Privacy Policy

At Lora Resorts (a property of Yeshlok), located at Devine City, MG Road, Kanajenakhalli, Chikkaballapur, Karnataka 562101, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. By using our website, making a booking, or staying at our property, you agree to the terms of this policy.

1. Information We Collect

We collect the following categories of information:

1.1 Personal Information You Provide

• Booking & Guest Information: Full name, date of birth, gender, nationality, government-issued photo ID (Aadhaar, PAN, Passport, Driving Licence) as required by Indian hospitality regulations, and the names of accompanying guests.
• Contact Information: Email address, mobile number, postal address, and emergency contact.
• Payment Information: Card details, UPI ID, or bank details are processed by our payment gateway partner and are NOT stored on our servers.
• Preferences: Dietary requirements, room preferences, special occasions, and accessibility needs you choose to share.
• Communication: Messages, enquiries, feedback, and reviews you send us via the website, WhatsApp, email, phone, or in person.

1.2 Information Collected Automatically

• Device & Browsing Data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on each page.
• Cookies & Tracking: We use essential cookies (for site functionality), analytics cookies (Google Analytics, Meta Pixel), and chat-widget cookies (LeadConnector). You may disable non-essential cookies via your browser settings.
• CCTV Footage: For the safety of guests and staff, our premises are monitored by CCTV in public areas (not in guest rooms or washrooms).

2. How We Use Your Information

• To process and confirm your booking, check-in, and check-out
• To provide in-stay services (housekeeping, dining, concierge, event coordination)
• To communicate booking confirmations, reminders, invoices, and follow-ups
• To send marketing communications (offers, packages, newsletters) — only with your consent, and you can unsubscribe at any time
• To comply with mandatory Indian government and hospitality regulations (Form C / foreigner registration, GST records, police verification where applicable)
• To prevent fraud, secure our property, and resolve disputes
• To improve our services, website, and guest experience

3. Sharing Your Information

We do not sell your personal information. We share it only with:

• Payment Processors — to process bookings and refunds (Razorpay, Cashfree, or similar PCI-DSS compliant gateways).
• Service Providers — our CRM (LeadConnector / Dizibook), email service providers, and analytics tools, all bound by confidentiality agreements.
• Government & Regulatory Authorities — when required by Indian law, court order, or for safety/security purposes (e.g., guest registration with local police).
• Third-Party Booking Platforms — if you book through a platform like MakeMyTrip, Booking.com, or Agoda, the data they share with us is governed by their privacy policies in addition to ours.

4. Data Storage & Retention

Your personal data is stored on secure servers within India and/or in cloud infrastructure compliant with Indian data protection laws. We retain your information for:

• Booking and tax records — minimum 8 years (as required under Indian tax law)
• Marketing data — until you unsubscribe or request deletion
• CCTV footage — typically 30–60 days, unless required for an active incident investigation
• Web analytics data — up to 26 months

5. Your Rights

Under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Erase your information (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time
• Restrict or object to specific uses of your data
• File a grievance with our Grievance Officer (details below)

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request". We will respond within 30 days.

6. Data Security

We implement reasonable technical and organisational measures to protect your data, including SSL encryption, restricted internal access, secure payment processing via PCI-DSS compliant gateways, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies Policy

Our website uses cookies to enhance your experience. By using our site, you consent to the use of cookies. You can manage or disable cookies in your browser settings, but disabling them may affect site functionality.

8. Children's Privacy

Our website and services are not directed at children under 18. We do not knowingly collect personal information from minors without verifiable parental consent. If you believe a minor has provided us with personal information, please contact us immediately.

9. Third-Party Links

Our website may contain links to third-party websites (Google Maps, social media, booking platforms). We are not responsible for the privacy practices of these external sites — please review their privacy policies separately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The "Last Updated" date at the top will indicate the most recent revision. We encourage you to review this page periodically.

11. Grievance Officer

12. Contact Us