1. Information We Collect

We may collect the following types of information:

Personal Information

• Name, email address, phone number, and WhatsApp number
• Government-issued photo ID (Aadhaar, Passport, Voter ID, or Driving Licence) for check-in compliance
• Payment information (processed securely via Razorpay — we do not store full payment credentials)
• Booking details including dates, number of guests, and special requests

Non-Personal Information

• IP address, browser type, device information, and operating system
• Pages visited, time spent on the Site, and referral sources
• Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information

We use your information to:

• Process and confirm your bookings
• Communicate with you regarding your booking (via WhatsApp, SMS, email, or phone)
• Comply with legal and regulatory requirements (including guest registration)
• Send promotional messages and offers (only where you have opted in)
• Improve our services, website, and guest experience
• Manage and respond to your inquiries and grievances
• Prevent fraud and ensure the security of our Site and Properties

3. Sharing Your Information

We may share your information with:

• Third-Party Service Providers: Razorpay (payment processing), Superfone and Heyo (communications), and other partners who assist in operating our business. These parties are bound by their own privacy policies.
• Legal Authorities: When required by law, regulation, or legal process, or to protect the rights, property, or safety of Zoy Tours, our guests, or others.
• Property Staff: Relevant staff at the specific Property you are booking to facilitate your stay.

We do not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

4. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:

• Secure SSL encryption for data transmission on our Site
• Payment processing through Razorpay (PCI-DSS compliant)
• Access controls to limit internal access to personal data
• Regular security assessments and monitoring

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Booking Records: Retained for a reasonable period to comply with legal, accounting, and reporting requirements.
• Guest Information: Retained as required by hospitality regulations in India.
• Marketing Data: Retained until you opt out or request deletion.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small data files stored on your device that help us:

• Understand how you use our Site
• Remember your preferences and settings
• Improve site performance and functionality
• Analyze traffic and user behavior

You can control cookie preferences through your browser settings. However, disabling cookies may affect your experience on our Site.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal and regulatory obligations.
• Opt-out: Opt out of promotional communications at any time by following the unsubscribe instructions in our messages or contacting us directly.

To exercise any of these rights, please contact us using the details in Section 11.

8. Third-Party Links and Services

Our Site may contain links to third-party websites or services, including:

• Razorpay (payment processing)
• Superfone and Heyo (communications)
• Third-party travel platforms (e.g., booking aggregators)

We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the most recent changes were made. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: