ಗೌಪ್ಯತಾ ನೀತಿ

This policy explains how Moon Mansion House (“we”, “us”) handles your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

What we collect

• Booking details: name, email address, phone number, stay dates, number and ages of guests, special requests and dietary needs.
• Identity documents: a photo ID, collected at check-in because the law requires a guest register. Foreign nationals’ passport and visa details are recorded as legally required.
• Payment status from our payment provider (Razorpay). We never see or store your card, UPI PIN or bank details.
• If you create an account: your login email or phone and your booking history.
• Messages you send us through contact forms, email or WhatsApp.
• Technical data, such as device type and pages visited, only if you accept analytics cookies.

Why we use it

• To create and manage your booking, take payment, send confirmations, reminders and receipts (email, SMS or WhatsApp).
• To provide the services you request, such as pickups, meals, activities and permits.
• To meet legal duties, such as the guest register, tax and accounting records.
• To answer your questions and handle complaints.
• With your consent, to measure website usage and improve the site, and to send occasional offers. You can say no to these without affecting your booking.

Consent

We process data for bookings because you gave it to us for that purpose and, where the DPDP Act allows, for legitimate uses such as legal compliance. Where we rely on consent (analytics, marketing), you can withdraw it at any time through the cookie banner or by writing to us; withdrawal does not affect earlier processing.

Who we share it with

We share data only with providers needed to run your stay, such as payment (Razorpay), email and messaging, hosting and database services, and drivers or guides on a need-to-know basis, and with authorities where the law requires. We do not sell your data. Some providers may process data outside India, under their own safeguards.

How long we keep it

• Booking and payment records: up to 8 years, as required by tax and accounting law.
• ID copies, if kept: deleted 90 days after check-out, except where the law requires the guest register to be kept longer.
• Enquiries and messages: up to 2 years.
• Analytics data: up to 14 months.

Your rights

You may ask to access your data, correct or update it, erase it (except what we must keep by law), withdraw consent, and nominate someone to exercise your rights if you cannot. Write to us at stay@example.com; we aim to respond within 30 days.

Children

Bookings must be made by an adult. We keep children’s details to the minimum needed (name and age) and use them only for the stay.

Security

We use encrypted connections, access controls and trusted providers, and keep only the data we need. No system is completely secure; if a breach affects you, we will tell you and the Data Protection Board of India as the law requires.

Grievance officer

Grievance Officer: [name and designation, to be added by the owner]. Email: stay@example.com. Phone: +91 86187 95490. Address: Moon Mansion House, Halasabalu, Mallenahalli, Chikkamagaluru, Karnataka, 577131, India. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Changes

We may update this policy from time to time; the latest version is always on this page.