Privacy Policy

1. Introduction

Vega Munnar Resorts (“we,” “us,” or “our”), located in Chithirapuram, Munnar, Kerala 685565, India, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information you provide when visiting our website (www.vegamunnar.com) or contacting us for reservations.

This policy is compliant with India’s Digital Personal Data Protection Act 2023 (DPDPA) and applicable data protection principles.

2. Data We Collect

We collect personal data only when you voluntarily provide it:

• Contact & Enquiry Forms: Name, email address, phone number, preferred room type, check-in/check-out dates, number of guests, and message content.
• Event Enquiries: Name, email, phone, group size, event type, and proposed dates.
• Communications: Email correspondence or WhatsApp messages you initiate.
• Technical Data: IP address, browser type, device information, and pages visited — collected automatically via server logs for security and performance monitoring.

We do not collect payment card details directly. All booking payments are processed through secure third-party channels.

3. How We Use Your Data

• To respond to reservation enquiries and confirm bookings.
• To process event and corporate retreat requests.
• To send pre-arrival information and post-stay follow-up (where consented).
• To improve our website and services based on usage patterns.
• To comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Retention

Your personal data is stored securely on servers located in India. We retain enquiry data for a maximum of 24 months from the date of last contact, after which it is securely deleted. Guest booking records may be retained for up to 7 years as required for tax and legal compliance.

5. Your Rights

Under the DPDPA 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data where there is no legal basis for continued retention.
• Withdraw consent for processing at any time.
• Nominate a person to exercise these rights on your behalf.

To exercise any of these rights, contact us at [email protected] or call +91 62382 40077. We will respond within 30 days.

6. Cookies

Our website uses only essential session cookies required for basic site functionality. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required as only strictly necessary cookies are used.

7. Third-Party Services

Our website embeds a Google Maps iframe on the Location and Contact pages for navigation assistance. Google’s own privacy policy governs any data processed through that embed. We do not use Google Analytics or any other third-party tracking service.

8. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Enquiry form data is transmitted securely.

9. Children’s Privacy

Our website is not directed to children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately for deletion.

10. Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top of this page will reflect any changes. Continued use of the website after changes constitutes acceptance of the revised policy.

11. Contact