At Imperial Hotel Management Services Pvt. Ltd, located in Pakistan, we are dedicated to protecting the privacy, confidentiality, and security of our guests' personal data. This Privacy Policy outlines how we collect, process, store, and safeguard your data in compliance with Article 14 of the Constitution of the Islamic Republic of Pakistan, the Prevention of Electronic Crimes Act (PECA), and national data protection standards.
Policy updates,
This policy is updated in July 2026 and again according to the needs and requirements and shall be notified
Lawful Basis and Information We Collect
We only collect and process personal data where a clear, lawful basis exists. In accordance with local hospitality and digital regulations, we collect:
Identity & Regulatory Data: Full name, phone number, email address, physical address, and mandatory government-issued identification such as Computerized National Identity Card (CNIC) numbers for Pakistani citizens or passport copies for foreign nationals as required by local law enforcement for guest registration.
Booking & Stay Details: Check-in/check-out dates, room choices, and specific hospitality preferences (e.g., dietary or accessibility requests).
Financial & Payment Data: Credit/debit card numbers, billing addresses, and transaction logs. All payments are processed securely via encrypted, state-authorized payment gateways.
Digital & Wi-Fi Logs: IP addresses, MAC addresses, browser types, and connection timestamps recorded when utilizing our website booking engine or free guest Wi-Fi networks.
Explicit Consent and Purpose Limitation
We strictly adhere to the principle of Purpose Limitation. Your data is collected solely to manage your stay and will not be processed for unrelated activities without your explicit consent.
Non-Bundled Consent: Agreeing with our room booking terms and conditions does not automatically opt you into marketing communications. Promotional emails, newsletters, or SMS alerts are handled under a separate, optional consent mechanism which you can withdraw at any time.
Data Localization and International Transfers
In accordance with Pakistan's data sovereignty and localization policies:
Critical guest information and identity logs are primarily stored and secured on servers physically.
Where cloud-based international Property Management Systems (PMS) or booking engines are used to manage international reservations, we ensure our third-party vendors deploy industry-standard end-to-end encryption to provide equivalent data protection safeguards.
How We Share Your Data
We do not sell, rent, or trade your personal data. We only disclose information to:
Authorized Staff & Vendors: Internal team members and trusted software providers (PMS, channel managers) necessary to execute your booking.
Law Enforcement: Local regulatory authorities, police, or state bodies when strictly mandated by Pakistani statutory laws, national security protocols, or valid court orders.
Data Security and Breach Protocol
We implement administrative and technical controls aligned with the Pakistan Information Security Framework (PISF) to protect your information against unauthorized access, hacking, or accidental loss.
Data Breach Notification: In the event of an unforeseen data security breach that compromises your personal information, Imperial Hotel Management Services Pvt. Ltd. is committed to containing the issue and reporting the incident to the relevant national regulators and affected guests within the legally recommended timeframes.
Data Retention and Deletion
Your data will be kept longer than necessary. We retain personal data for the duration required to fulfill your hospitality service, manage business accounting, and comply with Federal Board of Revenue (FBR) financial tax audit retention mandates.
Your Rights as a Data Subject
Under emerging Pakistani data protection frameworks, you hold specific digital rights regarding your information:
Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You can request immediate correction of inaccurate or incomplete data (such as a typo in your CNIC or email).
Right to Erasure (Right to be Forgotten): You can request the deletion of your digital profile and Wi-Fi logs after check-out, subject to legal tax and statutory registration exemptions.
Right to Object: You can object to the processing of your data for direct marketing or behavioral tracking.
Contact Our Data Compliance Officer
To exercise your data rights, lodge a grievance, or ask questions regarding this policy, please contact our designated data representative:
Imperial Hotel Management Services
Attn: General Manager
Address: 24 – Egerton Road, Lahore
Email: [email protected]
Phone: +9242 111 444 333