services it offers. Belmond therefore uses and processes your personal data to:
Even where Belmond has a legitimate interest in processing your personal data, it will not do so to the extent that processing would override your interests, rights and freedoms to protect your personal data.
We may also use your personal data to protect against and prevent fraud, claims, and other liabilities and to comply with or enforce applicable legal requirements, industry standards, and our policies and terms. We use personal data for these purposes when it is necessary to protect, exercise or defend our legal rights, or when we are required to do so by applicable law.
To enhance your Belmond experience we may use the information you provide us, including your preferences and stay details, to offer you a personalised and unique experience. We sometimes analyse or anticipate aspects related to your preferences, interests, and behaviour to tailor our services (including our marketing communications) and better suit your needs. We do this based on our legitimate interests. We understand and respect that not everyone may want their data to be used this way. Therefore, you have the right to opt-out of this personalisation at any time.
You can opt-out of profiling by:
Please note, once we receive your opt-out request we will action it as soon as possible but please allow up to 10 business days for your request to take effect.
We may process your personal data by both automated and manual means. We may use your personal data in other ways for which we provide specific notice at the time of collection.
4. Sharing personal data
We do not sell, otherwise disclose, or share data we collect and hold about you, except as described in this Privacy Policy.
We may share your personal data with third parties as described below:
5. Your rights
We will only send you marketing communications if you “opted in” to receiving such communications. You have the right to “opt out” of receiving marketing communications, whether by email or otherwise, at any time. You can do this by (i) clicking the unsubscribe link displayed in any of the marketing e-mails you receive, (ii) emailing unsubscribe@belmond.com to indicate you no longer wish to receive marketing communications, or (iii) writing to us at the relevant address set out in How to contact us below.
Pursuant to California's "Shine the Light Act", California residents are permitted to request information about the manner in which we share certain categories of data with third parties for their marketing use.
If you are a “data subject” under applicable data protection law in the EU or United Kingdom, you will have the following rights in relation to personal data that we hold about you:
To exercise your rights as set out above or to make a complaint or submit an inquiry about our privacy practices, please contact the Belmond Group Data Protection Officer by (i) email at dpo@belmond.com, or (ii) writing to us at the relevant address set out in How to contact us below.
To help protect your privacy and maintain security, we may take steps to verify your identity before we can action your request.
6. Data transfers
We may transfer to, and store the data we collect about you in, countries other than the country in which the data was originally collected, including the United States, Canada or other destinations outside the European Economic Area (“EEA”) and the United Kingdom. Those countries may not have the same data protection laws as the country in which you provided the data. When we transfer your data to other countries, we will protect the data as described in this Privacy Policy and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA and outside the United Kingdom.
If you are located in the EEA or the United Kingdom, we will only transfer your personal data if:
You may request more information about the safeguards that we have put in place in respect of transfers of personal data by contacting us as described in How to contact us below.
7. How we protect your personal data
We maintain administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Service providers and contractors who might have access to your data in order to provide services on our behalf will be contractually obliged to keep such data in confidence, provide adequate data security measures, and may not use that data for any other purpose.
For your own protection, we encourage you not to include sensitive personal data, credit card or similar personal data in any e-mails you send us or our staff.
8. How long we keep personal data for
Belmond only retains your personal data for as long as needed to fulfil the purposes for which it is collected, unless we are required or permitted by law to keep the personal data for longer.
Your personal data will be anonymised or deleted if your last interaction with Belmond was over 7 years ago. “Interaction with Belmond” includes for example visiting a Belmond Property or opening marketing communications from Belmond.
For a more detailed breakdown, view Belmond's data retention policy >
9. Links to other websites
Our websites may provide links to other websites for your convenience and information. These websites operate independently from us. Linked websites may have their own privacy policies, which we strongly suggest you review. To the extent that any linked websites you visit are not owned or controlled by us, we are not responsible for the websites’ content, any use of the websites, or the privacy practices of the websites.
10. Updates to our Privacy Policy
This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our processing of your personal data and privacy practices. We will post a prominent notice on each of Belmond’s websites to notify you of any significant changes to our Privacy Policy and indicate at the top of the Privacy Policy when it was most recently updated.
11. California Consumer Privacy (California Residents only)
Specific laws apply to the personal information of Californian residents. Please click here for further information.
12. How to contact us
If you have any questions or comments about this Privacy Policy, the use of cookies, if you would like us to update personal data we have about you or your preferences, or to exercise Your rights (as detailed above), please email our Belmond Group Data Protection Officer at dpo@belmond.com or write to us at:
Belmond Group Data Protection Officer Belmond Management Limited 4B Victoria House, Bloomsbury Square, London WC1B 4DA
From 1 January 2021, Belmond has an appointed Representative for data protection matters in the EU, as required under European data protection legislation. If you reside in the EU, you can also contact us by writing our EU Representative (and/or emailing the Belmond Group Data Protection Officer at dpo@belmond.com):
Belmond Group EU RepresentativeBelmond Italia S.p.A.Via B. Cavalieri 420121 MilanItaly
In the unlikely event that you wish to lodge a complaint about our collection, transfer or processing of your personal data, you can lodge a complaint with the UK Information Commissioner’s Office which is the Supervisory Authority of Belmond Management Limited or the Supervisory Authority in your country of residence.
Special Clauses for RussiaThese special clauses apply in all cases where we process personal data of data subjects residing in Russia. These special clauses supersede all other provisions of this Privacy Policy.
Data Operator. Belmond Management Limited (registered address: 4B Victoria House, Bloomsbury Square, London WC1B 4DA) is the data operator of personal data originated from data subjects residing in Russia. This Privacy Policy constitutes the document determining the data operator’s policy about the processing of personal data on www.belmond.com/ru and in other cases described above.
