Privacy Policy

This policy covers zarastays.com, plan.zarastays.com and partner.zarastays.com. Zarastays is responsible for deciding how the personal data described here is used. We use your enquiry to understand your requirements, reply to you and carry out the advisory work you request.

What each property collects

The main website has no enquiry form. You choose whether to send information through its phone, email or WhatsApp links. We then receive the details you share through that service. Netlify, our host, receives the connection information needed to serve pages, including an IP address and request details.

On Plan with us, you first choose the kind of help you need: a wedding, corporate event, stay, venue or supplier. The questions collect your selected location, date or flexible period, guest or delegate numbers, room needs, event or stay preferences, budget and other requirements relevant to that choice. A location outside the listed choices can be entered as text. Your answers are saved as a draft on your device as you proceed.

The Plan contact step collects your name, WhatsApp number and email. City is optional. A corporate enquiry also asks for your company name and job title. Later choices and optional details, where offered, add to the same brief.

On Partner with us, you choose the services or property you offer. The business step asks for the business name and city, with an optional website or Instagram handle. The relevant questions collect details such as accommodation, event space, capacity, location, services, facilities, prices, commission, flexibility and cancellation terms. An optional short note lets you describe another strength. The contact step asks for the representative's name, WhatsApp number, email and job title.

At both contact steps, we record acceptance of the applicable Version 2.0 terms and this policy, the acceptance time in Indian Standard Time, permission to reply to the enquiry, and your separate optional marketing choice. We also record a reference number, the selected type of enquiry, submission time, completion time and status, along with source, campaign or referral information carried by the link you used.

Drafts and unfinished enquiries

Before the contact step is completed, answers are saved locally in your browser. After you complete that step, partial responses can be retained and sent to the Zarastays team even if you leave without making a final submission. We use them to follow up on the enquiry you asked us to discuss. A completed record and any pending retry are also kept on your device so the confirmation and recovery routes can work.

Why we use the information

We use the details you provide to respond to your request, assess a partner submission, prepare and discuss suitable options, and administer an agreed engagement. Where GDPR or UK GDPR applies, the basis for responding to an individual who asks about our services is taking steps at that person's request before a contract, or performing the agreed contract. For a business representative, our legitimate interest is communicating with that business about its request. We limit that use to information needed for the enquiry and consider the person's interests and rights.

Where consent is the required basis under India's Digital Personal Data Protection Act 2023 or other applicable law, we seek it for the stated purpose and allow it to be withdrawn. Security, preventing abuse and maintaining reliable enquiry records support our legitimate interests where that basis is available. We also retain information needed to meet legal obligations or establish, exercise or defend a claim. We explain any such limit when responding to a request.

Occasional planning guidance and offers require your separate optional permission. Accepting terms or asking us to reply to an enquiry does not sign you up for marketing. You can withdraw marketing permission at any time by emailing info@zarastays.com or telling us on WhatsApp. Withdrawal does not affect the lawfulness of earlier processing.

How enquiries are reviewed

The tools calculate internal routing scores from the answers, including requirements, timing, budget and suitability. These help the team organise its follow-up and review. They do not determine the advice you receive, and no decision producing legal effects is taken by automated means alone. You can ask for a person to review your information or correct an answer.

Who receives information

Google Workspace, Google Apps Script and Google Sheets provide the storage and notification route for enquiry records and team follow-up. Netlify hosts the three websites. Google Analytics and Meta provide measurement processing when enabled under the controls below. Their services may also process information for their own purposes under their terms. Access by the Zarastays team and its professional advisers is limited to work that requires it.

We do not pass a customer's contact details to a venue, hotel or supplier without the customer's instruction. We can ask suppliers about availability and prices using unnamed requirements. Partner commercial information is kept confidential under the Partner Terms; it is not disclosed to another property, supplier or customer. Disclosures to service providers, advisers or authorities follow the limits in those terms.

