Privacy Policy

Scope

This Privacy Policy (“Policy”) explains how we collect, use, and protect your personal data when you book a stay, dine with us, or use any of the services at Ranthambore Aangan Homestay. It covers the types of personal data we collect, why we collect it, how we use it, and the legal grounds for processing it. It also explains your rights under applicable data protection laws, including India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and, where it applies to you, the General Data Protection Regulation (GDPR).

“Personal data” means any information that can identify you.

By submitting your data, you agree to the terms of this Policy, so please read it carefully.

Data Controller

The entity responsible for your personal data is the company with which you make a reservation (“Company”, “we”, “us”, “our”).

The Personal Data We Collect

When you make a reservation, we collect the following personal data:

• Contact information: first and last name, postal address, email address, and phone number.
• Language preference.
• Payment information: card number or payment account details, billing address, and other payment details.
• Communications: copies of any correspondence with us.
• Stay details: dates of arrival and departure, and goods and services purchased.
• Reservation specifics: gender, date of birth, important dates (birthdays, anniversaries), names of other guests, meal preferences, health conditions, or other special requests.

Other information: we may collect data automatically when you visit our website, including through cookies and similar technologies. See the Cookies section below.

Sensitive data: in some cases we may collect sensitive personal data, such as health information (for example, allergies or health conditions). We will ask for your explicit consent and use it only for the purposes we tell you about. In certain cases, processing sensitive data may be necessary to protect your or someone else’s vital interests, or for public health reasons.

If you give us personal data about others (for example, when booking for someone else), you confirm that you have the authority to do so and consent to our use of that data under this Policy.

Some personal data is needed for us to fulfil our contract with you; if you do not provide it, we may not be able to offer our services. Where providing data is voluntary, we will tell you, and there will be no consequences if you choose not to.

Where We Obtain Personal Data

We collect personal data in the following ways:

• From your reservation: directly from you when you book through our website, by email, by phone, or by other means. If you contact us through customer service or social media, we also collect data through those conversations.
• From your stay: when you stay with us and use services at the homestay, such as dining or safari arrangements.
• From third parties: you may book through online travel agencies and other booking platforms, which pass your reservation details to us. Please read their privacy policies to understand how they process your data.

You are not required to provide personal data, but not doing so may limit our ability to provide our services.

How We Use Your Data

We use your data in the following ways:

• Reservation and stay management: to complete and manage your reservation, including processing payments, confirming room availability, and providing related services such as pre-arrival messages.
• Legitimate interests: managing bookings, offering special promotions, and personalising our services; communicating with you about your reservation, including following up on incomplete bookings, handling requests, and sending administrative information (for example, security alerts and satisfaction surveys); running analytics to improve our marketing and your experience; sending postal communications that may interest you; and analysing website use to keep the site working smoothly across devices.
• Legal and security reasons: to comply with legal obligations, enforce house rules, protect our rights and operations, or prevent damage.
• Sharing within our business: we may share your data with our affiliated businesses, including our sales and reservations office, for administrative, sales, and marketing purposes.
• Data aggregation: we may anonymise and aggregate data for internal purposes, including market research. If we invite you to take part in market research, we will explain clearly what data is collected and how it is used.
• Marketing communications: with your consent, we may email you about goods, services, or events that may interest you.

When we process data for legitimate interests, we carefully weigh the impact on your rights and interests. You may object to processing based on legitimate interests, subject to certain conditions (see Your Data Protection Rights below).

We use your data for the purposes above because it is necessary to fulfil our contract with you, to comply with legal obligations, or for our legitimate interests.

Disclosure of Your Information

We may share your data with third parties in the following circumstances.

Service providers

Like many businesses, we work with trusted third-party service providers that support our operations. These may include (i) payment and card processing services, (ii) credit reference agencies for fraud prevention, (iii) reservation platforms, (iv) IT and infrastructure providers, (v) web analytics services, (vi) digital advertising providers, and (vii) CRM, marketing, and sales software. These providers may access, process, or store your data only to provide their services, on our instructions.

Affiliated businesses

To provide the services you request, our affiliated businesses may access and process your data for the purposes described above. They will use it only for the purposes for which it was originally collected.

Business transfers

If our business is sold, or its assets are acquired by a third party, the personal data we hold about our guests may be transferred as part of the transaction.

