Contents
Questions about
your data?
We’re happy to address any privacy concerns personally and promptly.
01-
Who We Are
Baramasa Hospitality is a boutique hospitality brand operating two nature retreats in Uttarakhand, India. We are the data controller responsible for information collected through this website and our services.
- Our properties:
- Hushvan Resort— Pauri–Devprayag State Highway, near GB Pant Engineering College, Ghurdauri, Kotnal Gaon, Uttarakhand 246194
- Van Ashray.— Vitthal Ashram, Muni Ki Reti, Rishikesh, Uttarakhand 249192
Our website address is baramasahospitality.com. For any privacy-related concerns, reach us at info@baramasahospitality.com
or +91 96341 38558.
02
Information We Collect
Information You Provide Directly
When you make a reservation, send an inquiry, or contact us via phone, email, or WhatsApp, we may collect:
- Full name and contact details — phone number and email address
- Postal or billing address
- Reservation details: check-in / check-out dates, number of guests, room and bed preferences
- Payment information, processed securely by our payment partners (we never store card data on our systems)
- Special requests, dietary requirements, or accessibility needs you share with us
- Any messages, feedback, or comments you send to us
- Government-issued identity information where required by law for guest registration
Information from Third Parties
If you book through a third-party platform (such as MakeMyTrip, Booking.com,
or Airbnb), we receive the booking details shared by that platform. We may also receive limited profile data if you interact with our social media accounts.
When visitors leave comments on our site, we collect the data shown in the comments form, along with your IP address and browser user agent string to help with spam detection. An anonymised hash of your email address may be sent to the Gravatar service to check for an associated profile picture.
Media Uploads
If you upload images to our website, please avoid images with embedded location data (EXIF GPS). Visitors to the website may be able to download and extract location data from images uploaded to the site.
03
How We Use Your Data
We use the information we collect for the following specific purposes:
- Reservations & Bookings: To process your reservation, send confirmation, pre-arrival information, and manage your stay end-to-end
- Guest Communication: To respond to inquiries, follow up on special requests, and provide updates related to your booking or stay.
- Personalisation: To tailor your experience based on stated preferences — dietary needs, room configuration, preferred activities, and anniversary or celebration arrangements.
- Operations & Logistics: To manage check-in/check-out, housekeeping scheduling, and all on-property services.
- Marketing & Newsletters: To send you seasonal offers, new experience announcements, or property updates — only if you have explicitly opted in. You may unsubscribe at any time with one click
- Website Analytics: To understand how visitors use our site so we can improve content, navigation, and overall experience.
- Legal Compliance: To fulfil obligations under Indian law, including guest identity registration requirements under applicable tourism and police regulations in Uttarakhand.
- Safety & Security: To protect the physical safety and security of guests, team members, and our properties.
We will never sell, rent, or trade your personal information to any third party for their own marketing purposes.
Your data exists solely to give you a better experience with Baramasa Hospitality and to meet our legal obligations.04
Cookies & Tracking
Our website uses cookies — small text files placed on your device — to improve your experience and help us understand how our site is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Core website functionality — session management, login state. Cannot be disabled. | Session / 1 day |
| Analytics | Anonymous data via Google Analytics to understand traffic and usage patterns. | Up to 26 months |
| Preference | Remembers your settings — language, display preferences — for a smoother return visit. | 1 year |
| Comment / Login | Stores your name/email for comment convenience. Login cookies persist for 2 days (or 2 weeks with "Remember Me"). | 1 year / 2 days / 2 weeks |
| Marketing | Enables relevant advertising on third-party platforms. Only active with your explicit consent. | 90 days |
Managing Your Cookie Preferences
You can control or disable non-essential cookies at any time via your browser settings. Disabling essential cookies may affect core site functionality. For detailed guidance, visit aboutcookies.org. Our website may display a cookie consent banner that allows you to customise your preferences on your first visit.
Google Analytics
We use Google Analytics to collect anonymised data about website usage. This data is processed by Google in accordance with their privacy policy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
05
Sharing Your Data
We share your personal data only in the following limited and necessary circumstances:
- Service Providers: Trusted third-party vendors who help us operate — including payment processors, email service providers, website hosting, and analytics platforms. They are contractually bound to protect your data and may not use it for their own purposes.
- Booking Platforms: If your reservation originated on a third-party OTA (e.g. MakeMyTrip, Booking.com), we share necessary confirmation details with that platform to manage your stay
- Legal Obligations: We may disclose your information when required by law — such as guest identity records submitted to local police or Uttarakhand Tourism authorities under Indian hospitality regulations.
- Password Reset Requests: If you request a password reset on our site, your IP address will be included in the reset email for security verification.
