1. Introduction

This Privacy Policy applies to all personal information collected by Arista By Ambition through our website, mobile applications, reservation systems, and during your stay at our hotel. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following types of personal information:

• Personal Details: Name, address, email address, phone number, nationality, and identification details (passport, Aadhar card, driving license, etc.)
• Booking Information: Reservation details, length of stay, preferences, and special requests
• Payment Information: Credit/debit card details or billing information (processed securely through encrypted channels)
• Usage Information: Website usage data, IP address, cookies, and device information
• Guest Preferences: Room preferences, dietary requirements, and service preferences
• Communication Data: Records of correspondence between you and our hotel

3. How We Use Your Information

We use personal information for the following purposes:

• To process reservations and provide hotel services
• To communicate with guests before, during, and after their stay
• To improve our services and guest experience
• To process payments and prevent fraud
• To comply with legal and regulatory obligations
• To send promotional offers and newsletters (only with your explicit consent)
• To personalize your experience and tailor our services to your preferences
• To ensure the safety and security of our guests and premises

4. Sharing of Information

We do not sell personal data. Information may be shared only with:

• Trusted service providers: Payment processors, IT services, marketing agencies, and other partners who assist in delivering our services (under strict confidentiality agreements)
• Legal or regulatory authorities: When required by law, court order, or to protect the rights, property, or safety of our hotel, guests, or others
• Business partners: Strictly for service delivery purposes, such as airline partners or tour operators (only with your consent)
• Affiliated companies: Within the Anupam Infracon Pvt Ltd group for internal administrative purposes

5. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access, disclosure, or alteration
• Accidental loss or destruction
• Misuse or improper disclosure

These measures include encryption, secure servers, firewalls, and regular security assessments. Access to personal data is limited to authorized staff only, who are bound by confidentiality obligations.

6. Data Retention

Personal information is retained only as long as necessary for:

• Service delivery and fulfillment of reservations
• Legal and accounting requirements (as per Indian laws and regulations)
• Legitimate business purposes
• Historical or statistical purposes (in anonymized form)

Typically, we retain guest information for a period of 7 years from the last interaction, unless a longer retention period is required by law.

7. Guest Rights

Under applicable data protection laws, guests have the right to:

• Access: Request a copy of their personal data held by us
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of data (subject to legal obligations)
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Portability: Request transfer of data to another organization
• Withdraw consent: Withdraw consent for marketing communications at any time

Requests can be made by contacting us directly using the information provided in Section 11.

8. Cookies and Website Use

Our website may use cookies and similar technologies to enhance user experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and advertisements
• Improve website functionality and security

Guests may manage cookie preferences through their browser settings. Note that disabling cookies may affect the functionality of our website.

9. Children's Privacy

Our services are not directed toward children under the age of 18, and we do not knowingly collect personal data from minors without parental consent. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy periodically for any updates.

Continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

For questions, concerns, or privacy-related requests, please contact our Data Protection Officer:

We will respond to your request within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the appropriate data protection authority.