Privacy Policy
Last Updated: September 2026
ZOYA Health & Wellbeing Resort (“ZOYA”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, share and protect your information when you visit www.zoyawellbeing.com, contact us, submit an online form, make a booking, subscribe to our communications or participate in one of our health and wellbeing programs.
This policy applies to our website and online services. Additional privacy notices or consent forms may apply when you receive medical, clinical or wellness services at ZOYA.
1. Information We Collect
Depending on how you interact with ZOYA, we may collect the following information:
Contact and Identification Information
- Full name
- Email address
- Telephone or mobile number
- Residential address, city and country
- Nationality, date of birth and gender where required
- Passport, Emirates ID or other identification details when required for bookings, check-in or legal purposes
Booking and Stay Information
- Arrival and departure dates
- Room and accommodation preferences
- Selected health, medical or wellbeing program
- Number of guests and accompanying guest information
- Dietary preferences and food allergies
- Special requests, accessibility requirements and transportation information
- Booking history and communications relating to your stay
Payment and Transaction Information
- Payment method and transaction details
- Bank transfer confirmation and uploaded payment receipts
- Billing and invoice information
- Refund or credit information where applicable
ZOYA will never ask you to provide banking passwords, PIN numbers or one-time passwords through the website.
Health and Medical Information
When you enquire about or participate in a medical or wellbeing program, we may collect information including:
- Medical history and existing health conditions
- Medication and treatment information
- Allergies, intolerances and dietary requirements
- Medical reports, laboratory results and assessments
- Lifestyle, fitness, nutrition, sleep and wellbeing information
- Information provided during doctor consultations or clinical assessments
- Treatment preferences, contraindications and program progress
Health and medical information is considered sensitive personal data and will only be processed when necessary, with your explicit consent or where otherwise permitted or required by applicable law.
Communications and Marketing Information
- Emails, telephone calls, WhatsApp messages and other communications with our team
- Questions, feedback, complaints and requests
- Newsletter subscriptions and marketing preferences
- Responses to surveys, offers or promotional campaigns
Website and Technical Information
- Internet Protocol (IP) address
- Browser type, device type and operating system
- Pages viewed, links selected and time spent on the website
- Referral source and approximate location
- Cookie preferences and website interaction data
Photography, Video and Testimonials
We may collect photographs, video recordings, written reviews or guest testimonials when you voluntarily provide them or give us permission to create and use them. We will request appropriate consent before using identifiable guest content for marketing or promotional purposes.
Recruitment Information
If you apply for employment at ZOYA, we may collect your CV, contact details, employment history, qualifications, references and other information provided with your application.
2. How We Collect Your Information
We may collect personal information:
- Directly from you when you complete a form, make a booking or contact us
- During your stay, consultation, assessment or participation in a program
- Through email, telephone, WhatsApp or social media communications
- Through travel agents, booking partners or representatives acting on your behalf
- Automatically through cookies and similar website technologies
- From service providers or business partners where permitted by law
If you provide information about another person, you confirm that you are authorised to provide that information and that the person has been informed about this Privacy Policy.
3. How We Use Your Information
We may use personal information to:
- Respond to enquiries and provide requested information
- Create, manage and confirm bookings
- Arrange accommodation, transportation and guest services
- Assess your requirements and recommend an appropriate wellbeing program
- Provide personalised medical, wellness, fitness and nutrition services
- Identify allergies, contraindications or other relevant health considerations
- Process payments, bank transfers, receipts, invoices, refunds and credits
- Communicate important information about your booking, stay or program
- Provide customer support and manage feedback or complaints
- Meet legal, regulatory, healthcare, accounting and security requirements
- Protect guests, employees, systems and property
- Improve our website, services, programs and guest experience
- Send newsletters, offers and promotional communications where you have provided consent or where otherwise permitted by law
4. Legal Basis for Processing
Where applicable, we process personal information on one or more of the following bases:
- Your consent
- Performance of a booking, service agreement or other contract with you
- Compliance with legal or regulatory obligations
- Protection of your vital interests or the interests of another person
- Our legitimate business interests, provided those interests do not override your privacy rights
- Provision and management of healthcare or medical wellness services where permitted by applicable law
You may withdraw your consent at any time. Withdrawal will not affect processing that was lawfully completed before consent was withdrawn.
5. Health and Sensitive Personal Data
ZOYA applies additional care and confidentiality when processing health, medical and other sensitive personal information.
