Effective Date: 1 January 2025 Last Updated: 16 May 2026

1. Introduction

Khatu Bagh Resort (“KBR”, “we”, “us”, or “our”), managed by Maatritv Hospitality, is committed to protecting the privacy and personal data of our guests, website visitors, and enquirers. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

By using our website khatubaghresorts.com or making a reservation with us, you agree to the practices described in this policy.

2. Information We Collect

We may collect the following information:

Personal Information: Name, address, email ID, phone number, date of birth, gender, nationality, and ID proof details (as required by law for hotel check-in under the Hotel and Restaurants Act).

Booking Information: Check-in and check-out dates, room preferences, number of guests, special requests, dietary requirements, and health conditions requiring special accommodation.

Payment Information: We collect payment details to process bookings. Card details are processed through secure payment gateways and are not stored on our servers.

Website Usage Data: IP address, browser type, pages visited, time spent on site, and referring URLs — collected via cookies and analytics tools.

Communication Data: Enquiries, feedback, and messages sent to us via email, WhatsApp, or our contact form.

3. How We Use Your Information

We use your information to:

Process and confirm your reservations
Provide personalised services during your stay
Comply with legal requirements including guest registration mandated by Indian law
Send booking confirmations, pre-arrival information, and post-stay follow-ups
Respond to enquiries and special requests
Improve our website and services
Send promotional offers and newsletters — only with your explicit consent
Prevent fraud and ensure security

4. How We Share Your Information

We do not sell your personal data to any third party. We may share your information with:

Payment gateways — for processing transactions securely
Government authorities — as required by Indian law (e.g., police verification, GST compliance)
Service partners — such as travel agents or OTAs (MakeMyTrip, Booking.com) only when you book through them
IT service providers — who maintain our website and booking systems under strict confidentiality agreements

All third parties with whom we share data are bound by confidentiality obligations.

5. Cookies

Our website uses cookies to improve your browsing experience. Cookies help us remember your preferences and understand how you use our site. You can disable cookies through your browser settings, though some features of the website may not function correctly without them.

Types of cookies we use:

Essential cookies — required for the website to function
Analytics cookies — to understand visitor behaviour (Google Analytics)
Marketing cookies — for relevant advertising (only with consent)

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Password-protected systems
SSL encryption on our website
Restricted access to personal data on a need-to-know basis
Regular security reviews

While we take every precaution, no method of transmission over the internet is 100% secure. In the event of a data breach, we will notify affected individuals as required under applicable law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Guest registration records are retained as per statutory requirements under Indian hospitality regulations. Marketing data is retained until you withdraw your consent.

8. Your Rights

Under the DPDP Act 2023 and applicable Indian law, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete information
Request deletion of your data (subject to legal retention requirements)
Withdraw consent for marketing communications at any time
Raise a grievance regarding data handling

To exercise any of these rights, contact us at khatubaghresort@gmail.com or call +91 7898528125.

9. Children’s Privacy

We do not knowingly collect personal data from children under 18 years of age without parental consent. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

For any privacy-related queries or grievances:

Khatu Bagh Resort Sawalpura Road, Near Khatu Shyam Ji Temple, Khatu, Sikar, Rajasthan 332602 Email: khatubaghresort@gmail.com Phone: +91 7898528125