Privacy Policy

1. Overview

Arohan Asset Holdings Private Limited ("Arohan Hotels," "we," "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (India) and applicable international data protection standards.

2. Information We Collect

Account Information: Name, email address, phone number, and profile photo when you create an account.

Booking Information: Travel dates, guest counts, special requests, and payment details (processed by our payment partners).

Usage Data: Pages visited, search queries, device information, IP address, and browsing behavior for platform improvement.

Host Information: Property details, bank account information, identity documents (KYC), and business registration.

3. How We Use Your Data

We use your data to: process bookings and payments; communicate booking confirmations and updates; improve our platform and services; provide customer support; comply with legal obligations; send marketing communications (with your consent); prevent fraud and ensure security.

4. Data Sharing

We share data with: property hosts (guest name, contact for booking management); payment processors (Razorpay); analytics services (Google Analytics, Microsoft Clarity — anonymized); government authorities (when legally required). We never sell your personal data to third parties.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, regular security audits, and PCI-DSS compliance for payment processing.

6. Your Rights

Under the DPDP Act 2023, you have the right to: access your personal data; correct inaccurate data; erase your data (subject to legal retention requirements); withdraw consent for marketing; data portability; lodge a grievance with our Grievance Officer.

7. Cookies

We use essential cookies for platform functionality and optional cookies for analytics and personalization. Analytics data is anonymized and aggregated; it is not used to identify individual users.

8. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Booking records are retained for 7 years per Indian tax regulations. You may request account deletion at any time.

9. Grievance Officer

In accordance with the DPDP Act 2023 and the IT Act 2000, we have designated the following Grievance Officer for privacy-related complaints:

Name: [GRIEVANCE_OFFICER_NAME]
Designation: Data Protection & Grievance Officer
Email: privacy@arohanhotels.com
Address: Arohan Asset Holdings Private Limited, [REGISTERED_ADDRESS], Kochi, Kerala 682030, India
Response time: Acknowledgement within 48 hours. Resolution within 30 days.

10. Contact

For all privacy-related queries, write to: privacy@arohanhotels.com or Arohan Asset Holdings Private Limited, [REGISTERED_ADDRESS], Kochi, Kerala 682030, India.