Privacy Policy

Last updated: replace this date in Pages once you adopt this policy.

This policy explains how [SITE NAME] ("we", "us") handles your personal information when you browse this website, create an account or book a stay with us.

1. Information we collect

We only ask for what we need to run a booking:

• Account details — your name, email address and, if you give it, a phone number. These identify you and are used to send your booking confirmations.
• Booking details — the dates of your stay, the room you chose, the number of guests and the payment records tied to your booking.
• Payment information — card and UPI details are handled by our payment processor. We receive a confirmation that a payment succeeded; we never see or store your full card number.
• Technical information — your IP address, browser type and the pages you visited, collected to keep the site secure and to understand which parts of it are useful.

2. Why we collect it

We process this information on the following grounds:

• To perform our contract with you — taking the booking, confirming it, and handling changes, cancellations and refunds.
• To comply with a legal obligation — tax and accounting records that law requires us to retain.
• For our legitimate interests — keeping the site secure, preventing booking abuse and improving the site, in each case without overriding your rights.

We do not use your information for automated decision-making or profiling.

3. Who we share it with

We share your details only with the parties who need them to deliver your stay:

• our payment processor, to take and refund payments;
• government authorities, where disclosure is required by law;
• our professional advisers, if we are ever audited or restructured.

We do not sell or rent your personal information to anyone.

4. How long we keep it

Booking and payment records are kept for eight years from the end of the financial year in which the booking was made, because tax law requires it. Account records are kept until you ask us to delete your account. Server logs are rotated after 90 days.

5. Your rights

You can ask us, at any time, to:

• confirm what personal information we hold about you, and give you a copy;
• correct anything that is inaccurate;
• delete your account, where we are not required to keep the record for tax purposes;
• stop you being contacted for anything other than an active booking.

Write to [CONTACT EMAIL] and we will respond within 30 days.

6. Cookies

The site uses a small number of cookies and similar storage:

• a session cookie, which keeps you signed in and protects forms against cross-site request forgery;
• a cookie that remembers whether you collapsed the dashboard sidebar.

We run no advertising or cross-site trackers, so there is nothing else to consent to.

7. Security

Data in transit is encrypted with TLS, passwords are stored as hashes rather than plain text, and access to booking records is limited to staff who need it. No system is perfectly secure, so please tell us promptly if you believe your account has been compromised.

8. Children

This site is not intended for anyone under 18, and we do not knowingly collect information from children.

9. Changes to this policy

If we change this policy we will update the date at the top of this page. Where a change materially affects you, we will tell you by email before it takes effect.

10. Contact

Questions about this policy can go to [CONTACT EMAIL], or by post to [COMPANY ADDRESS].