Privacy Notice

Last updated: July 2025

 

Types of Personal Data We Collect
Methods of Personal Data Collection 
How We Use Personal Data 
Sharing and Disclosure of Personal Data 
Your Options for Managing Our Use and Disclosure of Your Personal Data 
Other Important Information 
Contacting Us 
Additional Privacy Provisions Applicable to Residence of Certain Countries

 

Aman Group, which includes Aman Group S.a.r.l as well as its affiliates/subsidiaries (i.e., all companies whose shares are held or beneficially owned, in whole or in part, whether directly or indirectly, by Moto Investco Limited) (hereafter collectively, “Aman Group”, “we”, or “us”), values you as our guest and recognises that privacy is important to you. We want you to be familiar with how we collect, use and disclose your Personal Data. 

This Privacy Notice describes the privacy practices of Aman Group for Personal Data that we collect in connection to:  

  • The websites from which you are accessing this Privacy Notice, including https://www.aman.com/ and other websites owned by Aman Group (collectively, the “Websites”), also including collection of Personal Data through contact forms pertaining to: 
  • Your visit or stay as a guest at one of Aman resorts and hotels and use our various hospitality services including Aman Spa & Wellness Centres, Restaurants, Boutiques or other offline interactions you have with us
  • Our social media pages through which you are accessing this Privacy Notice (collectively, our “Social Media Pages”);
  • The email messages and messages via WhatsApp that we send you that link to this Privacy Notice and through your other online communications with us, including your pre-arrival preferences;
  • Your online purchases on shop.aman.com
  • Your membership to Aman Club;  
  • Your purchase of Aman properties;
  • Your marketing preferences;
  • Your use of software applications (including automated tools and chat functionalities) we provide for use;

The Policy Notice also informs about the personal data we receive from 3rd parties (e.g. travel agents) and other sources (e.g. public databases).

When we request your consent for specific data processing activities, we refer either to this Privacy Notice or to separate notices for these activities, providing tailored information to help you understand how your data is used in different contexts.

Collectively, we refer to the Website, Apps, and our Social Media Pages, as the “Online Services” and, together with offline business interactions, the “Services.” 

TYPES OF PERSONAL DATA WE COLLECT

“Personal Data” are data that identify you as an individual or relate to an identifiable individual. We collect the following Personal Data: 

  • Your identifying and contact information (e.g., salutation, full name, telephone number, date of birth, email address, postal address, social media account ID, profile photo and other data made publicly available, or data made available by linking your social media or other similar identifiers);
  • Your financial information (e.g., credit and debit card data);
  • Your passport, visa or other official identification;
  • Information related to your travel profile (e.g., arrival and departure time, nationality, accommodation and travel preferences, travel itinerary, tour group, language preference, travel agent/company);
  • Your resort stays or interactions (including via chat functionalities), and purchases of goods and services during your resort visits, (e.g., restaurant visits, preferred room types, child care services, spa services, concierge requests);
  • Your Aman Club membership or invitations to visit Aman Club as a guest. The membership information consists of contact information, financial information, member photographs, images and audio data via security camera, activity and dietary preferences);
  • Your inquiries about resort stays, private travel (Aman private jet and yacht) or Club membership, residential sales or responses in relation to our offers related to residential sales;
  • Your purchases and deliveries of gift cards and personal messages in relation to gift cards sold through Aman’s website and that can be used to book resort stays;
  • Your IP address (we may also derive your approximate location from your IP address) and system data when you use our mobile devices to access the Online Services, we collect certain data through your browser or automatically through your device, such as your computer type, screen resolution, operating system name and version, device manufacturer and model, language, internet browser type and version.

We may also collect the following information (either based on our legitimate interests or with your consent to the extent required by applicable law):

  • Personal data about family members and companions (e.g., names and ages of children) to help us make your stay with us as comfortable as possible (e.g., we can proactively plan for additional accommodations such as a crib or extra bed for children accompanying you);  
  • Important dates, such as birthdays, anniversaries and special occasions to make the stay with us more enjoyable and allow us to provide you with a birthday or anniversary gift;
  • Guest preferences to make more enjoyable your stay and experiences with us, such as preferences relating to rooms and amenities and any likes and dislikes about our services that you may tell us about so that we can improve our services, your interests and passions (e.g. what sports you like to play) and special health accommodations (e.g., dietary and health restrictions, mobility requirements), information related to the provision of childcare services (including e.g. allergies or medical information of children) or information related to your general health and physical characteristics, and your skincare and wellness concerns (e.g., skin type, hair type, skin sensitivity, contraindications, beauty concerns, preference for nourishing or purifying skincare products), and preferences for marketing communications;
  • Your images, video and audio data via security cameras (CCTV) located in public areas of our properties, such as hallways and lobbies;
  • Information collected through guest surveys relating to your satisfaction or guest complaints or emergencies;
  • Information about visits to our properties by journalists, PR agency staff, consultants and business partners.

