Policies
Privacy
Last updated 10 October 2026
We collect the least we can, keep it only as long as it is useful or the law requires, and delete it on a schedule rather than when someone remembers to. This page sets out what that means.
01Who is responsible
This policy covers vamitaginn.com, our reservation system and the guest records we keep at the villa. VAMITAG Inn, Kufri, Shimla District, Himachal Pradesh, India, is responsible for your data. Our reservations are managed by Bookings & Bridges, whose booking system keeps reservation records on our behalf and uses them only to run our reservations. We handle personal data in line with Indian law, including the Digital Personal Data Protection Act, 2023.
02What we collect
When you make a reservation
- Your name, email address and telephone number
- Your dates, the rooms and meals chosen, and how many guests are staying
- Any note you add to the booking
When you pay
- The amount, the method and the date
- Where you pay by UPI or transfer and send a screenshot as proof, that image
When you arrive
- A government-issued photo identity document, which accommodation providers in India are required by law to record
When you ask us to email you a price
- Your name, email and phone number, and what you asked about — your dates, group size and the price
- The page you asked from, and how you reached our website
We use these details to answer what you asked. Asking for a price does not subscribe you to anything.
If you ask to hear from us
The price form carries a tick box, unticked, offering occasional offers and news. Ticking it is a choice of its own and the only thing that adds you to that list. We record the date you agreed and the exact words you agreed to. Every such email has a one-click unsubscribe link, which stops them at once and for good.
03Why we keep it
- To honour your reservation — to prepare rooms and meals, and to reach you if something changes.
- To take and check payment, and to answer questions about a charge later.
- To meet legal obligations — the guest identity and tax records Indian law requires.
- To reply when you write, call or message.
- To send offers and news — only to people who asked, and only until they ask us to stop.
We do not sell guest data, share it for anyone else's marketing, or build advertising profiles from it.
04Our website and cookies
We use two measurement tools to see which pages help guests and where they get stuck:
- Google Analytics counts visits and pages viewed, with approximate location and device type.
- Microsoft Clarity records how pages are used — clicks, taps and scrolling — so we can see what is confusing. Its standard setting masks what you type into forms.
Both set cookies. You can block them in your browser settings, and the booking pages work the same without them.
The booking pages also keep your dates, group size and details in your browser's own storage for the length of your visit, so a half-finished booking survives a reload. It stays on your device, and closing the tab clears it.
05Card details
We never see or store your card number. Where card payment is offered it is processed entirely by our payment gateway, and what comes back to us is the result and a reference — nothing more.
06How long we keep it
Deletion is automatic: a scheduled job runs every day and removes whatever has reached its date.
| What | Held for |
|---|---|
| Payment screenshots | 90 days after the payment is confirmed |
| Identity documents from check-in | 1 year after check-out |
| Reservation and payment records | As long as tax and accounting law requires |
| Price requests that did not become a stay | About 13 months, then deleted entirely |
When a payment screenshot or an identity document reaches its date, the image is deleted. The record that a payment was made stays, because our accounts must balance — but the picture is gone.
07Where it is held, and who can reach it
Guest records are held in an access-controlled database, and documents in private storage that cannot be reached from the public internet. Opening one creates a link that expires within the minute.
Access is limited to the people who need it to run the villa and its reservations, each with their own named sign-in. Views of an identity document are logged.
A few service providers help us operate: our database and storage host, our email delivery, our web host and, where used, our payment gateway. Each receives only what its job needs. We share guest data with nobody else, except where the law or a lawful authority requires it.
08Your rights
You may ask us to confirm what we keep about you and give you a copy; to correct anything inaccurate; to delete what we keep, where no legal obligation requires us to keep it; and to stop sending you anything other than messages about a live reservation.
Write to official@vamitaginn.com with the subject Privacy request. We reply within 30 days, and may first need to confirm it is you — which protects you rather than us.
09Children
Families are welcome, and a booking may name children. We collect their details only through the adult making the reservation, and keep no data given to us directly by a child.
10Changes, and how to reach us
When this policy changes in a way that matters, we update the date at the top of this page. Questions, concerns and requests all go to official@vamitaginn.com · +91 77188 90660.