Data Protection Policy

This Policy applies to all personal data processed by Kaivalyam Homestay, whether collected through our Website, by email, telephone, WhatsApp, or in person at the property, and to all staff and service providers who handle such data on our behalf.

We are guided by the following principles when handling personal data:

• Lawfulness and consent — we collect data with your knowledge and, where required, your consent, for clear and lawful purposes.
• Purpose limitation — data is used only for the purposes for which it was collected, such as managing your booking and stay.
• Data minimisation — we collect only what is necessary.
• Accuracy — we take reasonable steps to keep data accurate and up to date.
• Storage limitation — data is kept only as long as necessary and then securely deleted.
• Integrity and confidentiality — data is protected with appropriate security measures.

All online payments are processed exclusively through authorised, PCI-DSS compliant third-party payment gateways over encrypted connections. Kaivalyam Homestay does not collect, view or store full card numbers, CVV, UPI PINs, net-banking passwords or similar sensitive payment credentials on its own systems.

We adopt reasonable technical and organisational security practices to safeguard personal data, including:

• Restricting access to personal data to authorised personnel on a need-to-know basis.
• Using secure (HTTPS / SSL-encrypted) connections on our Website.
• Relying on reputable, secure payment and hosting providers.
• Protecting physical records (such as ID copies) and disposing of them securely when no longer required.

We share personal data only with payment, banking, hosting and communication providers that support our services, and with government or regulatory authorities where required by law. Any third party that processes data on our behalf is required to protect it and use it only for the agreed purpose.

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to meet legal, tax and accounting obligations. Once no longer required, data is securely deleted, destroyed or anonymised.

Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct or update it, withdraw your consent, or request its deletion. We will respond to genuine requests within a reasonable time and may need to verify your identity before acting.

In the event of a personal data breach that is likely to cause harm, we will take prompt steps to contain and assess it and will notify affected individuals and the relevant authorities where required by applicable law.

Responsibility for data protection at Kaivalyam Homestay rests with our management. Any questions, requests or complaints about how we handle personal data may be directed to our Grievance Officer at Stay@kaivalyamhomestay.com. We are committed to resolving concerns promptly and fairly.

This Policy is reviewed periodically and updated as our practices or applicable laws change. The current version is always available on our Website with its effective date.