Privacy Policy

Last updated: September 2026


At Zhiwaling Heritage, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website, make an enquiry, submit a form, or interact with our online services.

By using this website, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

This website is operated by Zhiwaling Heritage, located in Paro, Bhutan.

For the purposes of this Privacy Policy, references to “we”, “us” or “our” refer to [Hotel Name].

If you have any questions about how your personal information is handled, you can contact us at:

2. Information We Collect

We may collect personal information that you voluntarily provide when you interact with our website. This may include:

  • Your name and surname
  • Email address
  • Telephone or mobile number
  • Country of residence
  • Travel dates
  • Number of guests
  • Accommodation or experience preferences
  • Information included in an enquiry or message
  • Any other information you choose to provide to us

We may also automatically collect certain technical information when you visit our website, such as:

  • IP address
  • Browser and device type
  • Operating system
  • Pages visited and interactions with the website
  • Approximate geographic location
  • Referring website or source
  • Date and time of your visit

This information is generally collected through cookies, analytics tools and similar technologies.

3. How We Use Your Information

We may use the information we collect to:

  • Respond to enquiries and requests
  • Process or facilitate accommodation and experience bookings
  • Communicate with you regarding your enquiry, booking or stay
  • Provide information about our hotel, services, experiences and destination
  • Improve our website, services and guest experience
  • Understand how visitors use our website
  • Monitor website performance and security
  • Meet our legal, regulatory and operational obligations
  • Send marketing communications where you have given us permission to do so

We will only use your personal information for purposes that are relevant to our relationship with you and the operation of our business.

4. Enquiries and Booking Information

When you submit an enquiry or booking request through our website, the information you provide may be shared with the relevant members of our team or trusted service providers in order to respond to your request.

Where a third-party booking or reservation system is used, your information may also be processed by that provider. These providers may have their own privacy policies governing how they handle personal information.

We recommend reviewing the privacy information provided by any third-party booking platform before submitting personal information through it.

5. Cookies

Our website may use cookies and similar technologies to improve your browsing experience and understand how the website is being used.

Cookies are small text files stored on your device when you visit a website. They may help us to:

  • Ensure that the website functions correctly
  • Remember preferences and settings
  • Understand website traffic and visitor behaviour
  • Measure the performance of our website
  • Improve website functionality and content
  • Support relevant marketing and advertising activities, where applicable

Some cookies are essential for the operation of the website, while others are used for analytics, functionality or marketing purposes.

Where required, we will request your consent before placing non-essential cookies on your device. You can also manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how the website functions.

6. Analytics

We may use third-party analytics services, such as Google Analytics, to understand how visitors interact with our website.

These services may collect information such as your IP address, device information, browser type, pages visited and interactions with the website. This information is generally used in an aggregated or pseudonymised form to help us understand website performance and improve our services.

You can manage your cookie preferences through our cookie consent tools or your browser settings.

7. Third-Party Services

Our website may contain links, integrations, booking tools, maps, social media features, payment services or other functionality provided by third parties.

These third parties may collect and process information in accordance with their own privacy policies. We are not responsible for the privacy practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of any third-party services you use through our website.

8. Marketing Communications

If you choose to subscribe to our newsletter or otherwise provide consent to receive marketing communications, we may use your contact information to send you updates, offers, news and information about Zhiwaling Heritage and its experiences.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly.

We will not use your information for direct marketing purposes where you have opted out, except where permitted or required by applicable law.

9. Sharing Your Information

We do not sell or rent your personal information.

We may share your information with trusted third parties where reasonably necessary to operate our business and provide our services. These may include:

  • Booking and reservation providers
  • Website hosting and technology providers
  • Website analytics providers
  • Email and communication platforms
  • Payment providers
  • Professional advisers and service providers
  • Government, regulatory or law-enforcement authorities where legally required

Where we work with third-party service providers, we take reasonable steps to ensure that your information is handled appropriately and securely.

10. International Data Transfers

Some of our service providers may process or store personal information outside Bhutan or outside the country in which you are located.

Where information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place and that your information is handled in accordance with applicable privacy requirements.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no website, online service or method of transmitting information over the internet can be guaranteed to be completely secure. You provide information online at your own risk.

12. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, respond to enquiries, maintain business records, comply with legal obligations, resolve disputes and enforce our agreements.

The length of time we retain information will depend on the type of information and the reason it was collected.

13. Your Privacy Rights

Depending on the laws applicable to you, you may have rights relating to your personal information, including the right to:

  • Request access to the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Request deletion of your personal information where appropriate
  • Withdraw consent where processing is based on consent
  • Object to certain uses of your information
  • Opt out of marketing communications
  • Request information about how your personal information is being used

To exercise any applicable rights, please contact us using the details provided below. We may need to verify your identity before processing your request.

14. Children's Privacy

Our website is not intended to knowingly collect personal information directly from children without appropriate consent from a parent or legal guardian.

If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can review and, where appropriate, delete the information.

15. Links to Other Websites

Our website may contain links to external websites, including booking platforms, travel partners and social media platforms.

Once you leave our website, this Privacy Policy no longer applies to the information you provide to those external websites. We recommend reviewing the privacy policy of each website you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or privacy practices.

The updated version will be published on this page with a revised “Last updated” date.

17. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: