Privacy Policy

1. Who is responsible for your data

Stayora Holidays Pvt Ltd is the data fiduciary for the personal information described here. Registered office: Office No 205, 2nd Floor, Chokhani Square, Sec. 18, Noida, Gautam Buddha Nagar - 201301, Uttar Pradesh, India. For any privacy request, contact our Grievance Officer (details in section 10).

2. Information we collect

• Booking & contact details: your name, phone number and email address.
• Billing details: the billing address (address, city, state, country and postal code) you provide at checkout, which appears on your proforma and tax invoice.
• Stay details: the property, room type, dates, number of guests and any special requests you share.
• Tax details (optional): your GSTIN and business name, if you ask for a business tax invoice.
• Payment records: when you pay at the property, we record the amount, mode (cash/card/UPI) and reference for our accounts and to raise your tax invoice. Card and UPI transactions are processed by the payment instrument at the desk; we do not store full card numbers.
• Identification at check-in: as required by hospitality rules, valid government ID is verified at check-in and handled per applicable law.
• Technical and device data at booking: when you place a booking we record the IP address and device information(the browser "user-agent" string) of the connection used to make it. We collect this for the security of the booking system and for dispute resolution — to verify that a booking, and any payment connected to it, was genuinely made — and we retain it with the booking record for those purposes only. This is collected as reasonably necessary for those legitimate uses under the DPDP Act, 2023.
• Other technical data: basic, standard web-server information needed to serve and secure the site. We do not use advertising or cross-site tracking cookies.

3. Why we use your information (purpose)

• To take, verify and manage your booking, and to contact you about it.
• To provide your stay and respond to your requests.
• To issue GST-compliant proformas, tax invoices and, where applicable, credit notes.
• To meet our legal, tax and accounting obligations.
• To keep records for security, dispute resolution and to improve our service.

4. Legal basis

We process your information to take steps at your request and to perform our booking contract with you, to comply with legal obligations (such as tax and hospitality rules), and, where relevant, on the basis of your consent (which you may withdraw). We collect only what is reasonably necessary for these purposes.

5. Who we share it with

We do not sell your personal information. We share it only as needed:

• Our property operations — the team hosting your stay.
• Email delivery — a transactional email provider (Brevo) is used to send your confirmation, proforma and invoice. Your name, email and document are processed for that delivery.
• Professional and statutory recipients — our accountants/auditors, and tax or government authorities where the law requires.

6. How long we keep it

We keep booking and financial records (including invoices and credit notes) for as long as required by Indian tax and company law — generally up to eight years — after which they are deleted or anonymised. Other personal data is kept only as long as needed for the purposes above.

7. How we protect it

Access to booking and financial data is restricted to authorised staff and protected by access controls. Our systems run on infrastructure we control, and generated documents are stored privately. No method of transmission or storage is perfectly secure, but we take reasonable technical and organisational measures to safeguard your information.

8. Your rights

• Access the personal information we hold about you, and ask us to correct or update it.
• Ask us to erase your information, subject to records we must retain by law (for example, issued tax invoices).
• Withdraw consent where processing is based on consent.
• Nominate another person to exercise your rights in the event of death or incapacity, as provided under the DPDP Act, 2023.

To exercise any right, contact our Grievance Officer with enough detail to identify your booking.

9. Children

Bookings are made by adults. We do not knowingly collect personal information from children except as part of an adult’s booking (for example, the number of children staying).

10. Grievance Officer & contact

Grievance Officer: [PLACEHOLDER — name]. Email: stay@stayoraholidays.com. Postal: Office No 205, 2nd Floor, Chokhani Square, Sec. 18, Noida, Gautam Buddha Nagar - 201301, Uttar Pradesh, India. We aim to acknowledge privacy requests promptly and to resolve them within the timelines required by law.

11. Changes to this policy

We may update this policy from time to time; the “last updated” date above reflects the current version.