- Spam Detection: Visitor comments may be routed through an automated spam detection service. No personal data beyond what is necessary is shared in this process
- Emergency & Safety: Where disclosure is necessary to protect the health, safety, or legal rights of any person on or off our property .
- Business Transfer: In the event of a merger, acquisition, or ownership change of Baramasa Hospitality, your data may be transferred to the new entity. You will be informed before any such transfer occurs.
06
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Reservation & Guest Records | Minimum 3 years post-stay | Accounting, legal compliance, re-booking |
| Marketing Opt-In Data | Until unsubscribed or deletion requested | Email marketing |
| Website Comments | Indefinitely | Comment moderation & context |
| Analytics Data | Up to 26 months (anonymised) | Website performance analysis |
| Inquiry Data (non-booking) | Up to 12 months | Follow-up communications |
| Payment Records | 7 years | Tax & financial regulations (India) |
| User Account Data | Duration of account + 12 months | User profile management |
When your data is no longer needed, we securely delete or anonymise it so that it can no longer be associated with you personally. Users with accounts on our site may view, edit, or delete their personal information at any time (except username) by contacting us.
07
Your Rights
As a guest, website visitor, or user of our services, you hold the following rights in relation to your personal data. We take these rights seriously and will respond to all valid requests within 30 days.
-
Right to Access
Request a full copy of the personal data we hold about you, including all information you have provided.
-
Right to Erasure
Request deletion of your personal data, subject to exceptions required by law or legitimate business need.
-
Right to Portability
Request your data in a structured, machine-readable format for transfer to another service or provider.
-
Right to Rectification
Ask us to correct inaccurate or incomplete personal data we hold. We will update records promptly.
-
Right to Object
Object to processing for marketing at any time. We will stop all marketing communications immediately upon request.
-
Withdraw Consent
Where we process data based on your consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any right, contact us at info@baramasahospitality.com.
If you have an account, you can also manage your preferences directly by logging in.
08
Data Security
We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, disclosure, or destruction.
- Our website is served exclusively over HTTPS with TLS encryption.
- Payment transactions are processed by PCI-DSS compliant third-party gateways. We do not store, transmit, or have access to your card details.
- Access to personal data within our organisation is restricted to authorised personnel on a strict need-to-know basis.
- Our systems and software are kept up to date with security patches.
- We conduct periodic internal reviews of our data handling practices.
While every reasonable precaution is taken, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses risk to your rights, we will notify affected individuals and relevant authorities as required under applicable Indian law.
09
Third-Party Links & Embeds
Our website may contain links to third-party websites — such as booking platforms, tourism bodies, travel blogs, or social media networks. These links are provided for your convenience and do not constitute an endorsement by Baramasa Hospitality of those sites or their content.
We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites. We strongly encourage you to review the privacy policy of any external site before sharing your personal information.
Articles and pages on our site may include embedded content from third parties (e.g. YouTube videos, Google Maps, social media posts). Embedded content behaves exactly as though you had visited those third-party websites directly — those platforms may collect data, use cookies, and track your interactions with embedded content, particularly if you are logged into their services.
We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites. We strongly encourage you to review the privacy policy of any external site before sharing your personal information.
Articles and pages on our site may include embedded content from third parties (e.g. YouTube videos, Google Maps, social media posts). Embedded content behaves exactly as though you had visited those third-party websites directly — those platforms may collect data, use cookies, and track your interactions with embedded content, particularly if you are logged into their services.
10
Children's Privacy
Our website and online services are not directed at children under the age of 18. We do not knowingly collect, store, or process personal data from minors without verifiable parental consent.
If you believe we have inadvertently collected information from a child, please contact us immediately at info@baramasahospitality.com and we will take prompt steps to delete it.
Families with children are warmly welcome at both our properties. Booking information for family stays is collected and processed in relation to the adult lead guest who makes the reservation.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, or applicable law. When changes are made, we will revise the “Last Updated” date at the top of this page.
For significant changes that affect how we handle your personal data, we will make reasonable efforts to notify you directly — for example, by email if you are a registered user or have an upcoming reservation at one of our properties.
Your continued use of our website and services following any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
12
Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please reach out. We are committed to addressing all privacy-related matters with transparency and care.
-
Hushvan Resort
Pauri–Devprayag Highway, Kotnal Gaon, Uttarakhand 246194
-
Van Ashray
Vitthal Ashram, Muni Ki Reti, Rishikesh, Uttarakhand 249192
We aim to respond to all privacy-related requests within 30 days of receipt. For urgent matters, WhatsApp or phone is fastest.
Ready for your
mountain escape?
Your comfort, trust, and privacy are the foundation of
every stay we host. We’d love to welcome you to
our sanctuaries.
every stay we host. We’d love to welcome you to
our sanctuaries.