Privacy Policy

Jeevan Sandhya Foundation, which operates Jagriti Stays, knows that you care how information about you is used and shared, and we appreciate your expectation that we will do so carefully and sensibly. This policy explains exactly what personal data this website collects, why we collect it, who it is shared with, how long we keep it, and the rights you have over it under India's Digital Personal Data Protection Act, 2023.

For the personal data described here, we are the Data Fiduciary and you are the Data Principal. It applies to https://www.jagritistays.com, to enquiries you send us through it, and to empanelment applications sent through its tour operator form.

1. What we collect

Information you give us

This website has no account, no login and no payment page. It asks for personal data in two places, and nowhere else: the enquiry form, which appears twice — once in the banner and once in the booking section — and the tour operator empanelment form, which is a separate page for travel businesses applying to work with us. The enquiry form asks for:

• Your name — required
• Your mobile number — required
• Your email address — optional
• Your intended check-in and check-out dates
• The number of guests
• Anything you choose to write in the message box — please include only what is relevant to your stay

We never ask for card, bank or UPI details, Aadhaar numbers, or health information through this website, and you should not send them through the enquiry form. A government-issued photo ID is checked in person at check-in, not collected online. Any payment is arranged separately by our reservations team. The one exception to all of this is the empanelment form below, which asks a business for its tax registration numbers — it is a commercial application, not a guest enquiry.

If you apply to be empanelled

The tour operator empanelment form is for travel businesses asking to become approved booking partners. It is not used by guests, and nothing on it is needed to make a booking. It asks for:

• About the business — the applicant or company name, any trade name, the year it was established, its registered address and, if different, a correspondence address.
• How to reach you — a contact person, a mobile number, an optional landline, an email address and an optional website.
• Registration numbers, where they apply — PAN, GSTIN, company or firm registration, trade licence, tourism/IATA/TAAI registration and Shop & Establishment number. These identify the business for the purpose of empanelling it.
• The proprietor, partners or directors — for up to four people, a name, designation, mobile number, email address and PAN.
• A business profile — the nature of the business, years in operation, key destinations, major clients or affiliations, and anything else you choose to write.

Please do not send Aadhaar numbers, bank details, or scans of identity documents through this form. We do not ask for them and we do not need them to consider an application. PAN is asked for because it is the number a business is ordinarily identified by.

Information recorded automatically

• The IP address the enquiry was submitted from, and the date and time it was received. These are attached to the enquiry so we can trace and block spam and abusive submissions.
• A short-lived rate-limit marker when an empanelment application is sent. The server stores a one-way hash of the sending IP address for thirty seconds so the same address cannot flood the form. The address itself is not written down by this mechanism, and the marker is overwritten or discarded by the server in the ordinary course.
• Standard web-server logs kept by our hosting provider, which record requests made to the site.

2. Why we use it

• To answer your enquiry, check availability for your dates, and offer you a booking.
• To contact you about that enquiry by phone, WhatsApp or email. If you give us an email address, replies to our enquiry notification go back to you.
• To keep a record of enquiries so our reservations team can follow up and so we can resolve any dispute about what was agreed.
• To detect, block and investigate spam and misuse of the forms.
• For empanelment applications: to assess the application, verify the business and its registrations, contact the people named on it, and — if we proceed — to set up and administer the partnership. We also keep unsuccessful applications on file so we can tell a repeat applicant what was decided before.
• To measure, in aggregate, which pages and advertisements lead to enquiries, so we can decide where to advertise.

We do not sell or rent your personal data. We do not use it for automated decision-making or profiling that produces legal effects for you. We will not use your details for unrelated marketing without asking you first.

3. Consent, and how to withdraw it

We process this data on the basis of the consent you give when you submit the enquiry form or the empanelment form, for the purposes listed in section 2 and no others. An empanelment application is made on behalf of a business; where it names individual partners or directors, please make sure those people know their details are being sent to us.

You can withdraw your consent at any time by emailing contact@jagritistays.com. Withdrawing is as easy as giving consent was. When you withdraw, we will stop processing your data and delete it, except for anything we are required by law to retain. Withdrawal does not make unlawful any processing we carried out before you withdrew.

4. Who we share it with

We share your enquiry, or your application, only with the people and services needed to deal with it. An empanelment application goes to our own mailbox and nowhere else unless a recipient is named below; it is not sent to the enquiry register, and it is not shared with any advertising or analytics service.

