privacy policy

Aery Resort, Chinnahally, Shanivarasanthe, North Coorg, Karnataka 571235. The registered entity name and GST number are TBC.

This policy is written to meet the Digital Personal Data Protection Act, 2023. In its language we are the Data Fiduciary and you are the Data Principal.

When you book a stay: your name, phone number, email address, dates, number of guests, and payment status.

At check-in, as required of accommodation providers in India: identification details, and a photograph of a government-issued ID for each adult guest.

If you use the in-room QR menu: your phone number, used to sign you in and to attach your order to your room.

We do not store card numbers, UPI IDs or bank details. Payments are handled entirely by Razorpay; we receive only a success or failure result and a transaction reference.

To hold and honour your booking, to comply with the legal requirement to record guest identity, to serve food you order, to issue invoices, and to contact you about your stay.

We use your details for marketing only if you have separately ticked the consent box. That consent is asked for on its own, is never bundled into the booking terms, and can be withdrawn at any time by replying STOP or emailing us.

ID photographs are encrypted at rest, stored in private file storage that is not publicly addressable, and visible only to the owner, manager and reception staff. Every access is logged with the identity of the person viewing and the time.

The retention period after which ID images are permanently deleted is TBC.

Razorpay, for payment processing. Convex, which hosts our database. Our email provider, for confirmations. Government authorities where we are legally obliged to produce guest records.

We do not sell personal data, and we do not share it for anyone else’s advertising.

Under the DPDP Act you may ask us for a copy of the data we hold about you, ask us to correct it, ask us to erase it where we are not legally required to keep it, withdraw consent you previously gave, and nominate someone to exercise these rights on your behalf.

Write to [email protected]. We respond within TBC — response window.

This site sets no advertising cookies and does not sell or share your data with advertisers. It uses what is needed to keep you signed in and to remember your booking while you are completing it, and two analytics tools:

• Google Analytics 4, run by Google, which uses cookies to understand how people move through the site — for example how many people who read a journal entry go on to check dates. Google acts as a processor of this data. Google’s privacy policy. You can opt out with Google’s browser add-on.
• Cloudflare Web Analytics, which measures how quickly pages load on real devices. It sets no cookies and does not identify you.

Neither is used for advertising, and neither is connected to your booking record.

You can turn it off. Analytics is on when you arrive, and a notice on your first visit tells you so. Choosing to turn it off stops Google Analytics storing anything that could identify you, from that moment on, and your choice is remembered in your own browser. Cloudflare’s measurement is not affected either way, because it sets no cookies and identifies nobody.

The DPDP Act requires us to publish a contact for privacy complaints. Name, designation and email are TBC.