We take pride in upholding the highest ethical standards in all of our operations, ensuring a legacy of integrity. All of our employees are obligated to comply with our Code of Business Conduct and Ethics, which is provided with every new hire packet and acknowledged annually thereafter.
The Employee Grievance Procedure is a process for employees to report complaints and the Company to initiate investigations, in cases where employees’ rights have been breached under the MLC or company procedures. In addition, employees have access to the Company’s Ethics Hotline, a toll-free telephone service, available 24 hours a day, operated by an independent third-party provider. Employees worldwide may use the Ethics Hotline to report breaches of ethical business conduct in the workplace and illegal activities without fear of retaliation. Reports are handled confidentially.
Our leadership team has more than 150 years of combined industry experience in the global hospitality-based health and wellness industry. Alongside them is the OneSpaWorld Board, a steering force behind our brand’s unwavering commitment to delivering exceptional spa experiences. The two work together to chart the course for our Company’s growth and success, anchored in our vision of luxury and innovation. Our Board’s Committees create a foundation of excellence for our guests and staff:
Nominating and Governance Committee | Audit Committee | Compensation Committee |
Reviews social responsibility and sustainability practices, board composition, and corporate governance. | Ensures the integrity of financial reporting and the effectiveness of internal control systems. | Oversees the design and administration of our executive compensation programs. |
Our Board is comprised of 10 members, who exhibit a range of expertise, knowledge, and business acumen. They are individuals from diverse professional backgrounds, who bring a unique combination of skills and experience to the table and uphold the highest standards of personal and professional integrity to serve on our Board of Directors. We carefully consider a range of criteria, including gender, ethnicity, and tenure when choosing candidates.
With data operations spanning locations in varying jurisdictions, it is crucial that we employ a layered approach to security, regularly testing the defenses and protecting against system disruptions and intrusions. Our data handling protocols meet regulatory requirements and are in full compliance with the General Data Protection Regulation (GDPR) in both the EU and UK.
Our Guests
We take great care in managing our guests’ data, employing encryption methods and maintaining anonymity, never storing credit card information, and promptly removing data per their requests. We are PCI compliant and guided by our Privacy Policy.
Our Employees
Staff are required to take security training at least once annually. We conduct random phishing tests throughout the year and require remedial training for those who fail. All of our standards are subject to our Acceptable Use Policy.
Our Systems
Physical locations and virtual settings are strictly controlled with network and perimeter security services for our at-sea and on-land operations. Our networks and compliance programs are audited by third parties and vulnerability scans are conducted on at least an annual basis. Overall, our security posture is designed to manage, detect, and respond to security risks.