Privacy Policy

Issued By

PPPL Hospitality LLP
B-3, Wadala Udyog Bhavan,
MMGS Road, Wadala (West),
Mumbai – 400031, Maharashtra, India
Email: info@stayscape.in
Phone: +91 7045558855

Purpose of this Privacy Policy

This Privacy Policy explains how Stayscape collects, uses, stores, discloses, retains and safeguards Personal Data when individuals access or use its website, make bookings, stay at managed villas, or otherwise interact with its services. The Company is committed to processing Personal Data in a lawful, fair and transparent manner and implementing reasonable safeguards to protect such information.

Applicability

• Website visitors
• Guests and booking enquiries
• Property owners
• Vendors and business partners
• Individuals communicating through email, phone or messaging platforms

Objectives

• Explain what information is collected.
• Describe why and how it is processed.
• Explain data sharing and retention.
• Describe user rights and grievance mechanisms.
• Promote transparency and compliance with applicable law.

Legal Framework

This Privacy Policy has been drafted with reference to applicable Indian laws including the Digital Personal Data Protection Act, 2023; the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (to the extent applicable); the Consumer Protection Act, 2019; the Consumer Protection (E-Commerce) Rules, 2020 where applicable; the Indian Contract Act, 1872; the Bharatiya Sakshya Adhiniyam, 2023 in relation to electronic records where relevant; and applicable CERT-In Directions, 2022.

2.1 Definitions

• Personal Data: Any data about an individual who is identifiable by or in relation to such data, as recognized under applicable law.
• Processing: Any operation performed on Personal Data including collection, recording, storage, use, disclosure, sharing, transfer, retention or deletion.
• User: Any visitor, guest, customer, property owner, vendor or person interacting with the Website or Services.
• Booking: A reservation, enquiry or confirmed accommodation transaction made through Stayscape.
• Consent: A free, specific, informed and unambiguous indication by which an individual agrees to the processing of Personal Data where consent is the lawful basis.
• Applicable Law: Applicable laws of India including the Digital Personal Data Protection Act, 2023 and other laws relevant to electronic records, contracts and consumer protection.

2.2 Scope

This Privacy Policy applies to all interactions with Stayscape through its website, booking channels, customer support, managed properties and related services. It applies to information collected online and offline in connection with the services.

2.3 Acceptance

By accessing the website, making an enquiry, completing a booking or otherwise using the services, users acknowledge that they have read and understood this Privacy Policy. Where required by applicable law, consent will be obtained before processing Personal Data.

2.4 Compliance

The Company endeavors to process Personal Data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020 where applicable, and other applicable legal requirements.

3.1 General

PPPL Hospitality LLP, operating under the brand Stayscape, collects only such Personal Data as is reasonably necessary to provide villa booking, guest management, customer support, legal compliance, payment processing and related services. Information is collected directly from users, automatically through the website, and from authorized third parties where permitted by law.

3.2 Information You Provide

This may include full name, email address, mobile number, postal address, nationality, date of birth (where required), emergency contact details, booking preferences, correspondence, feedback, reviews, invoices and other information voluntarily submitted.

3.3 Booking Information

Reservation dates, number of guests, villa selected, pricing, special requests, cancellation details, check-in/check-out information, transaction references and communications relating to reservations may be processed.

3.4 Identity Verification

To comply with applicable legal and regulatory requirements and property check-in procedures, Stayscape may collect and verify government-issued identity documents such as Aadhaar Card, PAN Card, Passport, Driving License or other officially valid documents where required by applicable law. Such information is processed only for legitimate purposes and protected using reasonable security practices.

3.5 Payment Information

Payments are facilitated through Airpay or other authorized payment service providers. Stayscape generally receives transaction confirmations, payment status and limited payment metadata and does not intentionally store complete payment card credentials unless legally required.

3.6 Technical Information

When users access the website, technical information such as IP address, browser type, device identifiers, operating system, pages visited, referring URLs, timestamps, cookies and diagnostic logs may be collected to maintain security, improve functionality and analyse website performance.

3.7 Legal Compliance

Personal Data may also be processed to comply with obligations under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, applicable tourism, taxation, law-enforcement or court requirements and other applicable laws.

4.1 Purpose

Stayscape processes Personal Data only for lawful, specific and legitimate purposes connected with providing villa rental and hospitality services.

