Privacy Policy

1. Information We Collect

We may collect personal information that identifies you or relates to you as an identifiable individual. This may include:

• Name, title, gender, nationality, date of birth and age
• Contact details such as address, email address and phone number
• Reservation details, stay dates, room preferences and booking history
• Payment, billing and transaction details
• Government-issued identification details, where required by law
• Passport, visa or other travel-related information, where applicable
• Dietary preferences, allergies, health-related requests or special service requirements voluntarily shared by you
• Details of special occasions such as birthdays, anniversaries, weddings or celebrations
• Feedback, reviews, complaints, requests and communication with our team
• Photographs, videos or CCTV footage captured in public areas for safety and security purposes
• IP address, browser type, device information, website usage data and cookie data
• Information shared through our website forms, emails, calls, social media platforms, online travel partners or third-party booking channels

If you provide personal information on behalf of another guest, family member, attendee or visitor, you confirm that you have the authority to do so and that the person has been informed about this Privacy Policy.

2. How We Collect Information

We may collect information in the following ways:

• Directly from you: When you make a booking, submit an enquiry, check in, dine with us, use our spa or wellness services, book an event, request a transfer, subscribe to communications, contact our team or provide feedback.
• Automatically: When you visit our website, we may collect certain technical information through cookies and similar technologies.
• From third parties: We may receive information from online travel agencies, travel agents, event planners, payment processors, social media platforms, corporate booking partners or other authorised service providers.

3. How We Use Your Information

We use your personal information to provide, manage and improve our services. This includes:

• Processing reservations, enquiries, payments and confirmations
• Managing your stay, check-in, check-out and guest experience
• Responding to enquiries, requests, complaints and feedback
• Personalising your stay based on preferences shared by you
• Arranging dining, spa, wellness, recreation, transfers and experiences
• Planning and managing weddings, meetings, events and celebrations
• Sending service-related communication, booking updates and important notices
• Sending promotional offers, newsletters and marketing communication, where permitted
• Improving our website, services, guest experience and internal operations
• Maintaining safety, security and fraud prevention
• Complying with legal, regulatory, tax, accounting and law enforcement requirements

4. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to improve functionality, understand website usage, remember preferences and enhance your browsing experience.

Cookies may help us analyse traffic, measure website performance and deliver relevant content. You may choose to disable cookies through your browser settings. However, disabling cookies may affect the functionality or performance of certain parts of the website.

5. Sharing of Personal Information

We do not sell or rent your personal information. However, we may share your information where necessary for legitimate business, operational, legal or service-related purposes.

Your information may be shared with:

• Employees and authorised representatives of Nimaya Resort & Spa and CBG Hospitalities Pvt. Ltd.
• Reservation, front office, finance, events, housekeeping, food and beverage, spa, wellness and guest service teams
• Payment gateways, banks and financial service providers
• IT, website hosting, digital marketing, analytics and communication service providers
• Online travel agencies, travel partners and booking platforms
• Event planners, decorators, vendors and service providers engaged for weddings, meetings or celebrations
• Transport providers, travel partners and experience partners, where requested by guests
• Legal, tax, accounting, audit or compliance advisors
• Government authorities, law enforcement agencies or regulators where required by law
• Successors or potential successors in case of business transfer, merger, restructuring or sale

We require our service providers to handle personal information responsibly and use it only for the purpose for which it has been shared.

6. Data Security

We take reasonable technical, administrative and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include restricted access, secure systems, internal controls, staff awareness and use of appropriate technology to protect information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Retention of Information

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Information may be retained for reservation records, legal compliance, accounting, audit, dispute resolution, security, fraud prevention and legitimate business purposes.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

8. Marketing Communication

With your consent, or where permitted by law, we may send you updates, offers, promotions, newsletters or information about Nimaya Resort & Spa.

You may opt out of marketing communication at any time by following the unsubscribe instructions in our messages or by contacting us directly. Even if you opt out of promotional communication, we may still send you transactional or service-related messages, such as booking confirmations, payment updates or stay-related communication.

9. Third-Party Websites and Links

Our website may contain links to third-party websites, booking platforms, payment gateways or social media pages. These websites are not operated or controlled by Nimaya Resort & Spa or CBG Hospitality Pvt. Ltd.

We are not responsible for the privacy practices, content, security or policies of such third-party websites. We encourage you to review their privacy policies before sharing any personal information.

10. Children’s Privacy

Our website and services are not intended to collect personal information from children under the age of 18 without the consent of a parent or legal guardian.

If we become aware that personal information of a child has been collected without appropriate consent, we will take reasonable steps to delete such information, unless retention is required by law or for legitimate guest service purposes.

11. CCTV and Security

For the safety and security of guests, visitors, employees and property, CCTV cameras may be installed in public areas of the resort. CCTV footage may be monitored and retained for security, incident investigation, legal or regulatory purposes.

CCTV cameras are not placed in private guest rooms or private areas where guests have a reasonable expectation of privacy.

12. Your Rights

You may contact us if you wish to review, update or correct the personal information shared with us. We will make reasonable efforts to assist with such requests, subject to applicable law, operational requirements and information that may need to be retained for bookings, payments, legal compliance, security, accounting or legitimate business purposes.

Guests may also choose to opt out of promotional or marketing communication by following the unsubscribe instructions in our messages or by contacting us directly. Please note that even after opting out of promotional communication, we may continue to send service-related messages such as booking confirmations, payment updates, stay information or important notices related to your interaction with Nimaya Resort & Spa.

13. International Transfers

Your personal information is generally stored and processed in India. However, certain service providers, technology platforms or booking partners may process information outside India.

Where such transfers occur, we will take reasonable steps to ensure that your information remains protected in accordance with applicable law and this Privacy Policy.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, website, services, legal requirements or operational needs.

The updated version will be posted on our website. Your continued use of our website or services after any changes means that you acknowledge the updated Privacy Policy.

15. Contact Us

For questions, concerns, requests or complaints regarding this Privacy Policy or the handling of your personal information, please contact:

16. Grievance Officer

For privacy-related grievances, you may contact:

We will make reasonable efforts to respond to privacy-related concerns within a reasonable time and in accordance with applicable law.