MGH Summer Club Privacy Notice

Last updated: 9 September 2026

1. Controller

The controller responsible for processing your personal data is M G H MARKETING MANAGEMENT L.L.C, Office 4D-76, Trade Center, Dubai, United Arab Emirates, Dubai, commercial licence no. 1001303 and commercial register no. 2452540.

For privacy-related questions or requests, please contact:
Email: marketing@mghglobe.com
Phone: +971 55 208 6759

2. Personal data we process

Depending on how you interact with MGH Summer Club, we may process:

• identification and contact details;
• membership start date, expiry date and status;
• Stripe customer, subscription, invoice and payment-status identifiers;
• booking-verification details;
• communications with our support team;
• marketing preferences;
• technical, device, log and cookie data.

MGH does not receive or store your full payment card number or security code. Payment card details are processed by Stripe in accordance with Stripe’s own privacy policy and terms.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases.

Contractual necessity. To process your enrolment, activate and administer your membership, verify your eligibility for member rates, manage renewals, cancellations and refunds, provide customer support and operate the Summer Club service.

Legal obligations. To maintain accounting, tax, consumer-protection and compliance records and to respond to lawful requests from public authorities.

Legitimate interests. To prevent fraud, misuse and unauthorised sharing of membership benefits; protect and secure our systems; troubleshoot integrations; improve our operations; and establish, exercise or defend legal claims. When relying on legitimate interests, MGH considers and balances those interests against your rights and freedoms.

Consent. To send optional promotional communications and to use non-essential analytics, personalisation or advertising cookies where consent is required by applicable law. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Recipients and service providers

Your personal data may be shared only where reasonably necessary with:

• participating accommodation providers;
• Stripe, for payment processing and billing;
• Airtable, for membership-record management;
• Make, for workflow automation;
• Google and Gmail, for communications;
• BBplanner or the applicable booking-system provider, for booking verification;
• website hosting, security, analytics and customer-support providers;
• professional advisers, including legal, accounting and tax advisers;
• public authorities where disclosure is required by law.

Where applicable, these providers process data on behalf of MGH under appropriate contractual arrangements. Some providers may act as independent controllers for their own services, including payment-processing and booking-related services, and may process data in accordance with their own privacy policies.

5. International transfers

MGH is established in the United Arab Emirates and uses service providers that may process personal data in the UAE, the European Economic Area, the United States or other countries.

Where applicable data-protection law requires a transfer mechanism, MGH will rely on an adequacy decision, approved standard contractual clauses or another lawful safeguard. MGH will also carry out any required transfer-risk assessment.

Information about the safeguards applicable to international transfers may be requested by contacting MGH at the privacy contact details provided above.

6. Data retention

MGH retains personal data only for as long as reasonably necessary for the purposes described in this notice.

Membership and transaction records are retained for the duration of the active customer relationship and thereafter for the accounting, tax, limitation and dispute periods required by applicable law.

Unsuccessful checkout data is retained only for the period reasonably necessary for security, fraud prevention and troubleshooting.

Support correspondence is retained for the period needed to resolve and document the request.

Marketing data is retained until consent is withdrawn or the contact becomes inactive in accordance with the applicable retention schedule.

Technical logs are retained for limited security, fraud-prevention and operational periods.

7. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• request data portability;
• object to certain types of processing;
• withdraw consent at any time;
• request human intervention where applicable;
• contest a decision based solely on automated processing;
• lodge a complaint with a competent data-protection authority.

UAE law may also provide rights relating to the correction, restriction or cessation of certain processing activities.

To exercise your rights, please contact MGH using the details provided in Section 1. We may need to verify your identity before responding to your request.

8. Required information

The identity, contact and payment-status information requested during checkout is necessary to create and administer your membership. If you do not provide this information, MGH may be unable to provide the Summer Club service.

Marketing consent is optional and is not required to purchase or use a membership.

9. Automated decisions

MGH does not currently make decisions producing legal or similarly significant effects solely by automated means.

Automated workflows may identify expired memberships, unsuccessful payments or mismatched booking details for operational review. These automated checks do not independently make decisions producing legal or similarly significant effects.

10. Children

MGH Summer Club is intended only for individuals aged 18 or over. MGH does not knowingly enrol children as members or knowingly collect personal data from children for the purpose of creating a membership.

11. Cookies

The MGH Summer Club website may use strictly necessary cookies required for security, checkout and core website functionality.

Analytics, personalisation and advertising cookies will be used only after obtaining consent where consent is required by applicable law.

The website’s cookie banner will allow users to reject non-essential cookies as easily as they can accept them. Users will also be able to change or withdraw their cookie preferences at any time.

The final cookie inventory will be based on a live scan of the website before publication and will identify, where applicable, the cookie name, provider, purpose, category and duration.

12. Updates to this notice

MGH may update this Privacy Notice to reflect legal, technical or operational changes. Where required by applicable law, material changes will be communicated to you through appropriate means. The date of the latest update appears at the beginning of this notice.