Privacy Policy

1. Overview & Commitment

At Vanrai Resort (“we”, “our”, or “us”), we respect your privacy and are committed to safeguarding the personal data of our guests, visitors, and website users. This Privacy Policy details our practices concerning data collection, usage, and disclosure through our website, online booking services, and on-premise guest interactions.

2. Information We Collect

We only collect information necessary to deliver exceptional hospitality services:

• Guest Identity & Contact Info: Full name, email address, telephone/WhatsApp number, residential address, and government-issued photo ID upon physical check-in (mandated by applicable local hospitality regulations).
• Reservation Specifications: Check-in and check-out dates, room type preferences (Wooden Cottages, Deluxe AC, Standard Rooms), guest counts, dietary notes, and event enquiry requirements.
• Payment Information: Transaction identifiers, payment methods (UPI, Netbanking, Card), and payment statuses. Please note that credit card details and UPI PINs are processed securely by PCI-DSS compliant payment gateways and are never stored on our servers.
• Technical & Usage Data: Anonymized browser type, operating system, device characteristics, and IP addresses collected automatically to ensure website stability and performance.

3. Purpose of Processing

Your data is used strictly for legitimate resort operations:

• Facilitating room bookings, event reservations, and instant confirmations.
• Sending essential transactional updates, receipts, and arrival check-in instructions.
• Complying with statutory guest registration requirements enforced by regional authorities.
• Improving our agro-tourism stays, dining quality, and digital user experiences.

4. Sharing & Disclosure

We do not sell, rent, or trade your personal information to third-party advertisers. Data is shared strictly on a need-to-know basis with:

• Verified infrastructure providers (cloud database hosting and transactional email systems).
• Licensed law enforcement or regulatory authorities only when mandated by valid legal processes.

5. Data Security & Storage

We employ strict industry-standard technical safeguards, including 256-bit SSL encryption, restricted database access controls, and regular audits to protect your data from unauthorized access, alteration, or disclosure.

6. Your Privacy Rights

You have the right to request access to the personal data we hold about you, request corrections to inaccurate information, or request deletion of data that is no longer required for legal compliance.