When you use our websites, we aim to make your experience engaging. In order to do this, we use cookies. Cookies are small text files that are sometimes downloaded on your computer or mobile device when you first visit our website so that, we can remember who you are.

Usually, cookies contain two pieces of information: a site name and a unique user ID. Cookies cannot be used alone to identify you, although they may be used to identify your IP address. Cookies help us and/or third-party websites recognize your device the next time you visit and may remember details such as your username and preferences, analyze how the website is performing, or allow us to recommend content we believe is relevant to you.

Essential: These temporary cookies only remain in the cookies folder of your browser until you leave our website.

Performance: These cookies are stored on your computer – they contain no personal information and are used to improve performance and assist in navigation. They remain in the cookies folder of your browser for longer than “Essential” cookies (dependent on your browser settings).

We use or allow third parties to serve cookies that fall into the categories above. We use Google Analytics to help us monitor our website traffic, and cookies may also be served via www.vaatalya.com or any of our subsidiary domains, online surveys, and online publications.

We may also use third-party cookies to help us with market research, revenue tracking, improving site functionality, and monitoring compliance with our Terms and Conditions and Copyright Policy as stated in our Terms and Conditions.

By using our website, you agree that we can place these types of cookies on your device. We may change ‘HOW WE USE COOKIES’ from time to time. It is your responsibility to check the policy regularly. You will be deemed to have accepted any amendments to the policy if you continue to make use of the website after a change to ‘HOW WE USE COOKIES’ has been made.

We have links to social networking websites (for example but not limited to: Facebook, Twitter, LinkedIn) from Vaatalya Mountain Retreat. These websites may place cookies on your computer. We do not control how they use their cookies. We suggest you check their website to see how they are using cookies.

For more information about cookies, visit www.aboutcookies.org which includes useful information on cookies and how to block cookies using different types of browsers. Please note that by blocking or deleting cookies, you may not be able to take full advantage of our websites.

We collect personal data when you

• Visit our Websites;

• Use Apps;

• Make a booking online

• Contact our Reservation Centre or Guest Services Teams;

• Provide payment details; or

• Use our wi-fi

• Fill in the online contact forms

We collect customer’s personal data for:

• Individuals making bookings

• Guests;

• Visitors;

• Anyone calling one of our phone numbers; and Business Contacts.

We also process personal data for employees and business contacts.

In most cases we collect and process personal information so that we can receive & respond to inquiries; make, amend & administer room bookings, process & store payment details, provide access to other products and services (such as meals), provide existing customers with information about our properties and to give them access to special offers and to gather customer feedback which helps us to improve the services that we offer and to improve our customers' experience whilst visiting or staying at one of our premises;

It is necessary, in order for us to confirm and manage a reservation, that we collect personal data. This will include:

• Your name

• Telephone or mobile number – in case of an emergency

• Gender

• Nationality

• Date of Birth

• Identification data i.e. Passport, Driving License details

• In some instances, we request Credit card details, including the three-digit code that appears on the back of your credit card

• Date of arrival and departure

• Email address

• We also require your credit card details to confirm your booking

Note: Upon arrival we will require the same information from your fellow travelers, please ensure they are all aware of this to ensure a quick and efficient check-in.

Vaatalya will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy. In some circumstances, we may retain your Personal Information for longer periods of time, for instance where we are required to do so in accordance with any legal, regulatory, tax, or accounting requirements.

Where your personal data is no longer required we will ensure it is either securely deleted or stored in a way that means it will no longer be used by the business

Vaatalya may use your data for marketing purposes, i.e. in order to inform you of its services which may, according to your past preferences, be of interest to you. These communications shall strictly adhere to applicable legal regulations.

Advertising and marketing materials of the Contracting or other parties shall be sent to you only if you opted-in for these communications during the registration process, via e-mail or otherwise.

Your decision about direct marketing may be withheld in accordance with the opt-out rules described in each marketing e-mail or other forms of communication. Opting-out can be done via changing the settings of your User account or by directly contacting Vaatalya (please see contact details below). Should you opt-out, Vaatalya shall retain only such data necessary for the provision of services in accordance with the rules set out in this policy.

Your personal data shall not be shared or provided without your consent to any third party except in the following situations: (a) data is necessary for the provision of services – for example, credit card details will be exchanged with your bank for your booking to be confirmed (b) Vaatalya is obliged to provide the personal data on the basis of law or upon order by a public authority, or (c) it is specifically allowed by applicable legal regulations.

By submitting your information to us, you consent to the use of that information as set out in our full Privacy Policy. At any point while we are in possession of your personal data you have the following rights:

• You have the right to object to certain types of processing such as direct marketing;

• You have the right to object to automated processing, including profiling;

• You have the right to request a copy of the information that we hold about you;

• You have the right to ask us to correct the data that we hold about you that is inaccurate or incomplete;

• In certain circumstances you can ask for the data we hold about you to be erased from our record;

• Where certain conditions apply you have the right to ask that we restrict the processing of your personal data;

• You may have the right to have the data we hold about you transferred to another organization;

• Right to judicial review: if Vaatalya refuses your request under rights of access. Note: we will always provide you with a reason as to why we have refused your rights request;

Note: Rights requests will be forwarded to a third party if one is involved in the processing of your personal data.

Vaatalya will make every effort to ensure that your personal data is stored securely.

The aim is to eliminate unauthorized or unlawful processing of your personal data or accidental, unauthorized, or unlawful access, use, transferring, processing, copying, transmitting, alteration, loss, or damage of your personal data. Despite all efforts and meetings, all rules set out by applicable legal regulations, it is not possible to guarantee the security of your data if it is transferred or transmitted in an unsecured way.

For this reason, we have introduced adequate physical, technical, and organizational measures and plans to protect and secure all information collected by our services

• Using Cryptography, where necessary;

• Using password protection, where necessary; and

• Restricting access to your personal data (i.e. access to your personal data is granted only to those employees or personnel for whom the access is indispensable for the purposes described in this document and in our full privacy policy).

We require that our partners, who provide supporting services that help us to store and otherwise process your personal data, apply the same high level of protection to your data.

Note: These measures do not remove your duty to secure your own personal data. You should, inter alia, regularly change your passwords and should never use predictable usernames and/or passwords, share your password with other persons, or grant access to your User account and/or disclose your personal data to other persons.

Vaatalya shall, from time to time, change and update the terms of this Privacy policy. These changes will be posted on the website: www.vaatalya.com

Should you wish to know more about Vaatalya, its protection of your privacy, or about this Privacy policy, you can contact Vaatalya at hello@vaatalya.com

Please help Vaatalya ensure that your data is up-to-date. If you believe that some of the data processed by Vaatalya are incorrect, please contact Vaatalya at hello@vaatalya.com

Please contact Vaatalya on hello@vaatalya.com if there are any data privacy and protection matter with which you are dissatisfied.