ACK Club and Spa Pte LTD (ACK) Privacy Notice

About Us

We are ACK Club and Spa Pte LTD (ACK) and we respect your privacy. The following policy describes how we use your personal information.

We are registered as ACK Club and Spa Pte LTD., at Lot 52 Matana Street, Nakasi, Fiji Islands. When you visit our website, submit an inquiry through our contact form or make a booking with us either directly or via a third party, you are trusting us with your information. We use this information to provide you with better service. Examples of this include, but are not limited to, providing your offers or deals that are relevant to you, or having your contact information available to us so that we can more quickly and easily serve you.

Your privacy is important to us and we care about the trust you are placing in us by sharing your information. In this privacy policy we will explain what information we collect, how we collect it, how we use it, why we use it, who we share it with and the rights you may have over it.

For example, if you use our contact form to inquire about a room in Wakaya Resort, we will use the contact information you provide us with (your e-mail or phone number, for example) to contact you and give you the information you’re requesting. We strive to protect any personal information you give to us and to comply with all relevant data protection legislation. As it pertains to relevant data protection legislation, ACK is the data controller of personal information that we hold and process about you.

We hope this document is clear and easy to understand. If you have any questions or want to further discuss anything about this policy, please email us by using the contact form provided with this website.

About Your Information

Data we collect and what we use it for

We will collect and use your personal information when you visit our website, use the contact form to reach out to us, or make a booking with us either directly or via a third party. We will explain this in more detail later in this document. Your information may be shared with members of our group and some third parties.

See below for further details on how we use your information and who we share it with.

We will only use your personal information for the reason we collected it or reasons that support this. If we need to use your personal information for some other purpose, we will notify you and explain the legal basis which allows us to do so.

Information that we collect

  1. Information you give us when you contact us to inquire about our services, or when you purchase our services, either online or over the phone, including:

  • Your contact information: name, address, country of residence, email address, phone number
  • Your passport number
  • Your bank account and/or credit card details
  • The names of other guests in your party
  • Your arrival and departure dates
  • Details of the room(s) you book with us
  1. Information that you give us in person when you visit Wakaya Resort, including:

  • Information that you provide during registration (like your name, email address, home address, phone number, passport details, date of birth, and whether you can swim or scuba dive)
  • Information that you provide when you give us feedback (like your name and contact details, arrival and departure dates, address, email address, your opinion about Wakaya Resort)
  • Activities you book as part of your stay with us
  • Preferences you express during your stay (types of food you like, types of drinks you like, etc.)
  1. Information generated by how you use our services, including:

  • Services you purchase from us
  • When and where you make these purchases
  • What you paid and how
  • Whether you’ve opened electronic communications from us
  1. Information generated when you communicate with us in person, through our website, via email, over the phone, or through any other medium, including:

  • Your contact details
  • The details of your communication with us
  • Our messages to you
  1. If you have an account with us, information provided as part of your account, including:

  • Your username
  • Your password
  • Your account settings and preferences
  • Your email address
  1. Information that we collect through your use of our website, including:

  • Device information such as operating system, device identifiers, mobile network system, etc.
  • Hardware and browser settings
  • Date and time of website requests
  • The content of the requests you make
  • The pages you visit and the search engine terms you use
  • The IP address of your device
  1. Information that we collect from third-party booking partners, including possibly:

  • Your contact details like your name, address, country of residence, email address, phone number
  • Your passport number
  • Your bank account details / credit card details
  • Details of dietary, disability or other special requirements for your stay with us
  • Your medical status, if relevant to your stay with us
  • The names of any guests accompanying you
  • Your arrival and departure dates
  • Details of the type of stay you purchased with us

How we use this information

(Item numbers match those in the previous section and describe how we use the information collected)

  1. The purpose of us collecting this information includes:

  • Providing our services
  • Managing and administering our services
  • Processing your booking
  • Taking payment from you or giving you a refund
  • Registering you as a guest
  • Sending you personalized offers or special deals
  • For business development and business analysis
  1. The purpose of us collecting this information includes:

  • Providing our services
  • Replying to your feedback about our services
  • Internal and group reporting on our performance
  • Sending you personalized offers or special deals
  • For business development and business analysis
  1. The purpose of us collecting this information includes:

  • Developing new products or services
  • Improving our current products or services
  • Identifying products and marketing that may be useful or relevant to you
  • Personalizing our services for you and providing you with services that may be of interest to you
  1. The purpose of us collecting this information includes:

  • Answering any issues or concerns you may have
  • Monitoring guest communications and experiences for quality control and training purposes
  • Sending you our newsletter if you have signed up for it
  • Developing new products or services
  • Improving current products or services
  • Personalizing our services
  1. The purpose of us collecting this information includes:

