Privacy Policy

1. Introduction & Scope

Vanrai Resort & Water Park (“Vanrai Resort”, “we”, “our”, or “us”) is committed to honoring and safeguarding the personal privacy of our guests, visitors, and online booking patrons. This Privacy Policy details our transparent policies regarding the collection, processing, storage, and protection of information gathered through our website (vanrairesort.com), direct booking channels, and on-property guest reception.

2. Personal Information We Collect

When you browse, reserve a stay, or contact our concierge, we may collect the following data:

• Guest Identity & Contact Details: Full name, telephone/mobile number, email address, residential address, and emergency contact details.
• Reservation & Stay Details: Check-in and check-out dates, selected accommodation category (Wooden Cottage, Deluxe AC Room, Standard Room), number of adults and children, special dietary preferences, and event inquiries.
• Mandatory Regulatory Check-in Data: Copies or details of government-issued photo ID (Aadhaar Card, Passport, Voter ID, Driving License) collected upon arrival to fulfill statutory guest registration requirements mandated by local law enforcement authorities.
• Payment & Transaction Information: Payment reference numbers, transaction IDs, payment mode (UPI, Netbanking, Card), and payment status. Note: We never store your full credit/debit card numbers, CVV, or UPI PINs on our servers.
• Technical Usage Data: Anonymized browser type, device specifications, IP address, and cookie identifiers used strictly to optimize website rendering and prevent fraudulent traffic.

3. Purpose & Legal Basis of Data Processing

We process your personal information strictly for legitimate resort operations:

• Processing room reservations, cottage bookings, and generating instant digital confirmations.
• Transmitting transactional messages, arrival directions, invoice receipts, and stay itineraries via SMS, WhatsApp, or Email.
• Administering refunds, date changes, or deposit reconciliations in accordance with our Cancellation & Refund Policy.
• Satisfying mandatory police/local authority guest registry compliance (Form C / Guest Entry Register).
• Responding to event, banquet, and wedding inquiries submitted via our contact forms.

4. Payment Gateway Security & Third-Party Processors

5. Information Sharing & Disclosure

We adhere to a strict no-sale policy: we never sell, rent, or lease your personal data to third-party telemarketers or external advertisers. Information is disclosed solely in the following necessary contexts:

• Authorized Infrastructure Partners: Cloud hosting providers, transactional SMS/email services, and certified payment gateways bound by strict confidentiality and data protection agreements.
• Statutory Authorities: When formally requested by judicial, police, or governmental bodies under applicable laws of India.

6. Data Retention & Security Measures

We retain guest registration and financial transaction records for the duration required by Indian taxation, audit, and hospitality laws (typically up to 7 years for financial records). Technical safeguards include hardware firewalls, encrypted database connections, routine vulnerability scans, and strict physical access controls at our resort office.

7. Your Privacy Rights

Under applicable Indian data protection frameworks (including the Digital Personal Data Protection Act), you have the right to request access to the personal data we hold about you, request rectification of erroneous records, or request deletion of data that is no longer required for statutory compliance.