Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how ValeStays (“we”, “us”), operated by RIVARA STAYS PRIVATE LIMITED, collects, uses, shares, and protects your personal data when you use our website (valestays.com), book a stay with us, or communicate with our team. By using our services, you consent to the practices described in this policy.

For our full corporate and legal details, see our Company Details page.

1. What Data We Collect

Booking and identity data. When you book a stay, we collect your name, phone number, email address, and stay details. At check-in, as required under applicable Indian hospitality and local police regulations, we collect government-issued photo identification (such as Aadhaar, passport, or driving licence) for all adult guests, and passport/visa details for foreign nationals.

Payment data. Payments are processed by third-party payment gateways. We do not store your full card numbers, CVV, or banking credentials on our systems. We retain transaction records (amount, date, reference ID) for accounting and legal compliance.

Communication data. When you contact us by phone, email, WhatsApp, or website chat, we collect the contents of that communication and your contact details in order to respond and manage your booking.

Website data. We collect standard technical data — IP address, browser type, device information, and pages visited — through cookies and analytics tools, to operate the website, prevent fraud, and improve our services. See our Cookies Policy for details.

CCTV. Common areas of our properties (entrances, corridors, reception areas) are monitored by CCTV for the safety and security of guests and staff. CCTV is never installed inside guest apartments, bedrooms, or bathrooms.

2. Why We Collect It

We use your data to: process and manage your bookings; verify guest identity as required by law; communicate with you before, during, and after your stay (including via WhatsApp, where you have provided your number); process payments and refunds; provide housekeeping, maintenance, and guest support; maintain safety and security at our properties; comply with legal, tax, and regulatory obligations; and improve our services.

We may send you booking-related messages (confirmations, check-in details, support responses) as part of providing our service. Marketing communications are sent only where permitted, and you can opt out at any time.

3. Who We Share Data With

We share personal data only as needed to operate our business:

Service providers — payment gateways, website hosting, communication platforms (including WhatsApp Business), and analytics providers, bound by their own privacy and security obligations.

Booking platforms — where you book through a third-party travel platform, data is exchanged with that platform to manage your reservation under its own privacy policy.

Legal authorities — where required under applicable law, including mandatory guest-record reporting to local police authorities for hospitality establishments, and responses to lawful requests from government agencies.

We do not sell or rent your personal data to anyone.

4. How Long We Keep It

Booking, identity, and transaction records are retained for the period required under applicable tax, accounting, and hospitality regulations. Communication records are retained as long as needed to support your bookings and resolve disputes. CCTV footage is retained for a limited operational period and then overwritten, unless preserved for a specific security incident or legal requirement. Data no longer required is deleted or anonymised.

5. Your Rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable laws, you have the right to: access a summary of the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of your data, subject to legal retention requirements; withdraw consent for processing that is based on consent; and raise a grievance about how your data is handled.

To exercise any of these rights, contact us at support@valestays.com. We will respond within the timelines prescribed by applicable law.

6. Grievance Redressal

For privacy-related complaints or concerns, you may contact our Grievance Officer. Name, contact details, and process are published on our Company Details page. We acknowledge grievances within 48 hours.

7. How We Protect Your Data

We use appropriate technical and organisational safeguards, including SSL encryption on our website, secured hosting, restricted staff access to guest data on a need-to-know basis, and regular software updates. In the event of a data breach affecting your personal data, we will notify affected users and the relevant authorities where required by law, and take corrective action.

8. Children

Our services are intended for adults. We do not knowingly collect personal data from children except as part of a family booking made by an adult guest (e.g., names of accompanying minors for occupancy records).

9. Third-Party Links and Embedded Content

Our website may contain links to third-party websites or embedded content (such as maps or social media). Those services operate under their own privacy policies, and we are not responsible for their practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the current version. Material changes will be posted on this page.

11. Contact

RIVARA STAYS PRIVATE LIMITED (ValeStays) Email: support@valestays.com Phone: +91 70046 48283 Registered office and Grievance Officer details: Company Details