  • Providing our services
  • Managing or administering our systems
  • Determining how you would like us to use your account
  1. The purpose of us collecting this information includes:

  • Providing our services, including making our website and other related content available to you
  • Developing new services
  • Improving our services, including making the website more relevant for you and our other visitors
  • Identify issues with the website and user’s experience of it
  • Monitor the way our website is used
  1. The purpose of us collecting this information includes:

  • Providing our services
  • Managing and administering our services
  • Processing your order
  • Taking payment from you or giving you a refund
  • Registering you as a guest
  • Helping us ensure that our guests are genuine and preventing fraud
  • Sending you personalized offers or special deals

Why we use this information

  1. Our legal basis for processing your information includes:

  • It is necessary to perform our business (to provide our services, manage and administer our services, processing your booking, taking payment and providing refunds)
  • Consent (to marketing)
  • Legitimate interest (of improving and providing you with quality services, and to improve our services)
  1. Our legal reasons for processing your information include:

  • It is necessary to perform our business and provide our services
  • Consent (to marketing)
  • Legitimate interest (of improving and providing you with quality services, and to improve our services)
  1. Our legal reasons for processing your information include:

  • We have a legitimate business interest in improving our service and better understanding how customers use it
  1. Our legal reasons for processing your information include:

  • We have a legitimate business interest in understanding customer feedback and responding to customer communications in a consistent way
  1. Our legal reasons for processing your information include:

  • It is necessary to provide an account
  • We have a legitimate business interest in enabling you to update your preferences and settings online
  1. Our legal reasons for processing your information include:

  • We have a legitimate business interest in understanding how our website is accessed, how it is used and any problems users may have with it across multiple devices and operating systems
  1. Our legal reasons for processing your information include:

  • It is necessary to perform our business function and provide our services
  • Consent (to marketing) – At any time when we need your consent to marketing, you have the right to withdraw the consent by contacting us.

Legitimate Interests

A legitimate interest will only apply where we consider that it is not overridden by individuals’ interests or rights which require protection of their personal data. If you require further information regarding our legitimate interests as applied to your personal data, you may contact us.

Legal Requirements

Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defense of a legal claim. We will not delete personal information if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.

Special Information we Collect

Certain types of personal information are more sensitive than others. “Special information” about you includes information about health, dietary requirements, disability, race, ethnicity, criminal offenses (or alleged offenses), political opinions, biometrics or religion. We may collect and receive special information about you. We have identified here the types of special information we may collect or receive, how we will use it and why we will use it.

The special information we collect

  1. Information that you provide to us in person or that we get when you are making a booking or when you complete registration at Wakaya Resort

  • Dietary or allergy requirements that imply religious beliefs or medical conditions
  • Health / accident/ mobility / disability records
  1. Information that you give us or we receive in relation to potential criminal activities

How we use your special information

  1. We use this information to:

  • Provide our services
  • Provide relevant service and support to you or to guests in your party
  • Provide you with medical assistance if needed
  • Keep record of any accident within our systems, the General Manager’s log and on-site medical personnel’s records
  1. We use this information to:

  • Protect against criminal activities of any kind, including theft

Why we use your special information

  • Legal basis for processing; because you have consented that we can process this information for those reasons. Any time we rely on your consent, you have the right to withdraw the consent by contacting us.
  • Legal basis for processing: it is needed for the prevention or detection of unlawful activities

Minors

Protecting the online privacy of children is very important to us. Outside of required guest details and relevant medical information (i.e. medical information and disability information), we do not intentionally gather personal information about minors except for the data required in order to facilitate you and your child’s stay with us. If you believe we have inadvertently collected personal information about your child, please contact us, and we will attempt to remove this information. If a minor (according to applicable laws) has provided us with personal information without parental or guardian consent, the parent or guardian should contact us to remove the relevant personal information and unsubscribe them from our website and/or services.

How long we keep your information

We will keep your information for as long as it is reasonably necessary and to deal with claims. It will depend on factors such as whether you’ve made a booking or an inquiry with us, or have interacted with recent offers. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.

Information we share

There are certain circumstances where we may transfer your personal data to employees, contractors and to other third parties.

  • We share information about you with employees at Wakaya Resort and other members of our company. They are bound to keep your information in accordance with this privacy policy.
  • We may also share your information with certain contractors or service providers. They may process your personal data for us, for example, if you book an activity package provided by a third party supplier at Wakaya Resort. Other recipients/service providers include database management providers, website digital agents, IT systems specialists and email providers.
  • Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function.
  • We may also share your information with certain third parties. We will do this either when we receive your consent or because we need them to see your information to provide products or services to you. These include other partners we do business with such as loyalty membership schemes and third party activity suppliers approved by ACK.
  • In the event that you suffer an accident or an injury while visiting Wakaya Resort, details of your accident including your health information will be shared with on-site medical personnel (where applicable) or third-party medical providers.

