Privacy Policy for saraniresort.com
1. Introduction
At Sarani Resort (“we,” “us,” or “our”), accessible at saraniresort.com, we are fully committed to safeguarding your privacy and protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and store your data when you interact with our website and services. We take a proactive, privacy-first approach to data protection and operate in a manner that complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws and regulations.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all data collected via saraniresort.com and related services. For the purposes of the GDPR, Sarani Resort is the Data Controller for any personal data provided through our website, meaning we determine the purposes and means of processing your personal data. For residents of California, this policy also covers all consumer information as defined under the CCPA.
3. Categories of Data We Process
We collect and process the following categories of personal data:
a) Usage Data
Includes information such as your IP address, browser type, language settings, referring URLs, pages viewed, date and time of access, and other analytical data related to your behavior on saraniresort.com.
b) Account Data
Personal identifiers provided when creating an account or making a booking, such as your full name, residential address, email address, and phone number.
c) Profile Data
Includes preferences, past purchases, browsing and booking behavior, feedback, interests, and other personal settings within your profile.
d) Communication Data
Information shared through inquiries, support requests, customer service interactions, and messages exchanged with our team.
e) Technical Data
Device-related data such as operating system, device type, browser version, unique device identifiers, and system configurations.
f) Transaction Data
Details related to purchases, including payment method used, billing address, booking confirmation numbers, delivery details, and history of financial transactions.
g) Preference Data
Marketing communication preferences, email subscription status, product and room interest categories, and opt-in consents for promotional materials.
4. Legal Bases for Processing
Your personal data is processed based on one or more of the following legal bases:
– Contractual Necessity: To fulfill bookings or provide services you request.
– Legitimate Interests: To improve and secure saraniresort.com, detect fraud, and enhance user experience.
– Legal Obligations: To comply with regulatory requirements or respond to lawful requests.
– Consent: For marketing communications, optional cookies, and other non-essential processing activities (you may withdraw consent at any time).
5. Your Data Protection Rights
Under applicable laws such as the GDPR and CCPA, you have the following rights:
– Right of Access: Obtain a copy of your personal data and information about its processing.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Ask for deletion of your personal data where legally permitted.
– Right to Restriction: Limit the processing of your data under certain circumstances.
– Right to Data Portability: Receive personal data in a structured, commonly used format to transmit to another controller.
– Right to Object: Object to processing conducted under legitimate interest or for direct marketing purposes.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We maintain robust technical and organizational measures to ensure a high level of data security, including:
– Encryption of data in transit and at rest.
– Access controls to ensure only authorized personnel can access personal data.
– Regular system backups and business continuity protocols.
– Periodic security and privacy training for employees and subcontractors.
7. International Data Transfers
Personal data may be transferred to and processed in countries outside your jurisdiction, including the United States. Where applicable, we use approved Standard Contractual Clauses or rely on other legally valid data transfer mechanisms to ensure an adequate level of data protection, in compliance with GDPR requirements.
8. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy, or as required by applicable laws:
– Usage and Technical Data: Typically retained for up to 12 months for analytics and website functionality.
– Account, Communication, and Transaction Data: Retained for up to 7 years for service and legal purposes.
– Profile and Preference Data: Retained as long as your account remains active and for up to 2 years thereafter.
– Marketing Consent Information: Retained until consent is withdrawn or the data becomes obsolete.
9. Cookie Policy
Saraniresort.com uses cookies and similar technologies to enhance and personalize user experiences. These include:
– Essential Cookies: Necessary for the operation of the website (e.g., login sessions).
– Functional Cookies: Enable advanced features and remember preferences.
– Performance Cookies: Help us understand site usage to improve performance.
– Analytical Cookies: Gather information such as page views and bounce rates.
Some cookies are placed by third-party services embedded on our site. All non-essential cookies are used only after capturing your explicit consent as required by law.
10. Cookie Management and Compliance with GDPR & CCPA
You may manage cookie preferences directly from our website via the cookie banner and settings panel. You can also adjust your browser settings to block or delete cookies. Under the CCPA, California residents have the right to opt out of the sale or sharing of their personal information collected through cookies or similar tracking methods.
If you wish to exercise cookie-related rights or request opt-out mechanisms, please contact us at [email protected] or visit applicable links in our cookie settings.
11. Children’s Privacy
Saraniresort.com and its services are not directed to children under the age of 13. We do not knowingly collect personal data from minors without parental or legal guardian consent. If we learn that we have inadvertently processed such information, it will be promptly deleted. Parents or guardians who believe their child has provided us with personal data may reach out to [email protected] to request deletion.
12. Policy Updates and User Notifications
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our practices. Any material changes to our privacy practices will be communicated via our website or directly via email when appropriate. Continued use of saraniresort.com after updates constitutes acceptance of the revised policy.
13. Contact Information
If you have any questions regarding this Privacy Policy, your personal data, or wish to exercise your data protection rights, you may reach us directly at:
Email: [email protected]
Website: https://saraniresort.com
We are committed to transparency, data protection, and compliance with global privacy standards. Please do not hesitate to contact us if you have any privacy concerns or require further information.