When you use the Online Services, we also collect data typically collected through websites, such as browser and device information, application usage data, information collected through cookies, pixel tags and other similar technologies, and IP addresses. For more detail please see our  Cookie Policy

METHODS OF PERSONAL DATA COLLECTION

We and our service providers collect Personal Data in a variety of ways, including: 

Source

Details

Online Services

Personal Data collected through browsing, reservations, purchases via Websites and Apps, social media engagement, and newsletter sign-ups.

Visits to Properties

Data gathered when guests use on-property services through the relevant forms, including restaurants, concierge, spa & wellness centres, fitness facilities, childcare facilities, and local activities.

Customer Support

Personal Data obtained through phone reservations, email, fax, WhatsApp, and customer service interactions ("Shared Services"), which may be recorded for quality assurance.

Aman Group Companies

Personal Data disclosed to Aman Group affiliates (Aman Essentials, Aman Interiors) for personalisation, communication, Aman Club support, and business operations.

Resort Owners

Data collected from owners of Aman Group branded properties under management.

Aman Partners

Information from independent partners providing services, such as travel booking platforms and marketing firms. Advertising data may be combined with information collected through Aman Services. Combined data follows Privacy Notice policies.

Other Sources

Data from publicly available records, joint marketing partners, database providers, or individuals sending Aman products as gifts. Combined data follows Privacy Notice policies.

Internet-Connected Devices

Data gathered when guests and other users connect devices to resort/hotel internet or use smart home assistants for accommodation customisation.

 

HOW WE USE PERSONAL DATA

We and our service providers use Personal Data for the following purposes:  

 

Purpose

Description

Legal Basis

Processing bookings, reservations, and managing memberships

Handling bookings, payments, reservations, inquiries, and Club membership benefits.

Contractual obligation, legitimate interests, legal compliance

On-Site Recognition

Facilitating guest check-in, personalised services, payment processing, and handling requests.

Contractual obligation, legitimate interests, consent, legal compliance

Marketing and communications

Sending newsletters, surveys, and marketing emails; managing customer databases and social sharing.

Consent, legitimate interests

Anti-money laundering & sanctions screening

Conducting background checks for sales of Aman products and residences.

Legal compliance, consent

Responding to public authorities

Providing information to law enforcement and authorities for security and legal requirements.

Legal compliance

Protecting rights and interests

Safeguarding guests, visitors, and employees in case of vital interests.

Vital interests

On-site security and incident documentation

Ensuring safety, documenting incidents, and protecting individuals.

Contractual obligation, legal compliance

Providing personalised services

Analysing preferences, eligibility for services, honouring health-related and dietary restrictions in the context of our scope of services (e.g. Spa, Childcare services etc).

Legitimate interests, (explicit) consent

Business operations

Fraud prevention, audits, data analysis, product and service improvements, and promotional campaign effectiveness, investigation of complaints

Contractual obligation, legal compliance, legitimate interests

Aggregating data

Combining sources to create user segments for relevant advertising.

Legitimate interests, consent

Anonymising personal data

Removing identifiable data to create anonymised datasets for various purposes.

Legitimate interests

 

SHARING AND DISCLOSURE OF PERSONAL DATA

We disclose Personal Data to:  

  • Aman affiliates (list  here) for purposes described in this Privacy Notice, such as service provision, personalisation, and communication.  
  • Owners of Aman Group branded properties to comply with their legal obligations. Owners have limited rights to use Personal Data.  
  • On-Property service providers offering goods, services, and experiences that enhance your stay. For example, sharing your Personal Data with Aman Partners enables personalised services across our spa & wellness centres, health and fitness facilities, restaurants and bars, concierge and other external providers. It also allows us to offer seamless booking for travel-related services, including airline tickets, rental cars, tours, and vacation packages.  
  • Digital service providers who support our operation, such as Aman Club digital card management, website hosting, website booking facilitation, data quality, data analysis, payment processing, customer service, fraud prevention, information technology and related infrastructure provision, customer service or related benefits (including special promotions), email delivery, auditing, and more.  
  • Advertising partners to facilitate marketing communications, promotions, and advertisements in alignment with your preferences.

