Legal
Privacy policy
We respect your privacy. This policy explains, in plain language, what personal data we collect through bnr.group, why we collect it and how you can control it.
Who we are
This website (bnr.group) is operated by IPB LLC, a company registered in Sharjah, United Arab Emirates, on behalf of BNR Group, the company developing the Back to Nature Resort concept ("BNR", "we", "us"). We are responsible for the personal data collected through this website.
What this policy covers
This policy explains what personal data we collect when you visit bnr.group or contact us through it, why we use it, how long we keep it and what rights you have. It applies to this website only. Our resort website, backtonatureresort.com, and any third-party sites we link to have their own terms.
We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Where the EU or UK General Data Protection Regulation (GDPR) applies to you, we also respect the rights it gives you.
Personal data we collect
Information you give us. When you use the contact form or email us, we receive:
- your name and, if you provide it, your organisation;
- your email address and any phone number you include;
- the type of enquiry you select (for example partner, investor, guest or press);
- the content of your message and any details you choose to share.
Information collected automatically. Like most websites, our hosting provider records basic technical data when you visit, such as your IP address, browser type, device, the pages you request and the date and time. These server logs are used for security and to keep the site running.
We do not ask for, and ask you not to send, sensitive information such as health data, identity documents or financial account details through this website.
Why we use your data
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry and following up on it | Contact details, message | Your request and our legitimate interest in responding |
| Discussing partnerships, investment or future stays | Contact details, message, organisation | Steps taken at your request before a possible agreement |
| Keeping the website secure and working | Technical data, server logs | Our legitimate interest in a safe, reliable website |
| Meeting legal obligations | Any relevant data | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making or profiling. We will only send you news or updates about BNR if you have asked us to, and you can stop them at any time.
Cookies and third-party services
This website does not use advertising or analytics cookies, and it does not track you across other websites.
To display our typefaces, pages load fonts from Google Fonts. Your browser therefore connects to Google's servers, which receive your IP address. See Google's privacy policy for how Google handles this data.
If we add analytics or other cookies in future, we will update this policy and, where required, ask for your consent first.
Who we share data with
We share personal data only where needed for the purposes above:
- Service providers who host this website and our email (currently Hostinger for web hosting), acting on our instructions;
- BNR team members and advisers who need the information to respond to your enquiry, under a duty of confidentiality;
- Professional advisers such as lawyers and accountants, where necessary;
- Authorities where the law requires it.
Before sharing details of an investment or partnership enquiry with another party, we will ask for your permission.
International transfers
Our team and service providers work in several countries, so your data may be processed outside the United Arab Emirates or outside your own country. When this happens, we take reasonable steps to make sure your data stays protected, for example by working with reputable providers that apply appropriate security and contractual safeguards.
How long we keep your data
- Enquiries and correspondence: up to 24 months after our last contact, unless an ongoing relationship or agreement requires us to keep it longer.
- Server logs: for the period set by our hosting provider, normally a few weeks.
- Records we must keep by law: for the period the law requires.
After that, we delete or anonymise the data.
Your rights
Depending on the law that applies to you, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- restrict or object to how we use it;
- transfer your data to you or another organisation in a usable format;
- withdraw consent you have given, at any time.
Send your request to office@bnr.group. We may ask you to confirm your identity and will reply within 30 days. You may also complain to the data protection authority in your country. In the UAE, this is the UAE Data Office.
Security
We use reasonable technical and organisational measures to protect your data, including an encrypted connection (HTTPS) for this website and access controls on our email and systems. No method of sending data over the internet is completely secure, so please do not send confidential documents through the contact form.
Children
This website is intended for adults. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We may update this policy as BNR and this website develop. The date at the top shows when it was last changed. Significant changes will be shown clearly on this page.
Contact
For any question about this policy or your personal data, please contact us: