1. Introduction

At Seetharkundu Resorts ("we", "us", "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard information when you visit our website at www.seetharkunduresorts.com or use any of our services - including room bookings, activity reservations, and communications.

This Policy is published in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the Information Technology Act, 2000, and in anticipation of obligations under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

By using our website or services, you consent to the practices described in this Policy. If you disagree with any part of this Policy, please refrain from using our website or providing your personal information to us.

2. Information We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Identity data: Full name, date of birth, nationality
• Contact data: Phone number, email address, postal address
• Booking data: Check-in/check-out dates, room type, number of guests, special requests
• Identity verification: Government-issued ID details (Aadhaar, Passport, Driving Licence) - collected at check-in as required under police verification regulations
• Payment data: Transaction reference numbers, payment method type (we do not store full card numbers)
• Communications: Messages, enquiries, feedback, or complaints you send us

2.2 Information Collected Automatically

• Usage data: Pages visited, time spent, referring URLs
• Device data: IP address, browser type, operating system, device identifiers
• Cookie data: Session identifiers, preferences (see Section 6)

2.3 Sensitive Personal Data

We may collect health-related information only where you voluntarily disclose it (e.g., dietary requirements or medical conditions relevant to activity participation). Such data is treated with heightened care as Sensitive Personal Data or Information (SPDI) under Indian law.

3. How We Use Your Information

We process your personal data on the following lawful bases and for the following purposes:

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• Payment processors: To facilitate secure transactions via authorised payment gateways (e.g., Razorpay, PayU, or bank transfer). These processors handle data under their own privacy policies and applicable PCI-DSS standards.
• Statutory and law enforcement authorities: Where required under Indian law, court orders, or police verification regulations applicable to hospitality establishments.
• Service providers: Third-party vendors who assist us in operating our website or delivering services (e.g., email/SMS platforms, analytics), bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction. We will notify you of any such change in ownership.

All third parties are required to handle your data securely and only for specified purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are as follows:

• Booking and guest records: 5 years (for GST compliance and dispute resolution)
• Government ID verification records: As required by applicable police verification rules (typically 1–3 years)
• Payment records: 8 years (as required under the Companies Act, 2013)
• Marketing consent records: Until you withdraw consent or 3 years of inactivity, whichever is earlier
• Website analytics data: 26 months (standard analytics cycle)

Once the retention period expires, data is securely deleted or anonymised.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us deliver a better experience.

Types of cookies we use:

• Strictly necessary cookies: Required for the website to function (e.g., session management, CSRF security tokens). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). Activated only with your consent.
• Preference cookies: Remember your settings and preferences for future visits.

You can manage or disable non-essential cookies at any time through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect website functionality.

We use Google Analytics to analyse website traffic. Data collected by Google Analytics is subject to Google's Privacy Policy. We have enabled IP anonymisation to limit the personal data processed.

7. Data Security

We implement reasonable technical and administrative security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting staff access to personal data on a need-to-know basis
• Secure storage of booking and payment records
• Regular review of our data handling practices

While we take all reasonable steps to protect your data, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security and are not liable for breaches caused by factors beyond our reasonable control.

In the event of a personal data breach that is likely to cause harm to you, we will notify you and the relevant authorities as required under applicable Indian law.

8. Third-Party Websites & Links

Our website may contain links to third-party websites - including booking platforms, social media pages, and travel information portals. These links are provided for convenience only.

We have no control over and accept no responsibility for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental consent.

If you believe we have inadvertently collected information from a minor, please contact us immediately at info@seetharkunduresorts.com and we will promptly delete such data.

10. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and applicable Indian regulations, you have the following rights regarding your personal data:

• Right of Access: Request confirmation of whether we hold your personal data and obtain a copy of it.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing), withdraw your consent at any time without affecting prior processing.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 12) if you believe your data rights have been violated.
• Right to Nominate: Under the DPDP Act, 2023, nominate another individual to exercise your rights on your behalf in the event of incapacity or death.

To exercise any of these rights, please submit a written request to our Grievance Officer at the contact details in Section 12. We will respond within 30 days of receipt.

11. Marketing Communications & Opt-Out

With your consent, we may send you promotional emails, SMS, or WhatsApp messages about our offers, seasonal packages, and resort updates.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email,
• Replying "STOP" to any promotional SMS or WhatsApp message, or
• Contacting us directly at info@seetharkunduresorts.com.

Opting out of marketing will not affect transactional communications related to your booking.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address privacy-related concerns:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for operational reasons. The revised Policy will be posted on this page with an updated "Last Updated" date.

For significant changes, we will make reasonable efforts to notify you (e.g., via email or a prominent notice on our website). Continued use of our services after any updates constitutes your acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy, please contact us: