Privacy Policy

This Privacy Policy explains how Royal Galaxy Hotel (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website at https://royalgalaxy.pk or use our booking and hospitality services.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU GDPR for our UK and European Union guests.

Who We Are

Royal Galaxy Hotel
Lahore, Pakistan
Email: info@royalgalaxy.pk
Website: https://royalgalaxy.pk

Information We Collect

  • Booking and reservation data: name, email, phone number, address, dates of stay, room preferences, special requests
  • Payment information: processed securely by our payment provider; we do not store full payment card details on our servers
  • Identification: passport or national ID details where required by law for guest registration
  • Communications: any messages or enquiries you send us
  • Website usage: IP address, browser type, pages visited, cookies, and analytics data

How We Use Your Information

  • To process and manage your booking and stay
  • To communicate with you about your reservation, services, or queries
  • To comply with legal obligations including guest registration laws in Pakistan
  • To improve our website, services, and guest experience
  • To send service-related updates (and marketing only with your consent)

Lawful Basis for Processing (UK/EU Guests)

  • Contract: processing necessary to provide the booking and stay you have requested
  • Legal obligation: records required by Pakistani guest registration laws
  • Legitimate interest: service improvement, security, fraud prevention
  • Consent: marketing communications, optional cookies

Sub-Processors

We use the following third-party service providers (sub-processors) who may process your personal data on our behalf. Each provider offers appropriate data protection safeguards.

Service ProviderPurposeData ProcessedLocation
HostingerWeb hosting & infrastructureAll site data, server logs, IP addressesEuropean Union
CloudflareContent delivery network & securityTraffic data, IP addresses, request metadataGlobal (EU data centres available)
Google (Analytics & Site Kit)Website analytics & performanceAnonymised usage data, page views, browser typeUnited States (with adequacy/SCCs)
WordPress / WooCommerceBooking & e-commerce platformBooking data, customer accounts, order historyUnited States (SCCs in place)
Email service providerBooking confirmations & communicationsEmail address, name, message contentProvider-dependent
Payment processorPayment processing for bookingsPayment card data, billing details, transaction recordsProvider-dependent (PCI-DSS compliant)

We review our sub-processors regularly and will update this list when providers change.

International Data Transfers

If you are based in the UK or European Union, your data may be transferred to and processed in countries outside the UK/EU, including Pakistan, where our hotel is located. We ensure appropriate safeguards are in place for such transfers, including contractual protections and processor commitments to data protection standards equivalent to UK/EU GDPR.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or to comply with legal obligations. Booking records are typically retained for 7 years for tax and accounting purposes. Marketing data is retained until you withdraw consent.

Your Rights (UK/EU GDPR)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”) subject to legal retention requirements
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local data protection authority (e.g. the UK ICO)

To exercise any of these rights, contact us at info@royalgalaxy.pk.

Cookies

Our website uses cookies for essential site functionality, analytics, and (with your consent) personalised content. You can control or disable cookies through your browser settings.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include HTTPS encryption, access controls, and secure payment processing.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated effective date.

Contact Us

For privacy-related questions or to exercise your rights, please contact:
Royal Galaxy Hotel
Email: info@royalgalaxy.pk
Website: https://royalgalaxy.pk

Last updated: 7 May 2026