Last revised 6 August 2026
For the site owner
Replace every bracketed item with your registered details, confirm which hosting and email providers you actually use, and have this reviewed by a qualified lawyer in your jurisdiction before launch. Then delete this box.
1. Who is responsible
[Registered company name Ltd] is the controller for personal data processed in connection with the houses, this website, our membership records and our enquiries. Registered office: [registered address], [jurisdiction]. Company number [00000000]. Contact: privacy@prestigehotel.club.
2. What we hold
- Enquiry data — your name, contact details, the nature of your enquiry and anything you choose to write to us.
- Membership records — identity, contact details, nomination history, subscription and billing records.
- The file — preferences recorded during a stay: how a room is set, what is drunk, dietary requirements, and similar. Kept because it is the only way to serve somebody properly on a second visit.
- Stay and reservation records — dates, house, party, and what the house was asked to arrange.
- Payment data — tokenised by our payment provider. We do not hold full card numbers.
- Technical data — IP address, browser and device information when you use this website.
3. Special category data
Dietary requirements and access needs may reveal information about health or belief. We hold these only because you told us, only to serve you, and only with your consent, which you can withdraw at any time by asking your house manager. Medical programme records at Engadin are held by the clinic under its own controllership, not by us.
4. Why, and on what basis
- To answer your enquiry — legitimate interests, being a reply to something you started.
- To administer membership and stays — performance of a contract with you.
- To keep a preference file — your consent, withdrawable at any time.
- To meet legal duties, including guest registration, tax and anti-money-laundering — legal obligation.
- To keep the houses and this website secure — legitimate interests.
5. Who sees it
Our own staff at the house or houses concerned, on a need-to-know basis. Beyond that: our payment provider, our IT and hosting suppliers, and our professional advisers, all under written data processing terms. Where the law compels disclosure to an authority, we comply and, where we are permitted to, we tell you.
We do not sell, rent, licence or trade personal data, and we do not disclose the identity of a member or guest to anybody — including to other members.
6. How long
- Enquiries that do not proceed: 12 months.
- Preference files: for the duration of membership, and deleted within one working day of a request.
- Membership, stay and financial records: six years after membership ends, for tax and legal purposes.
- Website technical logs: 30 to 90 days.
7. Transfers
Our houses sit in five countries, so a record may move between them where you have stayed or intend to. Transfers outside the European Economic Area are made under an appropriate safeguard, usually the European Commission's standard contractual clauses.
8. Your rights
You may ask for access to what we hold, correction of anything inaccurate, erasure where no legal duty requires us to keep it, restriction of or objection to processing, and a portable copy of what you gave us. Write to privacy@prestigehotel.club; we answer within one calendar month. You may also complain to the supervisory authority in your country of residence.
9. Security
Encrypted storage, access controls limited by house and by role, annual review, and staff bound by confidentiality terms that survive the end of employment.