Your personal information may be transferred to other third-party organizations under certain circumstances:

1). If we’re discussing selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality;
2). If we are reorganized or sold, information may be transferred to a buyer who can continue to provide services to you;
3). If we’re required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the Police;
4). If we are defending a legal claim your information may be transferred as required in connection with defending such claim.

Your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will no longer be personal data.

Where your information will be held

The information we keep of you is stored outside the European Economic Area, and if we share it, it may be transferred to other locations outside the European Economic Area.

We store our information on servers located in the United States, Fiji and Australia. This data will be transferred to ACK staffers and third parties (as identified above). These countries do not have an equivalent level of data protection laws to those applicable in Europe. The transfer of this information is governed by a contract including standard contractual clauses (SCCs) approved by the European Commission in accordance with Article 46(c) of the General Data Protection Regulation.

We will only transfer data to jurisdictions outside the scope of the European General Data Protection Regulation (GDPR) where the appropriate safeguards set out in the GDPR are in place.

Your rights

You may have certain rights in relation to your information including a right to access or to correct the information we hold on you. Other rights may be available under certain circumstances.

Some rights will only apply under certain circumstances. For example, the right to be forgotten or the right to request that we transfer your information to another company. Generally, these rights will not be available if you have an outstanding booking with us, if we are required by law to keep the information or if the information is relevant to a legal dispute. If you would like to exercise, or discuss any of these rights, please contact us.

Where we receive a request to exercise one of these rights, we shall provide information on the action we take on the request within one month of receipt of the request. This may be extended by a further two months in certain circumstances, for example where requests are complex or numerous.

The information will be provided to you free of charge, except where requests are manifestly unfounded or excessive, in particular because of their repetitive character. In these circumstances we may charge a reasonable fee or may refuse to act on the request. We will advise you of any fees prior to proceeding with a request.

We may ask you to verify your identity before carrying out a request.

Where we do not carry out your request, we shall inform you without delay and within one month of receipt of the request, together with our reasons for not taking the action requested. You shall have a right to raise a complaint with a supervisory authority or seek a remedy from a Court.

We’ve listed the rights you have over your information and how you can use them below. These rights are subject to restrictions in the GDPR and, subject to the exemptions in that law, may only apply to certain types of information or processing.

Your rights and how to use them

  1. We need your consent for some of the ways we use your information, for example for marketing

You can exercise this right by contacting us using the standard contact form on this website.

  1. You can ask us to confirm if we are processing your information and, if we are, you can ask for access to that information as well as further details regarding for example, why we are using your information and what we are doing with it.

You can exercise this right by contacting us using the standard contact form on this website.

  1. You can ask to correct your information if it’s wrong.

You can exercise this right by contacting us using the standard contact form on this website.

  1. You can ask us to delete parts of your information.

You have a right to be forgotten and you can ask that our systems stop using your information.

You can exercise this right by contacting us using the standard contact form on this website.

It may not always be possible for you to use this right, for example, if the information is still necessary for us to perform our services or we need to keep the information by law or because of a legal dispute.

  1. You have the right to request that we suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

You can exercise this right by contacting us using the standard contact form on this website.

  1. You can ask us to help you move some of your information to other companies.

You have the right to ask that we provide your information in an easily readable format to another company. You can exercise this right by contacting us using the standard contact form on this website.

  1. You can ask us to stop using your personal information, but only in certain cases.

This applies where we are processing your personal information based on a legitimate interest (or those of a third party) and you may object to processing on this ground. However we may be entitled to continue processing your information based on the our legitimate interests. You also have the right to object where we are processing your personal information for direct marketing purposes.

You can exercise this right by contacting us using the standard contact form on this website.

  1. You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident, where you work or where an alleged infringement of Data Protection law has taken place.

You can exercise this right by contacting your local regulator in the European Union.

How to contact us

If you have any questions about this policy please contact us using the contact form of this website, or at ACK Club and Spa Pte LTD., Lot 52 Matana Street, Nakasi, Fiji Islands.

Changes to the policy

This policy will be changed from time to time.

Links to third party websites

Our website, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others including our partner networks, advertisers and other group companies and/or social networks as offered to you and supported by your browser.

The personal data that you provide through these websites is not subject to this Privacy Policy and the treatment of your personal data by such websites is not our responsibility. If you follow a link to any of these websites, please note that these websites have their own privacy policies which will set out how your information is collected and processed when visiting those links. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of entities through which you chose to share.

Other policies

Cookies

We use cookies that identify your browser or device. They collect and store information when you visit our website about how you use it.

Security

We are committed to keeping your personal information safe. We’ve got physical, technical and administrative measures in place to prevent unauthorized access or use of your information.