Administrative and legal reasons

We may disclose your data if necessary (i) to comply with legal obligations, judicial or regulatory processes, court orders, or other legal requirements, (ii) to enforce our Terms & Conditions, house rules, or any other contract terms that apply to you, or (iii) to protect us, our guests, or our staff from harm. This may involve sharing information with law enforcement agencies, courts, or other authorities.

Payment Information

Payments made through our website are processed by third-party payment providers. Your payment data is stored securely and encrypted to current industry standards. We do not directly process or store your debit or credit card details.

We may store your payment data to make future transactions easier, and keep it only for as long as the law allows. You can opt out of this storage, but you will then need to enter your payment details again for any future reservation.

Personal Data Transfers

Your data may be transferred to, and stored in, countries other than the one where it was collected, including countries where our service providers store data. These countries may not offer the same level of data protection as your own. If your data is transferred outside India, we will take steps to protect it, including legal safeguards where required. For more information about these safeguards, please contact us.

Tracking and Do Not Track

Third parties, such as analytics and advertising providers, may collect personal data about your online activity over time and across different websites when you visit our site.

Do Not Track (DNT) is a privacy setting available in most browsers. Our website does not currently respond to DNT signals. You can limit tracking through your browser’s cookie settings, as described below.

Children

Our website is not intended for children under 18, the age of a child under the DPDP Act (or a higher age where the law of your country requires it). We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has given us personal data through our website, please contact us and we will remove it from our systems.

Security

We take reasonable measures to protect your data from unauthorised access, loss, destruction, or damage. However, no transmission of information over the internet or public networks can ever be entirely secure. Although we use appropriate technical and organisational security measures, we cannot guarantee the security of the data you provide online.

Personal Data Retention

We keep your data only for as long as necessary for the purposes described in this Policy, or as required by legal, regulatory, accounting, or reporting obligations, whichever is longer. Information submitted through our website or other platforms we operate is kept for two years after your last contact with us. If you agree to receive marketing communications, we keep your data until you unsubscribe.

To decide how long to keep your data, we consider its type, nature, and sensitivity, the purposes for which we process it, any legal or operational retention requirements, and whether those purposes can be achieved by other means.

When the retention period ends, we securely delete your data in line with applicable laws. In some cases we may anonymise it instead, so that it no longer identifies you.

Your Data Protection Rights

Under applicable data protection laws, including the DPDP Act and, where it applies, the GDPR, you may have the following rights.

Right of access

You can ask us to confirm whether we are processing your data. If we are, we will give you a copy of it along with details such as the purpose of processing. If you ask for further copies, we may charge a reasonable fee.

Right to correction

If your data is inaccurate or incomplete, you can ask us to correct or update it. If we have shared your data with others, we will tell them about the correction where possible. On request, we can also tell you who your data was shared with.

Right to erasure

You can ask us to delete your data, particularly if our processing is based on your consent and you withdraw it. If we have shared your data with third parties, we will tell them about the erasure where feasible. You can also ask who we shared your data with. We may still process your data where it is required for legitimate interests or by law.

Right to restrict processing

You can ask us to restrict the processing of your data in certain circumstances, such as when you dispute its accuracy or object to its processing. We will tell you before lifting any restriction. If your data has been shared, we will tell those third parties about the restriction where possible.

Right to data portability

You can ask for a copy of the data you have given us that we process by automated means, on the basis of your consent or our contract with you. We will provide it in a structured, commonly used, machine-readable format.

Right to object

You can ask us to stop processing your data at any time, and we will do so if we are relying on a legitimate interest (unless we can show compelling legitimate grounds for the processing) or if we are processing your data for direct marketing.

Right to withdraw consent

Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of any processing before we receive your request.

Right to complain

If you have concerns about how we handle your data, please contact us first. You can also complain to the Data Protection Board of India, or to the data protection authority in your own country.

To exercise any of these rights, contact us using the details below. We may ask for further information to verify your identity before we respond.

Cookies

We use cookies for tracking and analytics.

You can choose to be notified each time a cookie is sent, or turn off all cookies, in your browser settings. Each browser is different, so check its Help menu for how to change cookie settings.

Turning off cookies may limit some features of our site, and some of our services may not work as intended.

Changes to This Policy

Any future changes to this Policy will be posted on this page, so please check back from time to time. Where the law requires it, we will tell you about significant changes.

Contact Us

For any question about this Policy or your personal data, write to info@ranthamboreaangan.com, or call +91 94140 16100 or +91 81144 17297.