This information may be accessed only by authorised personnel who require it to provide or support your selected services, including doctors, nurses, therapists, nutrition professionals, fitness specialists and authorised program coordinators.
Medical and wellness services remain subject to professional assessment, doctor approval and applicable healthcare requirements.
6. Sharing Your Information
We may share personal information only when reasonably necessary with:
- Authorised ZOYA employees, doctors, therapists and wellness professionals
- Laboratories, healthcare providers and specialist medical partners involved in your care
- Hotel management, reservation and guest-service providers
- Website hosting, form, cloud storage, email and IT service providers
- Payment, banking, accounting and financial service providers
- Transportation, travel and booking partners where requested
- Marketing and analytics providers, subject to your preferences and applicable law
- Professional advisers, auditors and insurers
- Government authorities, regulators, courts or law-enforcement agencies where legally required
Our service providers are expected to process personal information only for authorised purposes and to apply appropriate confidentiality and security measures.
We do not sell your personal or medical information.
7. International Data Transfers
Some service providers may process or store information outside the United Arab Emirates. When personal information is transferred internationally, we take reasonable steps to ensure that appropriate legal, contractual and security protections are in place, in accordance with applicable data-protection requirements.
8. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to provide our services and fulfil the purposes described in this policy.
Retention periods may differ depending on the type of information and applicable legal, medical, accounting, regulatory or contractual requirements.
- Booking and transaction records are retained as required for legal, accounting and operational purposes.
- Medical and health records are retained in accordance with applicable healthcare and regulatory requirements.
- General enquiries may be retained for a reasonable period to manage follow-up communications.
- Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer required.
- Recruitment information may be retained for a reasonable period for current or future employment opportunities, where permitted.
When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our procedures.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies to operate correctly, remember preferences, understand website performance and improve the visitor experience.
Cookies may include:
- Essential Cookies: Required for website security and basic functionality.
- Preference Cookies: Remember language and website preferences.
- Analytics Cookies: Help us understand how visitors use the website.
- Marketing Cookies: May be used to measure campaigns or deliver relevant advertising where enabled.
Where required, non-essential cookies will be used only after you have provided consent through our cookie notice. You can change your preferences through the cookie settings or your browser settings.
10. Data Security
We use reasonable administrative, organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, confidentiality requirements, secure systems, staff training, data minimisation and appropriate safeguards for service providers.
No internet transmission or electronic storage system can be guaranteed to be completely secure. Please avoid sending unnecessary sensitive or financial information through unsecured communication channels.
11. Your Privacy Rights
Subject to applicable law and relevant exceptions, you may have the right to:
- Request information about how we process your personal data
- Request access to or a copy of your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your information where legally permitted
- Request restriction or suspension of certain processing activities
- Request transfer of your information where applicable
- Withdraw consent where processing is based on consent
- Object to direct-marketing communications
- Object to certain automated processing decisions where applicable
- Submit a complaint to the relevant data-protection authority
To exercise a privacy right, please contact us using the details below. We may need to verify your identity before completing your request.
Certain information may need to be retained where required by healthcare, accounting, legal or regulatory obligations.
12. Marketing Communications
We may send news, wellbeing information and promotional offers when you have consented or where otherwise permitted by law.
You can unsubscribe at any time by selecting the unsubscribe option in an email or contacting us directly. You may still receive essential communications relating to an existing booking, payment, stay or requested service.
13. Third-Party Websites and Services
Our website may contain links to third-party websites, booking platforms, social-media services, Google Drive videos, maps or other external services.
These third parties operate under their own privacy policies. ZOYA is not responsible for the privacy or security practices of websites and services that we do not control.
14. Adults-Only Services
ZOYA is an adults-only resort and its accommodation and residential wellness programs are intended for guests aged 18 years and above.
We do not knowingly collect personal information through the website from anyone under the age of 18 without appropriate authorisation. If you believe that a minor has provided personal information to us, please contact us so that we can review and take appropriate action.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, technology, legal requirements or business practices.
The updated version will be published on this page with a revised “Last Updated” date. We encourage you to review this page periodically.
16. Contact Us
If you have questions about this Privacy Policy, wish to exercise a privacy right or have a concern about how your information is handled, please contact:
ZOYA Health & Wellbeing Resort
Al Zorah Marina, Plot 2
Ajman, United Arab Emirates
Telephone: +971 6 557 6555
Email: info@zoyawellbeing.com
Website: www.zoyawellbeing.com
العربية