Privacy Policy
Version 2026-08-08.v1 · Zenhub Enterprises, Rayanpalayam, Karaikal, Puducherry 609609, India
What we collect, and why
For a stay booking we collect only what the booking needs:
- Your name — so the hotel knows who is arriving.
- Your mobile number — this is also the credential you use to look up or cancel your booking. We do not use it for marketing.
- Your email (optional) — only to send your confirmation.
- Your stay details — hotel, room type, dates, number of rooms and guests.
We do not collect payment card details. Room charges are paid directly to the hotel.
Purpose limitation
Your phone number is collected as the booking lookup and cancellation credential. We will not repurpose it for marketing or anything else without asking you again, separately.
Consent
We ask before we collect, and nothing is pre-ticked. We record which version of this notice you agreed to, so you can always see what you actually consented to. You can withdraw consent at any time — it is as easy as giving it, and withdrawal does not affect a booking you have already made.
Analytics cookies
Analytics load only if you accept them. Necessary cookies — the ones that keep a session working and enforce rate limits — are always on and store no personal details beyond a random identifier.
Your rights
Under the Digital Personal Data Protection Act 2023 you may:
- Access the data we hold about you.
- Correct anything inaccurate.
- Erase your personal details — see the note below.
- Complain to our Grievance Officer, and then to the Data Protection Board.
To exercise any of these, email info@zenhubenterprises.co.in with your booking ID and the phone number you booked with — that pair is how we verify it is really you. We acknowledge within 48 hours and complete within one month.
What erasure actually means here
We want to be straightforward about this rather than bury it. When you ask us to erase your data, we remove your name, email and full phone number from the booking record. We keep the transaction itself — the amount, dates and booking reference — because Indian tax law requires us to retain business records. So your booking stops identifying you, but it does not disappear from our accounts.
How long we keep it
Identifying details are removed automatically once they are no longer needed for the stay, support or a dispute — currently 400 days after checkout. The de-identified transaction record is retained for as long as tax law requires.
Security
Data is held in an encrypted database hosted in Mumbai, India. Access is restricted at the database level, and our public API keys cannot read booking data. We do not sell or rent personal data, ever.
Who we share with
Only where the booking requires it: the hotel you booked (your name, dates and room), and our email provider to deliver your confirmation. Nobody else.
Age
Bookings are for adults. By booking you confirm you are 18 or over. We do not knowingly collect data from children and do not target advertising at anyone.
Data breaches
If a breach affects your data we will notify you and the Data Protection Board, and report qualifying incidents to CERT-In within 6 hours of becoming aware.
Contact
Zenhub Enterprises, Rayanpalayam, Karaikal, Puducherry 609609 · info@zenhubenterprises.co.in · +91 93617 33394