Personal Data We Collect. When we receive personal data about you from third parties, we will ensure that we have an appropriate lawful basis and give you a notice about the data processing (where required by the applicable law) prior to process your data.
We may process special categories of personal data where you have given your written consent and in other cases prescribed by the applicable law.
Use of Personal Data. The first paragraph of Section 3 of this Privacy Policy will not apply to the processing of your personal data. We will process your personal data for the purpose of concluding a a contract (the Legal Notice or Belmond Hotel Consumer Booking Terms and Conditions, or others) at the initiative of the data subject or performing such contract concluded between Belmond Management Limited and you or a contract where you act as a beneficiary. We will provide you with information, products, or services that you request from us or which we feel may interest you on the basis of your prior consent.
You may contact us through web-forms on our websites. In such a case, you must submit only your own, accurate, and up-to-date personal data. We may process personal data that you submitted through the web-forms for the purpose of considering your inquiries and responding to them on the basis of your consent. By submitting an inquiry, you also express your consent that we may disclose your inquiry and all personal data therein to third parties according to Section 4 hereof (where appropriate) and assign the processing of such data to our data processors.
Our processing actions may include the following: collection, record, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (provision and access), depersonalization, blockage, deletion, and destruction of personal data.
We ensure recording, systemisation, accumulation, storage, clarification (update, change) and extraction of personal data of Russian Federation citizens with the use of databases located in the territory of the Russian Federation when collecting this personal data in any manner including via the Internet.
Sharing Personal Data. We may share your personal data with third parties as described in Section 4 above upon your consent or if we are required to do so by law.
Your Rights. You, as a data subject, have the following rights:
Data Transfers. We may send your personal data to the territory of countries ensuring or not ensuring an adequate level of protection of data subjects’ rights. We may send your data to the territory of countries not ensuring an adequate level of protection of data subjects’ rights (e.g. the United States) only if it is necessary for the performance of a contract concluded between you and Belmond Management Limited (the Legal Notice or Belmond Hotel Consumer Booking Terms and Conditions, or others).
Information about Data Security Requirement Performed by Us. We take all necessary administrative, legal, and technical measures to protect your personal data against unlawful or accidental access, destruction, change, blockage, copy, provision, and distribution as well as against other unlawful actions in respect of personal data. We fulfil the following data security requirements to the protection of personal data processed via information systems depending on the security level of information systems chosen by us: ensure security of premises accommodating the personal data information systems equipment in a way preventing any person without appropriate access rights from uncontrolled intrusion or stay in these premises; ensure safety of all personal data media; adopt by the general manager’s decision a document determining list of employees whose work duties require access to the personal data processed in the information system; use information security tools, of which compliance with the requirements of the information security laws is duly assessed and confirmed, when such tools are necessary for the neutralization of actual risks; appoint an employee responsible for the security of the personal data in the information system or impose this responsibility on an appropriate division; ensure that all changes of access rights with regard to the personal data in the information system are automatically recorded in the electronic messages log; and provide access to the electronic messages log only to those employees or other authorized persons who need this access for the discharge of their work duties.
How Long We Keep Personal Data. Section 8 of the Privacy Policy does not apply. We only retain your personal data for as long as needed to fulfil the purposes for which it is collected, unless we are required or permitted by law to keep the personal data for longer. We will destroy your personal data within 30 days after you recall your data processing consent unless we may continue the data processing on the ground of another lawful basis.
Special Clauses for ChinaThese special clauses apply in all cases where we process personal data of data subjects residing in China. These special clauses supersede relevant provisions of this Privacy Policy.
The "Belmond" brand is operated and distributed in China by Belmond Management Limited, registered address: 4B Victoria House, Bloomsbury Square, London WC1B 4DA ("Belmond" or “We/Our/Us”). We have appointed Belmond (Shanghai) Management & Consultancy Co., Ltd as our representative in China for data protection purposes.
Sharing Personal Dataa) SHARINGWe share your personal data as described below, including: (1)with external parties in accordance with laws and regulations, or mandatory requirements of government authorities; (2)with our affiliated companies or business partners: we may share information related to our consumers with our affiliates or our business partners, for example, for trend analysis; (3)with service providers that perform services on our behalf, such as:
We enter into written agreements with the above companies on the purpose, duration, method of processing, types of personal data, protection measures, rights and obligations of both parties and will supervise their personal data processing activities. The collected data may also be shared with independent third-party data controllers, such as:
Third-party e-commerce platforms, reservations management platforms media platforms or social platforms according to the applicable channels.
b) PUBLIC DISCLOSURE We will only publicly disclose your personal data under the following circumstances:
Your Rights Subject to the exceptions provided by laws and regulations, you have the right to:
Data Transfers We may provide your personal data to entities outside China, including Belmond Ltd. In the United Kingdom, the entities in which it has an interest of 25% or more, from time to time and in each case any train, hotel, cruise or property owned or controlled by any such entity, in each case from time to time , and to service providers that process personal data on our behalf. You may contact us at any time through the contact information below with respect to the names and contact information of these entities.
We will perform the necessary procedures in accordance with the law and take necessary measures to ensure that the recipient meets the standards of protection stipulated by applicable laws and regulations. If expressly required by applicable laws, we will perform security assessment, certification or enter into a standard contract for the cross-border transfer of personal data, and determine whether to continue cross-border transfer of your personal data and whether to apply desensitization technologies in accordance with applicable laws.
Contact usIf you have any questions about how we process your personal data, please contact us by the following manner: Contact information of person in charge of personal data protection: dpo@belmond.com