GDPR Policy

General Data Protection Regulation (GDPR) Compliance Policy

Welcome to the official General Data Protection Regulation (GDPR) Compliance Policy of luxury.sohojuttar.com (hereinafter referred to as “we”, “us”, “our”, or “the platform”). As an authoritative digital ecosystem dedicated to ultra-luxury travel, 7-star resort bookings, and VIP concierge intelligence in the United Arab Emirates, we are unequivocally committed to upholding the highest international standards of data privacy, confidentiality, and digital security. This policy outlines our stringent legal framework under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) regarding the processing, management, and protection of personal data.

Under the direct supervision of our founder, Mizanur Rahman Hridoy, luxury.sohojuttar.com operates with absolute transparency. Although our physical headquarters are established within the United Arab Emirates, our digital travel guides, Online Travel Agency (OTA) optimization strategies, and VIP hospitality analyses cater to a global clientele of high-net-worth individuals, including residents and citizens of the European Economic Area (EEA) and the United Kingdom. If you access our platform from within the European Union, this document explains your precise statutory rights and our legal obligations as a designated Data Controller.

1. Data Controller Identification

For the purposes of the General Data Protection Regulation, the Data Controller responsible for the collection, retention, and processing of your personal information collected via https://luxury.sohojuttar.com is:

Corporate Headquarters:
luxury.sohojuttar.com
Attn: Data Protection & Legal Compliance Desk (Mizanur Rahman Hridoy)
Level 41, Emirates Towers
Sheikh Zayed Road, Dubai
United Arab Emirates

  • Designated Data Protection Contact: business@luxury.sohojuttar.com
  • General Privacy Enquiries: info@luxury.sohojuttar.com
  • VIP Guest Support: support@luxury.sohojuttar.com

You may also submit direct statutory inquiries or verify your individual data records by navigating to our dedicated Contact Us portal.

2. Core Principles of Personal Data Processing

luxury.sohojuttar.com strictly adheres to the fundamental data protection principles set forth in Article 5 of the GDPR. We ensure that all personal data handled across our digital network is:

  • Processed Lawfully, Fairly, and Transparently: Data is handled in a manner that is completely transparent to the data subject, with clear notification of processing purposes.
  • Collected for Specified, Explicit, and Legitimate Purposes: Data is gathered exclusively for delivering elite travel intelligence, facilitating VIP resort reservation advice, and maintaining enterprise-grade website security, never repurposed in ways incompatible with these initial objectives.
  • Adequate, Relevant, and Limited (Data Minimization): We only collect information that is strictly necessary for fulfilling our premium editorial and hospitality advisory operations.
  • Accurate and Kept Up to Date: Reasonable operational procedures are implemented to ensure inaccurate data is swiftly erased or rectified.
  • Retained for No Longer Than Necessary (Storage Limitation): Personal records are stored only for the duration required to satisfy the specific operational or legal purposes for which they were initially gathered.
  • Processed with Integrity and Confidentiality: Technical and organizational measures are deployed to guard against unauthorized or unlawful processing, accidental loss, damage, or unauthorized disclosure.

3. Lawful Bases for Processing Under Article 6

In strict alignment with GDPR Article 6, we process personal information only when at least one of the following recognized legal grounds applies:

Consent

Where you have given clear, affirmative consent for us to process your personal data for a specific purpose, such as subscribing to our private VIP newsletter, receiving bespoke notifications regarding Dubai 7-star suite availability, or interacting with optional cookies.

Legitimate Interests

Where processing is necessary for the legitimate business interests pursued by luxury.sohojuttar.com, provided those interests are not overridden by your fundamental rights and freedoms. This includes optimizing our digital infrastructure, preventing cyber threats, monitoring server health, and analyzing aggregated metrics to improve high-eCPM hospitality editorial content.

Legal Obligation

Where processing is necessary for compliance with mandatory legal, regulatory, or administrative requirements imposed by applicable statutory authorities in the UAE or international legal jurisdictions.

4. Categories of Personal Data We Process

Depending on your interaction with luxury.sohojuttar.com, we may collect and process the following specific categories of information:

  • Contact and Identity Information: Your full name, professional title, corporate affiliation, and email address when you voluntarily correspond with our concierge team or request private travel advisories.
  • Technical and Digital Footprint Data: Internet Protocol (IP) addresses, browser type, operating system version, time zone configuration (such as Gulf Standard Time / UTC+4), hardware configurations, and referring URLs gathered via secure server log files.
  • Usage and Interaction Records: Details of your visits to our platform, including specific articles viewed, dwell time on luxury resort guides, click pathways, and navigation flows through our exclusive booking categories.
  • Marketing and Preference Data: Preferences recorded regarding your preferred UAE luxury destinations (e.g., Palm Jumeirah, Downtown Dubai, Saadiyat Island) and choices regarding cookie consent.