4.2 Booking Administration

To create, confirm, modify and manage reservations, communicate booking status, facilitate check-in/check-out, verify guest identity and provide customer assistance.

4.3 Customer Support

To respond to enquiries, complaints, refund requests, cancellations, feedback and dispute resolution.

4.4 Payment Processing

To facilitate payments through Airpay, verify transactions, prevent fraudulent activity, issue invoices, process refunds and maintain financial records.

4.5 Legal & Regulatory Compliance

To comply with obligations under the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, Consumer Protection Act, 2019, Consumer Protection (E-Commerce) Rules, 2020 where applicable, taxation laws, court orders, law-enforcement requests and other applicable legal requirements.

4.6 Security & Fraud Prevention

To detect unauthorized access, misuse of services, fraudulent transactions, cyber threats, identity theft and other unlawful activities and to maintain the integrity of systems.

4.7 Business Improvement

To analyse trends, improve website functionality, enhance customer experience, develop new services and conduct internal audits and analytics using aggregated or anonymized information where practicable.

4.8 Communications

To send booking confirmations, invoices, service updates, security notices and, where permitted by law or consented to, promotional communications. Users may opt out of marketing communications without affecting essential service communications.

4.9 Data Minimization

The Company endeavors to collect and process only the minimum Personal Data reasonably necessary for the stated purposes and retains such information only for as long as required by law or legitimate business needs.

5.1 Overview

Stayscape may use cookies, pixels, local storage and similar technologies to ensure the website functions correctly, remember user preferences, enhance security, analyse traffic and improve user experience.

5.2 Types of Cookies

Strictly necessary cookies, functional cookies, analytics cookies and performance cookies may be used. Marketing cookies will only be used where applicable law permits.

5.3 Information Collected

Cookies may collect browser type, IP address, device identifiers, session information, pages visited, referring URLs and interaction data.

5.4 Purpose

Cookies help authenticate users, maintain sessions, detect fraud, improve performance, analyse usage trends and personalize content where appropriate.

5.5 Cookie Management

Users may control or disable cookies through browser settings. Disabling certain cookies may affect website functionality.

5.6 Third-Party Technologies

Where third-party analytics or embedded services are introduced, those providers may place cookies subject to their own privacy practices.

5.7 Do Not Track

If supported, Stayscape will evaluate browser privacy signals in accordance with applicable law and technical feasibility.

5.8 Legal Compliance

Cookie and tracking practices are implemented with reference to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and other applicable legal requirements. Consent will be sought where required by law.

6.1 Third-Party Service Providers

Stayscape may engage carefully selected third-party service providers to support the operation of its website, reservation platform, customer support, payment processing, information technology infrastructure, cloud hosting, communication services, accounting, auditing, legal compliance and other legitimate business operations. Such providers are permitted to process Personal Data only for the specific services they perform on behalf of Stayscape and are contractually required to implement appropriate confidentiality and security measures.

6.2 Payment Gateway – Airpay

Online payments are processed through Airpay or another authorized payment service provider. Payment card details, banking credentials and other sensitive payment information are generally processed directly by the payment gateway and are subject to the privacy policy and security standards of the payment provider. Stayscape ordinarily receives only transaction confirmations, payment status, reference numbers and other information necessary to complete bookings, process refunds and maintain accounting records.

6.3 Disclosure of Personal Data

Personal Data may be disclosed only where necessary to provide the requested services, comply with legal obligations, investigate suspected fraud, protect the rights or safety of individuals, respond to lawful requests from governmental authorities or courts, or facilitate corporate restructuring, mergers or business transfers, subject to applicable law.

6.4 Confidentiality Obligations

Third-party service providers receiving Personal Data on behalf of Stayscape are expected to maintain appropriate technical and organizational safeguards, restrict access to authorized personnel and process Personal Data solely in accordance with documented instructions and applicable legal requirements.

6.5 International Processing

If, in the future, Personal Data is processed outside India through authorized service providers, Stayscape will endeavor to ensure that such processing is undertaken in accordance with applicable law and appropriate contractual, technical or organizational safeguards.

6.6 Applicable Legal Framework

Processing involving third-party service providers is undertaken with reference to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, applicable contractual obligations and other relevant legal requirements.

