1. INTRODUCTION
This Privacy Policy ("Policy") explains how Hospitality Mystery Audit Professionals ("HMAP," "we," "our," or "us") collects, uses, stores, shares, and protects personal information relating to individuals who visit our website, communicate with us, engage our services, or otherwise interact with our business.
This Policy is intended to provide transparency about our personal information practices and the measures we take to protect the information entrusted to us.
2. PURPOSE
This Policy covers the processing of personal information by HMAP in connection with:
- Provision of hospitality mystery audit, evaluation, inspection, consulting, training, and related professional services
- Engagement and management of auditors, evaluators, consultants, and independent contractors
- Management of client relationships, enquiries, and project assignments
- Communication with clients, prospective clients, business partners, service providers, and other stakeholders
- Administration of payments, invoicing, and other business transactions
- Operation, security, and improvement of our website, services, and business activities
3. DEFINITION OF PERSONAL INFORMATION
For the purposes of this Policy, "Personal Information" or "Personal Data" means information that identifies, relates to, or can reasonably be associated with an identifiable individual.
Depending on the nature of the interaction with HMAP, this may include:
- Name, address, telephone number, and email address
- Company, job title, and other professional or business contact information
- Nationality or other demographic information where legitimately required
- Financial and billing information
- Contractual or engagement-related information
- Audit, evaluation, survey, or service-related information associated with an identifiable individual
- Technical information such as IP address, browser type, device information, and website usage data
- Other information voluntarily provided when communicating with or engaging HMAP
Where sensitive personal information is collected, HMAP will handle such information with appropriate safeguards and in accordance with applicable data protection requirements.
4. CATEGORIES OF DATA SUBJECTS
HMAP may process personal information relating to individuals who interact with our business and services, including:
- Clients and prospective clients
- Hotel and hospitality industry representatives
- Auditors, mystery evaluators, consultants, and independent contractors
- Employees and authorized business representatives
- Suppliers, service providers, and business partners
- Website visitors and individuals who submit enquiries or communicate with us
- Other individuals whose personal information may reasonably be processed in connection with the provision of our services
5. INFORMATION WE COLLECT
Depending on how you interact with HMAP, we may collect and process the following categories of information:
- Identity and contact information: such as name, email address, telephone number, company, job title, and business contact details
- Contractual and engagement information: such as information relating to service agreements, project assignments, auditor or contractor engagements, and related communications
- Transaction and billing information: such as payment, invoicing, and other financial or transaction-related details
- Audit and evaluation information: such as audit reports, evaluation results, survey responses, observations, and service-related information where these contain or are associated with personal information
- Communication information: such as correspondence, enquiries, feedback, and other communications with HMAP
- Technical and website information: such as IP address, browser type, device information, website usage data, and similar technical information collected through our website or related technologies
Where appropriate, HMAP will indicate whether particular information is required or optional. If required information is not provided, HMAP may be unable to provide certain services or complete a requested transaction or engagement.
6. PURPOSE OF DATA COLLECTION AND USE
HMAP collects and processes personal information for legitimate business and lawful purposes, which may include:
- Providing hospitality mystery audit, evaluation, inspection, consulting, training, and related professional services
- Managing client relationships, enquiries, service requests, and project assignments
- Recruiting, engaging, managing, and compensating auditors, evaluators, consultants, and independent contractors
- Administering contracts and other business relationships
- Processing payments and generating invoices
- Communicating reports, service updates, administrative information, or other relevant notices
- Maintaining and improving our website, operations, services, and service quality
- Protecting the security and integrity of our systems, services, and business
- Preventing fraud, misuse, or unauthorized activity
- Meeting contractual, regulatory, and legal requirements
HMAP does not sell or rent personal information in exchange for monetary consideration.
7. LAWFUL PROCESSING OF PERSONAL INFORMATION
HMAP processes personal information only where there is an appropriate and lawful reason to do so.