We do not collect or process any Special Category Data (as defined in Article 9 of the GDPR), such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric identifiers, health records, or sexual orientation.

5. Google Ad Exchange (ADX), Cookies, and Third-Party Advertising

luxury.sohojuttar.com utilizes programmatic advertising systems, including Google Ad Exchange (ADX), to deliver relevant, high-tier travel advertisements to our visitors. In compliance with European privacy standards and the ePrivacy Directive:

When you visit our platform from an EEA or UK jurisdiction, non-essential cookies and tracking mechanisms—including those utilized by Google ADX and Real-Time Bidding (RTB) partners—are not placed on your terminal device without your prior, explicit consent obtained via our Cookie Management Banner. You maintain full authority to accept, decline, or customize tracking preferences at any time.

Third-party advertising networks process pseudonymous device identifiers, browser specifications, and generalized geographic location data to serve advertisements aligned with luxury travel intent. These entities operate as independent or joint data controllers under European law and maintain their own comprehensive GDPR documentation. You can review Google’s advertising data policies directly at https://policies.google.com/technologies/ads.

6. Your Statutory Rights Under the GDPR

As a data subject located within the European Union, the General Data Protection Regulation grants you a comprehensive set of legally enforceable rights regarding your personal information:

  • Right of Access (Article 15): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and where that is the case, access to that data along with full details of the processing purposes.
  • Right to Rectification (Article 16): You are entitled to require the immediate correction of inaccurate personal data, as well as the completion of any incomplete information held by us.
  • Right to Erasure / “Right to be Forgotten” (Article 17): You may request the deletion of your personal data when it is no longer needed for its original purpose, where you withdraw consent, or where processing is unlawful.
  • Right to Restriction of Processing (Article 18): You have the right to limit the processing of your data in specific scenarios, such as when you contest its accuracy or object to its processing pending verification.
  • Right to Data Portability (Article 20): You may receive your personal information in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another data controller without hindrance.
  • Right to Object (Article 21): You hold an absolute right to object at any time to the processing of your personal data for direct marketing purposes, as well as to processing based upon legitimate interests.
  • Rights Regarding Automated Decision-Making and Profiling (Article 22): You have the right not to be subjected to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. luxury.sohojuttar.com does not engage in automated decision-making that affects your legal status.

To exercise any of these statutory rights, please submit a formal request to our compliance desk at business@luxury.sohojuttar.com. We respond to all authenticated requests within thirty (30) calendar days in accordance with statutory requirements.

7. International Data Transfers and Security Safeguards

Because luxury.sohojuttar.com operates from corporate facilities situated in Dubai, United Arab Emirates, personal information collected from EEA visitors may be transferred to and processed on secure cloud server infrastructure outside the European Economic Area.

When such cross-border transfers occur, we implement robust cross-border protection mechanisms recognized under Chapter V of the GDPR. These include utilizing standard contractual clauses (SCCs) approved by the European Commission, selecting hosting infrastructure vendors certified under recognized security frameworks (such as ISO/IEC 27001 and SOC 2), and maintaining advanced end-to-end transport layer security (TLS 1.3) encryption for all data transmitted across our network.

8. Data Retention Schedule

We retain personal information only for the minimum duration strictly necessary to fulfill the specific purposes outlined in this GDPR Policy. Server log records and pseudonymous analytical data are routinely rotated and permanently deleted on a rolling basis. Direct correspondence sent to our concierge or administrative email accounts is securely archived for a maximum period of twenty-four (24) months to facilitate ongoing guest support, after which records are permanently purged from our databases unless retention is mandated by UAE statutory accounting or legal requirements.

9. Right to Lodge a Complaint with a Supervisory Authority

If you reside within the European Union and believe that our processing of your personal information infringes upon the General Data Protection Regulation, you have the statutory right to lodge a formal complaint with a competent Data Protection Supervisory Authority. You may do so in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

However, we encourage you to first contact our internal compliance team at business@luxury.sohojuttar.com so that we may immediately investigate and resolve your concerns directly.

10. Modifications to this GDPR Compliance Document

We may periodically update this GDPR Policy to reflect operational developments, technical enhancements, or statutory revisions in European data privacy jurisprudence. Any updates will be published directly on this page with an updated administrative revision date. Your continued utilization of our luxury travel platform following any posted revisions confirms your review and acknowledgment of the modified terms.