7.1 General Principle

Stayscape is committed to protecting the confidentiality of Personal Data and does not sell or rent Personal Data to third parties. Personal Data is shared only where necessary for legitimate business purposes, legal compliance, contractual performance, or with the consent of the individual where required by applicable law.

7.2 Sharing with Service Providers

Personal Data may be shared with carefully selected service providers including payment processors, cloud hosting providers, IT support providers, customer support vendors, communication service providers, auditors, legal advisers and other entities that assist Stayscape in providing its services. Such parties are contractually obligated to use the information only for authorized purposes and to implement appropriate security measures.

7.3 Sharing with Property Owners and Property Managers

Where necessary to facilitate reservations, check-in procedures, guest verification, property access, or resolution of operational issues, limited Personal Data may be shared with the relevant property owner, manager, caretaker or authorized representative strictly on a need-to-know basis.

7.4 Legal and Regulatory Disclosures

Stayscape may disclose Personal Data when required by applicable law, court order, governmental authority, law enforcement agency, regulatory body, taxation authority, or any other competent authority, or where disclosure is necessary to protect legal rights, investigate fraud, enforce contractual obligations or respond to emergencies affecting life, health or safety.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, investment, business transfer or sale of assets, Personal Data may be transferred to the successor entity subject to applicable law and appropriate confidentiality obligations.

7.6 Cross-Border Sharing

If Personal Data is shared outside India in the future, such transfers shall be carried out only in accordance with applicable legal requirements and appropriate safeguards.

7.7 Applicable Laws

This section is intended to operate consistently with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the Consumer Protection Act, 2019 and other applicable Indian laws.

8.1 Commitment to Security

PPPL Hospitality LLP (Stayscape) implements reasonable administrative, technical and physical safeguards to protect Personal Data against unauthorized access, loss, misuse, disclosure, alteration or destruction. Security measures are periodically reviewed to address evolving risks.

8.2 Technical Safeguards

Security controls may include encryption where appropriate, secure communication protocols, authentication mechanisms, role-based access controls, logging, monitoring, malware protection, network security measures and regular software updates.

8.3 Organizational Measures

Access to Personal Data is restricted to authorized personnel with a legitimate business need. Employees, contractors and service providers are expected to comply with confidentiality obligations and internal information security practices.

8.4 Data Retention and Disposal

Personal Data is retained only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes and enforce agreements. Information that is no longer required is securely deleted or anonymized where practicable.

8.5 Security Incidents

If Stayscape becomes aware of a Personal Data security incident, appropriate steps will be taken to investigate, contain and remediate the incident. Notifications will be made to affected individuals or competent authorities where required under applicable law.

8.6 User Responsibilities

Users are responsible for protecting account credentials, using secure devices and networks, and promptly informing Stayscape of any suspected unauthorized access or misuse relating to their interactions with the Services.

8.7 Legal Compliance

Information security practices are designed with reference to the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, applicable Information Technology Rules, and other relevant legal and regulatory requirements.

9.1 Retention Principle

Stayscape retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal, regulatory, tax, accounting, contractual, and operational obligations. Records are maintained only to the extent reasonably necessary and access is limited to authorized personnel. Stayscape periodically evaluates retention schedules and securely disposes of information that is no longer required while maintaining evidence necessary for compliance, fraud prevention, enforcement of contractual rights, and protection of legitimate interests.

9.2 Retention Periods

Retention periods vary depending on the nature of the information, the services used, legal requirements, and legitimate business needs. Records are maintained only to the extent reasonably necessary and access is limited to authorized personnel.

9.3 Account Information

Account data may be retained while the account remains active and for a reasonable period thereafter. Records are maintained only to the extent reasonably necessary and access is limited to authorized personnel.

9.4 Booking Records

Booking and transaction records may be retained to comply with financial reporting, taxation, dispute resolution, and audit obligations. Records are maintained only to the extent reasonably necessary and access is limited to authorized personnel.

9.5 Deletion

When retention is no longer required, personal data will be securely deleted, anonymized, or irreversibly aggregated where appropriate.

9.6 Legal Holds

Deletion may be suspended where information is subject to litigation, investigation, regulatory request, or legal preservation obligations.

9.7 Security

Retained information is protected through appropriate technical and organizational safeguards.

9.8 Review

Retention practices are reviewed periodically to ensure ongoing compliance with applicable law and business requirements.

