Privacy Policy

1. Scope & who we are

V3stay is a family-run hospitality brand curating heritage villas and experiences in India. This policy explains how we collect, use, disclose and protect personal information when you browse our site, make an enquiry (including via WhatsApp), or complete a booking.

This page is for transparency and convenience. It isn’t legal advice. Some terms (for example, payments and booking engines) are provided by trusted partners who maintain their own privacy notices.

2. Information we collect

Payment card details are processed by our payment partners (e.g., Razorpay/Stripe) and are not stored on V3stay servers.

3. How we use information

• To respond to enquiries, propose suitable villas for 14–20 guests, and manage reservations.
• To send confirmations, reminders, invoices/receipts, and essential stay updates.
• To arrange experiences (chef, activities) and coordinate with our on-site caretakers.
• To improve our website, service quality and safety.
• With your consent, to send offers or updates—you can opt out anytime.
• To comply with legal or tax obligations and prevent misuse or fraud.

4. Legal bases

Depending on context, we rely on one or more of the following:

• Contract: to provide enquiry responses, quotes and bookings you request.
• Consent: for optional marketing and some analytics/cookies.
• Legitimate interests: to ensure site security, quality control and customer support.
• Legal obligation: for tax, accounting or guest-registration rules where applicable.

5. Sharing & processors

We don’t sell personal data. We share it only with trusted partners who help us run V3stay, each under appropriate safeguards:

• Booking engine / PMS: RentalWise (availability, reservations, calendar sync).
• Payments: PCI-compliant gateways (e.g., Razorpay/Stripe) for secure transactions.
• Website & hosting: Wix (site infrastructure) and related hosting/CDN.
• Email & messaging: Email service providers and WhatsApp for communications you start or consent to.
• Analytics: Privacy-respecting analytics and tag tools to understand site usage.
• Local partners: Caretakers, experience providers or property owners—limited to what’s necessary to fulfil your stay.

Each partner maintains its own security and privacy commitments. Their policies may apply when you use their widgets or hosted pages.

6. Retention

• Enquiries: typically up to 24 months for service history and follow-ups.
• Bookings & invoices: up to 7 years to meet accounting and legal obligations.
• Marketing consent records: until you opt out or the list is refreshed.

We keep data longer only if required by law or to resolve disputes.

7. Security

We use administrative, technical and physical safeguards such as role-based access, HTTPS/TLS, tokenized payments and staff SOPs. No method is 100% secure; we continuously improve and act swiftly if we become aware of an issue.

8. Your rights

Subject to applicable law, you may have rights to:

• Access a copy of your data and learn how it’s used.
• Correct, update or delete certain data.
• Withdraw consent (e.g., marketing) without affecting prior lawful use.
• Object to or restrict certain processing, or request portability.
• Lodge a complaint with a data protection authority.

To exercise these rights, see Contact below. We’ll verify your request to protect your data.

9. Cookies & tracking

We use necessary cookies for security and booking features, plus optional analytics/marketing cookies with consent controls. Learn more or manage preferences in our Cookie Policy.

10. Children’s privacy

V3stay is intended for adults (18+). We do not knowingly collect data from children without appropriate consent/authorization required by law.

11. International transfers

Our partners and servers may operate across countries. When data moves internationally, we apply safeguards such as contractual protections and secure transfer tools to keep your information safe and lawful.

12. Changes to this policy

We may update this notice as our services or regulations evolve. We’ll revise the “Last updated” date and, when appropriate, provide additional notice.

13. Contact & grievance