Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how Hotel Sahana & Restaurant ("we", "us", "the hotel") collects, uses, stores and protects your personal data when you use our website https://hotelsahana.in, our mobile app, or stay with us. We process personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

By using our website or app, or by making a booking, you consent to the processing of your personal data as described here.

1. Data we collect

• Contact details: name, mobile number, email address and address.
• Booking details: stay dates, room type, number of guests, special requests and booking history.
• Identity documents: a government-issued photo ID (such as Aadhaar, PAN, passport, driving licence or voter ID) for each adult guest, which hotels in India are required to verify and record. If you upload your ID in advance through your account or app, we store a copy of it.
• Payment information: amount, payment status and transaction reference. Card, UPI and bank details are entered directly with our payment gateway, Razorpay, and are not stored by us.
• Login data: your mobile number and one-time passwords (OTP) used to sign in.
• Device and usage data: IP address, browser type, device information, cookies and, for the app, a push-notification token.
• Messages: anything you send us through the contact form, email or phone.

2. How we use your data

• To confirm, manage and service your booking and stay.
• To verify your identity at check-in and meet legal obligations, including guest-register and police/Foreigners Regional Registration Office (Form C) reporting where applicable.
• To process payments, refunds and issue GST invoices.
• To send booking confirmations, reminders, OTPs and service messages by SMS, email or push notification.
• To reply to your enquiries and provide customer support.
• To keep our website and app secure and prevent fraud or misuse.

We do not sell or rent your personal data. We do not send promotional messages without your consent.

3. Sharing your data

We share personal data only as needed with:

• Service providers who help us operate: payment gateway (Razorpay), SMS and email providers, push-notification services (Google Firebase) and our web hosting provider. They may use the data only to provide their service to us.
• Government and law enforcement authorities when required by law, court order or legal process.

4. Cookies

Our website uses essential cookies to keep you signed in, remember your booking progress and protect forms from misuse. We do not use advertising cookies. You can block cookies in your browser, but some parts of the site may then not work.

5. How long we keep data

We keep booking and invoice records for as long as required by tax and hotel-registration laws (generally up to 8 years). Identity documents uploaded in advance are kept only as long as needed for your stays and legal compliance; you may delete an uploaded ID from your account at any time before check-in. Other data is deleted or anonymised when no longer needed.

6. Security

We use HTTPS encryption, access controls and secure hosting to protect your data. No online system is completely secure, but we take reasonable steps to prevent unauthorised access, loss or misuse.

7. Your rights

Subject to applicable law, you may:

• access a summary of the personal data we hold about you;
• correct or update inaccurate data (you can edit your profile in your account);
• request erasure of data that we are not legally required to keep;
• withdraw consent (this may mean we can no longer provide some services);
• nominate another person to exercise these rights in case of death or incapacity;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise these rights, contact us using the details below. We will respond within 30 days.

8. Children

Our services are meant for adults. Bookings must be made by a person aged 18 or above. Children's details are collected only as part of an adult's booking.

9. Grievance Officer

For any complaint or concern about your personal data, please contact our Grievance Officer at stay@hotelsahana.com or +91 91530 86755. We will acknowledge your complaint within 48 hours and resolve it within 30 days.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the "Last updated" date.

Contact us