• Our own team. The enquiry is emailed to our reservations mailbox, contact@jagritistays.com, and copied to the internal mailboxes of the colleagues who handle bookings. Some of those mailboxes are hosted by Google (Gmail).
• Our web hosting and email provider, which stores this website and transmits the enquiry email on our behalf.
• Google (Apps Script and Google Sheets). When you submit the enquiry form, your browser also sends the same details to a Google Apps Script endpoint, which records them as a row in a private Google Sheet we use as our enquiry register.
• Google (Apps Script and Google Sheets) — applications. An empanelment application is also recorded as a row in a separate private Google Sheet, which only the colleagues who assess applications can open. It is not the enquiry register and the two are not combined.
• Google (Tag Manager, Analytics and Google Ads). This site loads Google Tag Manager, which we use for advertising and measurement tags. These record your visit and whether it led to an enquiry. They do not receive the contents of the form.
• Google (Maps). The location section embeds a Google map. If it loads, Google receives your IP address and may set cookies.
• Google (YouTube). Guest videos play from YouTube's privacy-enhanced domain, which does not set tracking cookies unless you play a video.
• WhatsApp (Meta). If you choose to message us on WhatsApp, that conversation is governed by WhatsApp's own privacy policy, not this one.

We may also disclose personal data where we are required to by law, a court, or a lawful request from a public authority.

5. Where your data is processed

We and our Indian hosting provider process your data in India. The Google and Meta services named above may process it on servers outside India. The Digital Personal Data Protection Act, 2023 permits such transfers except to territories the Government of India restricts by notification, and we will comply with any such restriction.

6. How long we keep it

• Enquiries that do not become bookings are kept for up to 24 months after our last contact with you, and then deleted from our enquiry register and mailboxes.
• Enquiries that become bookings are kept for as long as the law requires us to retain records connected with that stay, including tax and accounting law, and then deleted.
• Empanelment applications that do not lead to a partnership are kept for up to 24 months after we reach a decision, so we can answer a repeat application, and are then deleted.
• Applications that do lead to a partnership are kept for as long as the partnership lasts and for as long afterwards as tax, accounting and contract law require us to keep records connected with it.
• If you withdraw consent or ask us to erase your data, we delete it sooner — see sections 3 and 7.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• Access a summary of the personal data we hold about you, what we have done with it, and who we have shared it with.
• Correct, complete or update anything inaccurate or out of date.
• Erase your personal data where we no longer need it for the purpose it was collected for.
• Withdraw consent, at any time, as described in section 3.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Have a grievance heard — see section 8.

To exercise any of these, email contact@jagritistays.com from the address you enquired with, or tell us the mobile number you used, so we can find your enquiry. We will respond within a reasonable period and in any case within the time the law allows. We may ask you to confirm your identity before acting, so that we do not disclose your data to someone else.

8. Grievance redressal

If you are unhappy with how we have handled your personal data or a request under section 7, contact our Grievance Officer:

• Grievance Officer, Jagriti Stays
• Email: contact@jagritistays.com
• Phone: +91 76698 85778
• Post: Jeevan Sandhya Foundation, Jagriti Stays, Merlin Greens, Ibiza Club, Diamond Harbour Road, Kolkata – 743503, West Bengal, India

If you are still not satisfied, you may complain to the Data Protection Board of India in the manner it prescribes.

9. Cookies and advertising

This site sets no cookies of its own. The Google services described in section 4 may set cookies or read device identifiers in your browser when their content loads — Tag Manager and the tags it manages for advertising and measurement, the embedded map, and YouTube if you play a video.

You can control this. Most browsers let you block or delete cookies through their settings, and you can turn off personalised Google advertising at myadcenter.google.com or opt out of ad personalisation across participating networks at optout.aboutads.info. Blocking cookies does not stop you enquiring — the form works without them.

The typefaces on this site are served from this domain, so no font provider is contacted and no request about your visit is sent to one.

10. Children

This website is intended for adults arranging a stay. We do not knowingly collect personal data from a child through the enquiry form without the verifiable consent of a parent or guardian, and we do not use children's data for tracking or targeted advertising. Bookings must be made by an adult. If you believe a child has sent us personal data, email contact@jagritistays.com and we will delete it.

11. Keeping it secure

This site is served over an encrypted HTTPS connection. Access to enquiry data is limited to the colleagues who need it to answer you, and the form carries spam protection and server-side validation. We take reasonable security safeguards to prevent a personal data breach, and if one occurs we will notify the Data Protection Board of India and affected users as the law requires. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

Jeevan Sandhya Foundation may modify this privacy policy at any time. The date at the top of this page shows when it was last changed. If we make a change that materially affects how we use data you have already given us, we will take reasonable steps to tell you.