Back to Home

Privacy Policy

Effective Date: June 4, 2026. This policy governs data collected on our websites, mobile applications, and physical channels.

Overview & Scope

This Privacy Policy describes how Kaara Hospitality & Leisure Pvt. Ltd. (“Kaara Hotels”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you interact with us through our digital touchpoints.

Applicability

  • Visiting our official website: www.kaarahotels.com
  • Utilizing our Android mobile application
  • Utilizing our iOS mobile application

By accessing or using our website or mobile applications, you agree to the terms and practices detailed in this Privacy Policy.

1. Information We Collect

To provide our premium hospitality services, customize your experience, and facilitate bookings, we collect various categories of data.

APersonal Information

We collect direct personal details when you create an account, make reservations, or communicate with us:

  • ContactFull name, contact number, postal address (city, state, ZIP/postal code) and email address.
  • DemographicDate of birth, gender, occupation, country of origin, educational and/or employer details.
  • Account CredentialsUsername, password, security questions & answers configured on our website/app.
Third-Party Consent: If you share personal information of any other individual (such as family or friends), you confirm that you have obtained their explicit consent to do so.

BPayment & Transaction Information

When you process a booking transaction on our platform:

  • Payments are processed securely via Razorpay and PayU, which are PCI-DSS compliant third-party payment gateways.
  • We receive transaction confirmation tokens and details for booking verification and accounting.
  • We do not store or process your complete card numbers, UPI credentials, or online banking details on our servers.

CApp Usage & Device Information

When interacting with our mobile applications and website, we collect:

  • Booking history and in-app activity tracking
  • Unique device identifiers (such as Device ID)
  • Diagnostic details and crash logs

This metrics data is strictly used for ensuring system security, performance tuning, and service refinement.

DLocation Information

If you grant location permissions on your browser or device, we may gather approximate location data (such as city or region) to:

  • Display properties nearest to your current location
  • Improve overall booking relevance and filters

Location access is entirely optional and can be disabled anytime via your device/browser permission settings.

EWebsite Cookies & Tracking Technologies

Our website uses cookies to:

  • Retain user choices and language/display preferences during a session
  • Facilitate smooth checkout and booking flows
  • Track and evaluate anonymous visitor traffic and aggregate metrics

Cookies do not expose your real-world identity and automatically expire once your session terminates. You can configure your browser settings to reject cookies; however, this may impair booking functions.

FCareers Section

Our website hosts a Careers section. Any personal data, professional histories, and resumes uploaded or sent via our recruitment email channels will be handled in full accordance with the protections of this Privacy Policy.

2. Purpose of Data Use

We process your information based on legitimate commercial interests, execution of contracts, and compliance with statutory laws, specifically to:

  • 1Initialize, update, and manage secure user accounts.
  • 2Fulfill hotel room bookings, auxiliary reservations, and payment settlements.
  • 3Send booking receipts, confirmation vouchers, changes, and marketing announcements.
  • 4Deliver client support, answer complaints, and troubleshoot issues.
  • 5Refine and upgrade website responsiveness, app layout, and guest experiences.
  • 6Verify identity, detect or prevent fraud, and comply with safety guidelines.

Additional Purposes:

If we ever need to use your personal information for a reason not already mentioned in this policy, we will clearly inform you of that purpose at the time we collect the information and, where required by law, explain the legal basis for doing so.

3. Sharing of Information

We respect your privacy rights. We only disclose personal information on a strictly controlled, need-to-know basis with verified third parties:

Service Providers
  • • Payment Gateways (Razorpay/PayU)
  • • Cloud hosting infrastructure & server hosts
  • • Diagnostics, performance analytics & crash monitors
  • • Communication tools (SMS gateways and email servers)
Internal Operations
  • • Holding companies, parent corporations, and group affiliates
  • • Shared for operational, accounting, and system management purposes
Zero Sale Guarantee

We do not sell, rent, or trade your personal information to marketing brokers or third parties.

4. Marketing Communications

We keep communications clear, direct, and non-intrusive:

  • Transactional updatesYou will automatically receive transaction receipts, room vouchers, and critical security warnings. These are necessary to execute booking agreements.
  • Promotional updatesWhere marketing materials, newsletters, or seasonal rates are sent, we provide a prominent, single-click opt-out option (such as "Unsubscribe") at the bottom of the email.
  • Strict Spam ControlsWe do not send unsolicited emails solely because you conducted a booking on our website or mobile apps.

5. Data Security

We are dedicated to safeguarding the data you share with us. To protect your information against unauthorized alteration, disclosure, loss, or access, we employ robust, industry-standard protocols:

SSLEncrypted Transit

All client-server communications use SSL/HTTPS data encryption protocols in transit.

ACAccess Controls

Strict multi-factor authentication and database-level access logs limit internal viewing.

PCICompliant Partners

Collaboration with PCI-DSS validated hosting and financial transaction processors.

While we apply reasonable safeguards, no transaction over the internet or database storage mechanism can be guaranteed to be completely secure.

6. Data Retention & Deletion

We retain your information only as long as required for accounting purposes, execution of booking services, legal defense, and compliance:

  • Operational & Compliance Needs: Data is archived according to our internal schedules and deleted or anonymized once it is no longer required.
  • User-Initiated Deletion: You may submit account and personal data deletion requests. We will act on these subject to legal retention overrides.
  • Statutory Retention: Certain backup metrics or transaction receipts must be retained under applicable corporate or tax laws.

7. User Rights & Choices

You hold complete control over your private information. Under our policies, you can request:

01. Access & Review

Request summaries of what files we hold, verify accuracy, or update profile contact info.

02. Revocation

Withdraw consent for secondary activities (location, cookies, marketing emails).

03. Erasure

Request complete account deletion and erasure of historical records from our servers.

Submit deletion or review requests to our privacy officer by email at care@kaarahotels.com.

7A. DPDP Act, 2023 Compliance (India)

DPDP Act, 2023 Compliant

Digital Personal Data Protection Act

Kaara Hospitality & Leisure Pvt. Ltd. complies with the provisions of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules thereunder. We collect, process, store, and use personal data only for lawful purposes, with your consent or as otherwise permitted under applicable law.

Your statutory rights as a Data Principal:
  • Right to access summary of your personal data and processing activities.
  • Right to correction, completion, and erasure of your personal data.
  • Right to withdraw consent at any time for optional data processing.
  • Right to nominate another individual in the event of death or incapacity.

Grievances and rights requests will be processed and resolved in accordance with the timelines and rules prescribed under the DPDP Act.

9. Policy Updates

This Privacy Policy may be updated periodically to account for new services, operational adjustments, or changing compliance requirements.

Consent to Updates:Continued access or use of our website and mobile applications after changes have been posted constitutes an active acceptance of the updated policy terms.

10. Contact Us

If you have questions, queries, unresolved complaints, or data principal requests, please contact our administrative offices:

Kaara Hospitality & Leisure Pvt. Ltd.

Corporate Office: 408, DLF Corporate Greens, Sector 74A, Gurgaon – 122004

Support & Grievances Emailcare@kaarahotels.com