Video previews request thumbnail images from Google when they enter view. If you choose a WhatsApp, social media or video link, the provider receives the information needed for that interaction and applies its own privacy terms. Do not send identity documents, payment details, medical records or sensitive personal information through the intake tools. If an accessibility or dietary requirement needs sensitive information, contact the team so we can agree what is necessary and obtain any additional consent required.

Cookies and measurement

Google Analytics measures visits and interactions across the three properties. Meta measures page views and eligible enquiry or contact events for advertising attribution. These services can receive page and event information, browser or device information and online identifiers. The enquiry tools do not send your name, phone number, email or full answers as analytics event parameters.

In the listed EEA, EFTA, UK and Swiss consent regions, analytics and marketing remain off until you choose. Outside the listed regions, including India, analytics and marketing are enabled by default and can be switched off at any time using Privacy choices in the footer of any page or on the cookie notice page. A browser's Global Privacy Control signal switches the marketing default off in both region modes. Use Cookie Notice and Privacy choices to see the storage register and change your browser choices. These controls are separate from permission to receive marketing messages.

How long information is kept

Our retention period for briefs, partner files and related correspondence is three years from the last interaction. A record can be kept longer while a partner relationship continues, a claim remains open, or tax, accounting or another legal obligation requires it. Information that is no longer needed is deleted or anonymised through our record-management process.

Local drafts, confirmation records and delivery recovery records remain in the browser until replaced, removed by the tool or cleared through the browser's site-data controls. Browser data is separate from records already received by the team. Ask us to erase or correct those records using the contact details below.

Transfers and protection

We operate from India. Our hosting, communications and measurement providers can process information in India and other countries. Where GDPR or UK GDPR applies to a restricted transfer, the transfer must use an applicable adequacy decision or approved contractual safeguards and any additional measures required by law. You can ask us about the safeguards that apply to your information. We do not describe the hosting route as storage only in India.

We use encrypted website connections, browser security controls and access limited to those who need the records. No internet service can promise absolute security. If a personal data breach requires notice to you or a regulator, we will provide that notice within the applicable legal deadline.

Your choices and rights

We apply the stronger protection where the DPDP Act 2023, GDPR and UK GDPR differ in their protection of your information, subject to mandatory law. You can ask for access and a copy of your personal data, information about its use and recipients, correction or completion, erasure, restriction of use, and a portable copy of information you provided where the applicable conditions are met. You can object to processing based on legitimate interests, and object to direct marketing at any time.

You can withdraw consent as easily as you gave it. This may mean we cannot continue work that needs that information. You can nominate another person to exercise applicable DPDP rights in the event of death or incapacity. A representative may contact us with evidence of their authority.

Email info@zarastays.com or use the phone or WhatsApp number below. Tell us the right you want to exercise and, if available, your enquiry reference. We ask only for the information needed to verify the request and protect another person's data. Rights requests are normally free. We respond without undue delay and within one month, or sooner where applicable law requires. If a permitted extension or legal exception applies, we explain the reason and your complaint options.

Grievances and complaints

We acknowledge a grievance within 60 hours and give a substantive response within 15 working days. You can also complain to the competent data protection authority. In India, the DPDP grievance process includes approaching us first and then the Data Protection Board of India as the applicable provisions permit. In the UK, you can contact the Information Commissioner's Office. In the EEA, you can contact the supervisory authority where you live, work or believe an infringement occurred. Your consumer remedies remain protected.

Age and updates

These properties are not directed at anyone under 18. A parent or guardian should contact Zarastays on behalf of a minor. Tell us if a child has supplied personal data so we can address it. We publish changes to this policy here with the effective date and provide any additional notice or consent request required for a material change.

Read the DPDP Act 2023 and the ICO guide to data protection rights.

Identity and grievance contact

Zarastays
Delhi National Capital Region, India

info@zarastays.com
+91 95605 65155
WhatsApp +91 95605 65155

For a grievance, please describe the concern and include your enquiry reference if you have one. We acknowledge receipt within 60 hours and give a substantive response within 15 working days.