Stayscape will implement reasonable administrative, technical, and organizational measures to facilitate the exercise of the rights described below while balancing contractual obligations, platform integrity, and applicable regulatory requirements. Each request will be evaluated individually and documented to ensure consistency, accountability, and transparency.

10.1 Right to Access

Users may request confirmation regarding whether Stayscape processes their personal data and obtain a copy of such data, subject to applicable law and reasonable verification.

10.2 Right to Rectification

Users may request correction of inaccurate or incomplete personal information maintained by Stayscape.

10.3 Right to Erasure

Where permitted by applicable law, users may request deletion of personal data when it is no longer necessary, consent is withdrawn, or processing is unlawful. Certain information may be retained to comply with legal obligations, resolve disputes, enforce agreements, or protect legitimate interests.

10.4 Right to Restrict Processing

Users may request temporary restriction of processing where the accuracy of information is contested or processing is otherwise challenged.

10.5 Right to Data Portability

Where applicable, users may request a structured, commonly used, and machine-readable copy of personal data they have provided and request transmission to another controller where technically feasible.

10.6 Right to Object

Users may object to processing based on legitimate interests or for direct marketing. Stayscape will assess such objections in accordance with applicable law.

10.7 Withdrawal of Consent

Where processing is based on consent, users may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal.

10.8 Automated Decision-Making

Where applicable, users may request human review of decisions based solely on automated processing that significantly affect them.

10.9 Exercising Rights

Requests should contain sufficient detail to verify identity and describe the right being exercised. Stayscape may request additional information before responding.

10.10 Response Time

Stayscape will respond within the timeframes required by applicable law and may extend response periods where legally permitted.

10.11 Limitations

Certain rights may be limited where exemptions apply, including legal privilege, fraud prevention, security, regulatory compliance, or protection of others' rights.

10.12 Complaints

Users who believe their rights have been infringed may contact Stayscape and, where applicable, lodge a complaint with the relevant supervisory authority.

Stayscape shall implement appropriate governance, documentation, monitoring, and compliance measures consistent with applicable law, contractual obligations, and legitimate business interests.

11.1 Transfer Mechanisms

Personal data may be transferred across jurisdictions using lawful transfer mechanisms.

11.2 Safeguards

Appropriate contractual and technical safeguards are implemented.

11.3 Service Providers

Third-party processors must maintain equivalent protections.

11.4 Compliance

Transfers comply with applicable data protection laws.

11.5 User Acknowledgement

Users acknowledge that data may be processed where services operate.

11.6 Review

Transfer practices are periodically reviewed.

12.1 Policy Updates

Stayscape may update this Privacy Policy periodically.

12.2 Notification

Material changes may be notified through appropriate channels.

12.3 Effective Date

The revised effective date will be displayed.

12.4 Continued Use

Continued use constitutes acknowledgement where permitted by law.

12.5 Review Responsibility

Users should review this Policy regularly.

12.6 Contact

Questions may be directed through official support channels.

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the manner in which Stayscape collects, uses, stores, or processes your personal data, you may contact us using the details provided below:

Stayscape
Email: info@stayscape.in
Website: www.stayscape.in

Where required by applicable law, you may request to access, correct, update, delete, or restrict the processing of your personal data. Stayscape will review and respond to such requests within a reasonable time and in accordance with applicable laws.

If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection or regulatory authority in your jurisdiction.

This Privacy Policy shall be governed by and construed in accordance with the laws of the jurisdiction in which Stayscape is incorporated and operates, without prejudice to any mandatory rights available to users under applicable data protection legislation.

Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of that jurisdiction, unless otherwise required by applicable law.

Nothing in this Privacy Policy shall limit or exclude any rights or remedies available to users under applicable privacy or consumer protection laws.

This Privacy Policy constitutes the complete statement of Stayscape's practices regarding the collection, use, disclosure, storage, and protection of personal data.

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court or competent authority, the remaining provisions shall remain valid and enforceable to the fullest extent permitted by law.

Stayscape reserves the right to amend, revise, or update this Privacy Policy at any time to reflect changes in legal requirements, business practices, or technological developments. Updated versions will be published on the Stayscape website or application with the revised effective date.

By accessing or using the Stayscape website, mobile application, or related services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Your continued use of the services following the publication of any updates constitutes your acceptance of the revised Privacy Policy, except where applicable law requires additional notice or consent.