Privacy Policy

01 Our Privacy Commitment

Restrya Hotels & Resorts ("we", "us", "our") is dedicated to protecting the confidentiality, security, and integrity of the personal information entrusted to us by our guests, visitors, and corporate clients.

This Privacy Policy outlines the types of personal data we collect during your online interactions with our website, booking reservation portals, and during your on-site physical stay at our mountain sanctuary in Naldehra Baldeyan, Shimla.

02 Information We Collect

To provide an exceptional and personalized hospitality experience, we collect specific categories of information:

• Contact & Identification Details: Full name, telephone/mobile number, email address, physical mailing address, and nationality.
• Statutory Government Identity Verification: Copies of government photo ID (Aadhaar Card, Passport, or Voter ID) collected at check-in as mandated by local tourism and state police regulations.
• Reservation & Stay Details: Arrival and departure dates, suite category, room preferences (e.g., non-smoking, high-floor, fireplace preference), and list of co-guests.
• Culinary & Special Requests: Dietary restrictions, allergies, anniversary notes, and wellness/spa preferences.
• Payment & Billing Data: Credit card details, billing address, transaction IDs, and invoice records processed via secure PCI-DSS certified payment gateways. (We do not store raw CVV numbers on our servers).

03 How We Use Your Information

We use guest data strictly for legitimate operational purposes:

• Processing and confirming your room reservations, booking modifications, and sending pre-arrival route updates.
• Personalizing your bespoke stay, tailoring pillow choices, preparing requested dietary meals, and room fragrance preferences.
• Ensuring on-site safety, fire safety registers, and fulfilling statutory guest registration with law enforcement authorities (Form C compliance for foreign nationals).
• Communicating relevant seasonal promotions or loyalty privileges (only if you have explicitly opted into our guest newsletter, with an instant one-click unsubscribe option provided at any time).

04 Data Security & SSL Encryption

We employ rigorous administrative, physical, and technological security controls to safeguard your data from unauthorized access, accidental alteration, or disclosure:

05 Third-Party Sharing & Compliance

We never sell, rent, or trade guest personal information to external commercial brokers or marketers. Data is shared solely under the following limited circumstances:

• Trusted Service Providers: Secure payment gateway partners, PMS (Property Management Systems), and email delivery engines operating under strict data protection contracts.
• Legal & Regulatory Authorities: Where disclosure is required by law, subpoena, or official request by Himachal Pradesh Police or Government of India tourism authorities.

06 Cookies & Tracking Technologies

Our website uses standard essential cookies to remember your selected dates, preferred language, and reservation cart items during your browsing session.

We also utilize privacy-centric analytics to monitor website load performance and navigation flows to continuously refine guest usability. You can configure your browser settings to refuse cookies at any time, though some interactive booking functions may require essential cookies to operate properly.

07 Your Privacy Rights

Under the Digital Personal Data Protection (DPDP) Act 2023 and applicable privacy statutes, guests enjoy comprehensive rights regarding their data:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete details.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of non-statutory personal data when our business relationship concludes.
• Right to Withdraw Consent: You may withdraw your marketing communications consent at any time.

08 Data Retention Period

We retain guest registration records and tax invoices for the statutory period required under Indian taxation (GST) and hotel licensing laws (typically 7 years). Marketing preferences and transient browsing cookies are retained only for as long as necessary to serve your requested stay experience.

09 Data Protection Officer & Grievances

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or have privacy concerns, please contact our Data Protection Office: