Privacy Policy

Baasthan Stays, operated by Baasthan Estate Private Limited (“we”, “us” or “our”), respects the privacy of our guests and website visitors. This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information in connection with our website, booking enquiries, reservations, identity verification, customer support, and accommodation services. We handle personal information in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the rules and provisions applicable to the relevant processing activity at the time.

Depending on how you interact with us, we may collect the following information: A. Booking and contact information: • Name and contact details, including telephone number and email address. • Booking dates, accommodation selection, number of guests, and reservation reference. • Arrival details, approved special requests, and communications with management. B. Identity and registration information: • Details from an acceptable identity document, such as name, photograph, document type, and relevant identification details, where required. • Information about occupants, including details necessary for lawful registration and verification. • Additional details required by applicable law for particular guest categories, including foreign nationals where relevant. C. Payment and transaction information: • Booking amount, transaction reference, payment status, applicable taxes, and refund records. • Payment information processed by an authorised payment service provider. • We do not intend to collect or retain complete card credentials, PINs, or payment passwords through ordinary booking enquiries. D. Technical and website information: • Device, browser, IP address, security logs, and basic website usage information, where collected. • Cookie and analytics information, subject to the relevant consent and legal requirements.

We may use personal information to: • Respond to enquiries and process, confirm, manage, or amend bookings. • Verify guest identity and the number of occupants. • Meet applicable accommodation registration, reporting, tax, accounting, and lawful recordkeeping obligations. • Process payments, cancellations, refunds, and customer support requests. • Communicate check-in instructions, safety information, and relevant booking updates. • Prevent fraud, investigate suspected misuse, protect property and guests, and address disputes. • Maintain website security, improve services, and understand website performance. • Comply with lawful requests from competent authorities. • Send promotional communications where permitted and, where required, with consent. We will not use personal information for purposes that are incompatible with applicable law or the disclosed purpose without an appropriate lawful basis.

Where required by applicable law, we will obtain consent or rely on another legally recognised basis for processing personal information. We may process information where necessary for a booking requested by you, compliance with legal obligations, or other lawful purposes permitted under applicable legislation. Where consent is required, you may withdraw it through the method made available by us. Withdrawal does not invalidate processing already lawfully undertaken and may affect our ability to provide a service where the information is genuinely necessary and no alternative lawful basis is available.

We may share relevant information, as necessary and lawful, with: • Booking platforms and online travel agencies through which a reservation is made. • Payment gateways, banks, and transaction-processing providers. • Technology, hosting, email, and customer-support service providers acting on our behalf. • Professional advisers, insurers, or other service providers where necessary for legitimate operational or legal purposes. • Police, government departments, courts, or other competent authorities when required or permitted by law. We do not sell guests' personal information to third parties as a commercial data product. Third-party booking platforms and payment providers may process information under their own privacy policies. Guests should review those policies when using their services.

We request identity information only to the extent reasonably necessary for verification, booking administration, security, and legal compliance. We aim to minimise collection, restrict access, and avoid retaining full document images where recording the necessary details is sufficient. Where a document copy or additional record is legally required or otherwise lawfully necessary, it will be handled under appropriate safeguards. Aadhaar is not intended to be the sole mandatory form of identification for every guest. Where appropriate, an alternative valid government-issued identity document may be offered, subject to the applicable registration requirements.

We retain personal information only for as long as reasonably necessary for the relevant purpose, including: • Completing and administering reservations. • Maintaining tax, accounting, and transaction records. • Complying with applicable accommodation registration and reporting requirements. • Handling complaints, legal claims, fraud investigations, or disputes. • Meeting other legally required retention periods. When information is no longer required, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, subject to lawful retention obligations and any applicable legal hold. Specific retention periods may vary according to the type of record and applicable legal requirements.

We will take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, and misuse. Access should be limited to personnel and service providers who need the information for authorised purposes. However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. Where a personal-data breach triggers a legal notification requirement, we will take the steps required by applicable law.

Our website may use essential cookies or similar technologies to support security, session management, and core website functionality. Analytics or advertising technologies may also be used if implemented. Where consent or additional disclosure is legally required, we will provide an appropriate notice and consent mechanism. You may be able to manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

Subject to applicable law and its effective provisions, you may have the right to: • Request information about the personal data we process about you. • Request correction or updating of inaccurate or incomplete information. • Request erasure of personal data where legally applicable and no retention obligation overrides the request. • Withdraw consent where processing relies on consent. • Raise a grievance or complaint regarding the handling of your information. • Exercise other rights available under applicable data-protection law. To submit a request, contact stays@baasthan.com. We may need to verify your identity before responding.

Bookings involving minors must be made or managed by a parent, guardian, or other responsible adult where appropriate. We will handle children's personal information in accordance with applicable law, including any requirements concerning verifiable parental consent or restrictions on particular processing activities, where those requirements apply. We will not knowingly use children's information for prohibited tracking, behavioural monitoring, or targeted advertising.

Our website or communications may link to third-party websites, booking platforms, maps, or payment services. We do not control the privacy practices of independent third parties. Their own policies govern their processing of information.

Where personal information is processed or transferred outside India by our service providers or booking partners, such processing will be subject to applicable Indian law and any relevant restrictions or safeguards in force.

For privacy questions, correction or erasure requests, consent withdrawal, or complaints, contact: Privacy Contact — Baasthan Stays Baasthan Estate Private Limited Purnea, Bihar, India Email: stays@baasthan.com Phone: 99347 61153 We will acknowledge and address requests within the timelines prescribed by applicable law or, where no specific timeline applies, within a reasonable period. If a statutory grievance or appeal mechanism applies, we will provide the relevant details as required.

We may update this Privacy Policy to reflect changes in our services, systems, or applicable law. The revised version will be published on our website with an updated revision date.

Website: https://baasthan.com Email: stays@baasthan.com Phone: 99347 61153