Privacy Policy

1. Amendment

The Company reserves the right to modify and update this Privacy Policy periodically. These changes may be implemented without prior notice, but they will only be applicable to future activities and information, not retroactively, unless stated otherwise. Users are advised to review this Privacy Policy before accessing any services provided by the Company to ensure a clear understanding of how their personal information will be utilized.

2. Links to Third Party

This Privacy Policy outlines the procedures and practices concerning the use and disclosure of User Information collected by the Company. However, the Website may include links to external websites. Please note that personal information collected when visiting such websites is not governed by this Privacy Policy. It is important for Users to exercise caution and review the privacy policies of those websites before accessing them. The User acknowledges that the Company is not responsible for and has no control over the practices and content of any third-party website accessed through the links provided on the Company's website.

3. Collection of Information

The Company collects two basic types of information from a User in conjunction with a User's use of the Website: personal information, which is any information that exclusively identifies a User and may include but is not limited to the User's phone number; and non-personal information, which is information that does not exclusively identify a User but is related to the User, including but not limited to information about a User's interests, demographics and use of the site. In case the User is not the intended recipient of the services and Website, the User should contact the Company at the earliest. Towards the provision of the services by the Company and the use of the Website, the Company shall, in addition to the information described above, collect the following information from a User (“User Information”):

• Location — information about the location of the User's device used to access the services from the Company. This is used for the provision of the services, pricing-related information, maintenance of records for audit purposes and other matters.
• Personal Information — information about the name, email address, contact information and details of official documents. This is used for the provision of the services and for maintenance of records for audit purposes.
• Contact Information — contact and account information to detect references and to autofill data during a User's requests for services.
• Other Applications — the User's use of other software or applications which are linked or used in the provision of the services, e.g. any third-party sites through which a User may have accessed the services.
• Others — as may be explicitly required and requested from time to time.

4. Usage of User Information

User Information will be used by the Company for the purposes which the Company considers necessary for achieving a seamless, efficient and safe experience, customized to a User's needs, and to use the personal information to provide services to a User, enhance the operation of the services and improve the Company's marketing and promotional efforts. The processing of the User's information is for the purposes of:

• To provide, maintain and enhance a User experience in relation to the application or the website;
• To provide and deliver the services requested by the User, and send User-related information including confirmations and invoices;
• To send technical notices, updates, security alerts, and support and administrative messages to the User;
• To take up and investigate any complaints, claims or disputes;
• To respond to the User's queries or feedback submitted by the User;
• To monitor and analyse trends, usage, and activities in connection with the services;
• To link or combine with information the Company receives from others to understand User's needs and provide better service;
• To carry out any other purpose for which the information was collected; and
• To share data such as back-testing, user action and processed data for internal and external services with third parties without User's consent.

5. Cookies

The Company shall use various technologies to collect information, including cookies and web beacons. Cookies are small data files typically stored on a User's computer's hard drive or in device memory that help to improve the Company's services and User's experience, see which areas and features of the Company's services are popular and count visits, manage the registration process for accounts, remember User's site preferences, retain certain information to process orders for exchange transactions, and retain information to provide User with support. The Company also uses cookies stored in emails to help confirm a User's receipt of, and response to, such emails. Web beacons are electronic images that may be used in the Website or emails and help deliver cookies, count visits, and understand usage and campaign effectiveness.

6. Storage of User Information

User Information held by the Company is stored and managed in accordance with applicable laws. The storage and transfer of User Information adhere to all relevant regulations, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It is important to note that the services have implemented reasonable security measures as mandated by the Information Technology Act, 2000, to safeguard User Information against loss or misuse. The Company utilizes secure servers when users modify or access their account information. Please be advised that the Company cannot guarantee that there will be no unintentional disclosures of User Information and data due to factors such as data breaches, unauthorized access, or security failures. The Company does not provide any warranties and shall not be held liable for breaches in the security of User Information resulting from malicious attacks, errors, or omissions that are not willfully initiated by the Company. Ultimately, the User assumes the risk associated with any transmission of their information.

7. Dissemination of User Information

Where any service requested by a User involves a third party, such information as is reasonably necessary for the Company to carry out the User's service request may be shared with such third party, and the Company may also obtain details and information from the third party on usage. The Company may also engage with other companies or persons to complete services, process payments, and provide customer service. The User understands that they have access to personal information needed to perform their functions. However, payment and transaction details shall not be shared with other users or third parties under any circumstances. The Company may anonymise and/or de-identify information collected from Users. The Company's use and disclosure of aggregated and/or de-identified information is not restricted by this Privacy Policy and it may be used and disclosed to others without limitation.

8. Retention of User Information

The Company shall retain the personal information of the User as long as it serves the purpose(s) for which it was initially collected as stated in the Privacy Policy or subsequently authorised. The Company may continue processing a User's personal information for a period beyond such period only for the time and to the extent such processing reasonably serves the purposes of archiving, and subject to the protection of this Privacy Policy. After the expiry of this time period, the Company may either delete the User's personal information or retain it in a form such that it does not identify the User personally.

9. Communication Policy

When the User sets up an account or receives any request pursuant to the provision of the services, the User is deemed to have opted in to receive emails and messages from the Company and its service providers in connection with the provision of the services as well as any marketing and promotional agencies. While the User may opt out of promotional messages, the User cannot opt out of receiving certain administrative, financial, technical and legal information from the Company in connection with the services.

10. Alteration of User Information

In case the User requests any change or deletion of User Information, or permanently deletes the User's account, the User may contact the Data Protection and Grievance Officer. Do note that the Company is not obligated to alter, vary or delete any User Information which it is required to maintain under applicable laws or pursuant to contractual requirements of the Company.

11. Data Breach and Disclosure Notification

In the event of a data breach or unauthorized disclosure of User Information that poses a high risk to the rights and freedoms of the User, unless the Company has effectively mitigated such risks, the Company will promptly notify the affected Users. The notification will include information about the breach or incident, its consequences, and contact details of the Company's personnel who can address any inquiries from Users regarding the breach. If a governmental or regulatory authority requests the Company to provide User Information, unless explicitly instructed otherwise by the authority, the Company will disclose to the User the details of the request for their User Information.

12. Contact Details

In case a User has any queries or any discrepancies or grievances with respect to the User Information provided by a User, please contact the Company's Data Protection and Grievance Officer by writing at: +91 76681 49232 · reservations@vanrajretreat.com.

13. Updates to Privacy Policy

The Company reserves the right, at any time, to add to, change, update, or modify this Privacy Policy. The latest Privacy Policy will always be available on this page.