Other Uses and Disclosures

We may use and disclose your Personal Data when necessary or appropriate, including with your consent or when legally necessary:

  • To comply with applicable law and regulations which may include jurisdictions outside your country of residence.  
  • To cooperate with law enforcement, public and government authorities to fulfil legal or security related requests, including foreign authorities.
  • For other legal enforcement reasons, such as protecting our terms and conditions, individual rights, safety, or property, as well as those of affiliates, users, or others.
  • Business transactions, including reorganisations, mergers, sales, joint ventures, assignments, transfers, or other asset-related dispositions (including those linked to bankruptcy proceedings).  

Your Personal Data and Social Media

By using the Services, you may disclose Personal Data:

  • On social media platforms, chat services, or other interactive channels (including our Social Media Pages). Please note that any information shared on these platforms may become public.  
  • Through your social media sharing activity such as linking our Services account to a social media profiles. This may allow information sharing with friends, other users, and your social media provider. By engaging in social media sharing, you authorise use to facilitate this process, understanding that the provider’s privacy policy governs data usage.  

Important Information

We collect Personal Data to provide the Services to you. If you do not provide the information requested, we may not be able to provide certain Services. If you disclose any Personal Data relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Notice.

This Privacy Notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which the Services link, or payment providers. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.  

We use third-party advertising companies (such as Meta, Google, Yahoo, Baidu, RED, Weibo, Line, Tripadvisor, Trivago, Yandex, The Hotels Network) to display online advertisements regarding goods and services that may be of interest to you when you access and use the Services and other websites or online services. For more information on how these companies serve advertisements please see our  Cookie Policy.

In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organisations, such as Meta, Apple, Google, Microsoft, RED, Weibo. Line, Tripadvisor, Trivago, Yandex, The Hotels Network or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any Personal Data you disclose to other organisations through or in connection with our Social Media Pages.

You may receive advertisements based on information relating to your access to and use of the Services and other websites or online services on any of your devices, as well as on information received from third parties.  These companies place or recognise a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognise you across the devices you use, such as a mobile phone and a laptop.  If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Notice, please visit http://optout.aboutads.info and http://networkadvertising.org/managing/opt_out.asp.  

YOUR OPTIONS FOR MANAGING OUR USE AND DISCLOSURE OF YOUR PERSONAL DATA

You have control over how we use and share your Personal Data for marketing purposes. You may opt out from:  

  • Receiving marketing-related emails. To stop receiving these emails, you can either email  [email protected] or use the unsubscribe link at the bottom of each marketing email.
  • Sharing your Personal Data with affiliates for direct marketing.  If you prefer that we no longer share your data with our affiliates for marketing purposes, you can opt out by emailing  [email protected] or using the unsubscribe link at the bottom of each marketing email.

We will process your request as soon as reasonably practicable. Please note that opting out of marketing emails will not affect your receipt of important administrative messages, which we may still send.

OTHER IMPORTANT INFORMATION

Retention

We retain Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.  

The criteria used to determine our retention periods include:  

  • The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);  
  • Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or  
  • Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).  

Security

We seek to use reasonable organisational, technical and administrative measures to protect Personal Data within our organisation. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section, below.

Sensitive Data

We only collect Sensitive Data which may be necessary to perform expected services or as required by law. Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services or otherwise to us.

Use of Services by Minors

The Services are not directed to individuals under the age of eighteen (18), and we do not knowingly collect Personal Data directly from individuals under 18.  

International Transfers

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.  

Some countries are recognised by the European Commission and UK government, respectively, as providing an adequate level of data protection according to EEA/UK standards. For transfers from the EEA and the UK to countries not considered adequate by the European Commission and the UK government, respectively, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission and UK government to protect your Personal Data. You may obtain a copy of the list of countries with adequate level of protection and the standard contractual clauses by contacting us at [email protected].

CONTACTING US

Aman Group S.a.r.l and its affiliates in Aman Group are responsible (data controllers) for the Personal Data we hold about you. Aman Group is also an independent controller in relation to our resort owners, who have a limited right to use the Personal Data we collect. As the hotel you are booked to stay in may not be owned by Aman Group, we disclose Data to owners of Aman Group branded properties for the purposes described in this Privacy Notice. Owners have a limited right to use certain Personal Data for their own purposes and therefore qualify as independent data controllers in order to comply with their own legal obligations (including maintaining books & records and other compliance obligation).  

Aman Group S.a.r.l is the controller of marketing database and conducts all marketing activities relating to Aman Resorts, Aman Club and Aman Residences.

Aman Group’s address is Grabenstrasse 17, 6340 Baar, Switzerland.  

Aman’s European Representative is AMANRESORTS MANAGEMENT NV, a company established in the Netherlands, with offices located in Netherlands, address Herikerbergweg 88, 1101CM Amsterdam, registration number 803529363  

You may always contact us at  [email protected] or our EU Representative at [email protected]  with your questions or concerns regarding this Privacy notice or in general about our processing of your Personal Data.

