Privacy Policy & Data Protection
Avari Hotels & Resorts is dedicated to safeguarding the privacy, confidentiality, and trust of our guests, members, and visitors worldwide.
1. Scope & Commitment to Privacy
This Privacy Statement governs all websites, mobile experiences, customer loyalty programs, on-property guest Wi-Fi portals, and direct booking engines operated under the Avari Hotels & Resorts brand, including Avari Hotel Lahore, Avari Towers Karachi, Beach Luxury Hotel Karachi, Avari Xpress properties, and international corporate offices.
We treat your personal data with the highest degrees of discretion and integrity. We comply with all relevant federal laws of the Islamic Republic of Pakistan, international hospitality data privacy benchmarks, and general data protection principles (including the EU GDPR where applicable to our international guests).
2. Information We Collect
To fulfill reservations, deliver bespoke guest service, and satisfy legal obligations, we collect the following categories of personal information:
- Identity Information: Full legal name, title, contact telephone number, postal address, and primary email address.
- Statutory Verification Records: As mandated by federal law, original National Identity Card (CNIC) details for domestic guests, or passport numbers, nationality, and visa information for international travelers.
- Stay & Dining Preferences: Room category selections, bedding arrangements, floor preferences, dietary allergies, and past dining history at venues such as Dynasty and The Tollington.
- Financial & Payment Records: Credit card brand, masked card number (first 6 and last 4 digits), and authorization tokens. Full card details are processed directly through PCI-DSS Level 1 compliant financial payment gateways and are never stored in plain text on our servers.
- Avari Gold Loyalty Data: Membership tier status, points balances, digital pass synchronization data (Apple Wallet / Google Wallet), and reward voucher redemption logs.
3. How We Use Your Information
We process your data strictly on legitimate legal grounds, including:
- Facilitating seamless room reservations, dining bookings, and banquet venue agreements.
- Personalizing your stay according to your recorded guest preferences (e.g. pillow menu, high floor).
- Administering the Avari Gold loyalty program and digital wallet membership cards.
- Complying with statutory guest registration and law enforcement safety mandates.
- Sending confirmation itineraries, digital folios, flight pickup dispatches, and voluntary satisfaction surveys.
4. Third-Party Sharing & System Handoffs
Avari Hotels & Resorts does not sell, rent, or lease your personal information to third-party advertisers. Disclosures are limited to trusted technical and operational partners:
- Central Reservation Engine (TravelClick / Amadeus): When reserving via our online booking engine, your reservation payload is transmitted through encrypted TLS handoffs to TravelClick to secure your room inventory.
- Payment Processors & Banking Partners: Authorized merchant acquirers for payment settlement and pre-authorization.
- Chauffeur & Airport Dispatch: Verified concierge transportation providers when airport transfers are requested.
6. Data Security & Storage Standards
We implement multi-layered technical and organizational safeguards, including SSL/TLS 256-bit encryption for data in transit, strict role-based access control for hotel staff, firewalled server clusters, and ongoing vulnerability audits. Personal data is retained only for the duration necessary to deliver hospitality services and comply with statutory financial record-keeping requirements.
7. Your Rights & Data Protection Officer
You have the right to request access to the personal data we hold about you, request rectification of inaccurate records, or request deletion of your member profile where statutory retention periods have lapsed.
Central Office: 87 Shahrah-e-Quaid-e-Azam (The Mall), Lahore, Pakistan
Telephone: +92 (42) 111-282-747