Depending on the circumstances and applicable data protection requirements, this may include processing necessary to provide or administer our services, manage contractual or business relationships, comply with legal or regulatory obligations, protect legitimate business interests, or where appropriate consent has been provided.
Where consent is required and relied upon, individuals may withdraw their consent through the contact details provided in this Policy, subject to applicable law.
8. DATA SHARING AND TRANSFER
HMAP may share personal information where reasonably necessary for legitimate business purposes, the provision of our services, or compliance with applicable legal requirements.
Personal information may be shared with:
- Authorized HMAP personnel, auditors, evaluators, consultants, and contractors who require access for legitimate business purposes
- Service providers that support our business operations, including technology, hosting, communications, analytics, payment, and professional service providers
- Clients or business partners where sharing is necessary for the delivery or administration of agreed services
- Government authorities, regulators, courts, or other parties where disclosure is required or permitted by applicable law
- Other parties where appropriate authorization or consent has been provided, where required
Where personal information is transferred across jurisdictions, HMAP will take appropriate measures to protect the information in accordance with applicable data protection requirements.
HMAP expects parties handling personal information on its behalf to maintain appropriate confidentiality and security safeguards.
9. DATA RETENTION
HMAP retains personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable contractual, legal, regulatory, accounting, operational, or dispute-resolution requirements.
Retention periods may vary depending on the nature of the information, the purpose for which it is processed, and applicable legal or contractual requirements.
When personal information is no longer required, HMAP will take reasonable steps to securely delete, destroy, or anonymize it, as appropriate and subject to applicable requirements.
10. DATA SECURITY
HMAP takes reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
Depending on the nature of the information and the systems involved, these measures may include:
- Secure storage and appropriate access restrictions
- Appropriate safeguards for electronic transmission of information
- Access controls based on legitimate business requirements
- Confidentiality obligations for individuals authorized to handle personal information
- Security monitoring, reviews, and updates, where appropriate
- Procedures for responding to suspected personal information or security incidents
Access to personal information is limited to authorized individuals and service providers who require such access for legitimate business purposes.
While HMAP takes reasonable measures to protect personal information, no method of electronic transmission, storage, or information security can guarantee absolute security.
11. USE OF COOKIES AND TRACKING
The HMAP website may use cookies and similar technologies to support website functionality, understand how visitors interact with the website, improve website performance, and enhance the user experience.
Depending on the technologies used, cookies may include those necessary for website functionality as well as analytics or preference-related technologies.
Where required by applicable law, HMAP will obtain appropriate consent before using non-essential cookies or similar technologies.
Visitors may manage or disable cookies through their browser settings or any cookie controls made available on the HMAP website. Disabling certain cookies may affect the functionality or performance of some website features.
12. THIRD-PARTY LINKS AND SERVICES
The HMAP website may contain links to websites, platforms, or services operated by third parties.
HMAP does not control the privacy or information-handling practices of third-party websites or services and is not responsible for their independent privacy practices.
Visitors are encouraged to review the applicable privacy policies and terms of those third parties before providing personal information or using their services.
13. CHILDREN'S PRIVACY
HMAP's services are intended primarily for businesses and professionals and are not designed or directed toward children.
HMAP does not knowingly seek to collect personal information from children through its website or services.
If HMAP becomes aware that personal information relating to a child has been collected in circumstances where such processing is not permitted, HMAP will take appropriate steps to delete or otherwise handle the information in accordance with applicable law.
14. UPDATES TO THIS POLICY
HMAP may update this Privacy Policy periodically to reflect changes in our business practices, services, technologies, or applicable legal and regulatory requirements.
The latest version of this Privacy Policy will be made available on the HMAP website, and the "Last Updated" date will be revised accordingly.
15. CONTACT US
For questions, concerns, requests, or complaints regarding this Privacy Policy or HMAP's handling of personal information, please contact:
Hospitality Mystery Audit Professionals
Email: info@globalhospitalitymap.com
HMAP will review privacy-related enquiries and requests and respond in accordance with applicable data protection requirements.