For Turkish residents, our Data Representative in Turkey is Gamze Utar and can be contacted at [email protected].

Updates to This Privacy Notice

The “LAST UPDATED” legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. Any changes will become effective when we post the revised Privacy Notice on our Website.  

ADDITIONAL PRIVACY PROVISIONS APPLICABLE TO PROCESSING OF PERSONAL INFORMATION OF RESIDENTS OF CERTAIN COUNTRIES 

Information About Your Rights in the EU/EEA/UK and Turkey

If you would like to request access, correction, update, suppression, restriction, or deletion of your Personal Data, object to its processing, or opt out, you may contact us in accordance with “Contact Us” section above. Additionally, if you wish to receive a copy of your Personal Data for transfer to another company – where permitted by applicable law – you may do so through the same process. We will respond to your request in accordance with applicable law.  

When submitting your request, please specify the Personal Data you wish to correct or suppress from our database. For your data protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request.  We will make every effort to comply with your request within 1 month.  

Please note that certain data may need to be retained for record keeping purposes or to complete pending transactions.  

Where provided by applicable law, you may also lodge a complaint with the UK data protection authority here or with an EU/EEA/Turkey data protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of the EU/EEA data protection authorities is available here.

Information related to Residents of the USA

This section supplements the other parts of our Privacy Notice and provides information for residents of the United States.  

In permitted by applicable law, you can exercise the following individual rights: right to know of we process your personal information, right to request we delete your personal information, right to correct inaccurate information, right to opt out for sales and sharing of personal information and/or targeted advertising, including the “sharing” of your personal data for cross-context behaviour advertising, right to limit use and disclosure of sensitive personal information.

As permitted by applicable law, these rights may allow you to authorise agents to submit a request on your behalf.

As permitted by applicable law, you may submit an appeal regarding our response to a request related to the rights above within a reasonable period of time you have received a refusal by contacting us at [email protected].

To exercise your rights please contact us in accordance with the “Contacting Us” section above.

You have the right to be free from unlawful discrimination for exercising your rights under applicable law.

Information related to Residents of People’s Republic of China

This section supplements the other parts of our Privacy Notice and provides information for residents of People’s Republic of China.

You can find information on how we collect, use and share your personal data in Aman Group’s Global Privacy Notice whose terms apply to PRC’s residents.

Aman Group S.a.r.l is a data controller for the People Republic of China. If you have queries related to your personal data or about this Privacy Notice, please contact us at [email protected].

Sensitive personal information

We may collect and use for the purposes set out in this Privacy Notice the following types of personal information defined as “sensitive information” under the PRC:

  • Payment card information
  • Stay records
  • Your precise location
  • Web browsing history

Consent

We will obtain your consent to collect, use, share, transfer, disclose or otherwise process your personal information if and to the extent required by law.

Data Sharing  

Aman Group entities worldwide (“Intra-Group Sharing”)  

As a global resort group, we consider limited data sharing with other properties in our group and select third party partners essential to delivering excellent service and amenities to our guests.

To provide a seamless, high-quality experience across our worldwide properties, we may share your personal data, collected through this form, with Moto Investco Limited and its subsidiaries (Aman Group), and other Aman Group resorts outside China. We will only do so if you have separately consented for this intra-group sharing to Moto Investco and when there is necessity to do so.

If you want to exercise your rights under the PIPL in relation to these Aman Group entities outside China in relation to: (i) access to your personal information and receipt of a copy of your data, (ii) rectification, (iii) erasure, (iv) restriction of processing, (v) data portability, (vi) objection to the processing, including objection to automated decision making and profiling, please contact us by sending an email to our data protection officer at [email protected].

We shall respond to your request within 30 working days.

Sharing your personal information with trusted vendors

In order for us to provide certain services to you during your resort stay, we may need to share some of your personal information with trusted vendors in and outside China. For example, we work with vendors to process payments, facilitate room service and restaurant bookings, arrange transportation, and provide various other amenities. We can provide a list of vendors upon request on [email protected].

Sharing your data allows these partners to identify you as a guest, fulfil your service requests properly, and tailor their offerings to your preferences and needs during your visit. It enables us to create a seamless, personalised guest experience across all service points throughout the resort. Vendor access to your personal information is strictly limited to only what is required for them to deliver their contracted services.  

Disclosing to comply with law or court decisions

Finally, we may disclose information to public authorities (for example, the police), if required by law or a court decision of any competent court or tribunal.  

International Data Transfers

To provide you with services related to hotel book reservation and hotel stay, we may transfer your personal data to our affiliates and partners outside the PRC.