Privacy Policy | Green Vista Resorts Kochi

Plain-Language Privacy Commitment: We collect only the personal data reasonably required to answer enquiries, manage bookings, fulfill hotel registration laws, provide a safe stay, and process direct payments. We do not sell guest personal data.

2.1 Scope & Data Fiduciary Role

This Privacy Policy applies to personal data processed through the Green Vista Resorts Website, direct-booking tools, enquiry forms, payment gateways, messaging channels (WhatsApp/Email), and during guest registration at the Property located in Kochi, Kerala. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, Green Vista Resorts acts as the Data Fiduciary determining the purposes and means of personal data processing.

2.2 Categories of Personal Data Collected

Data Category	Examples of Collected Information
Identity Data	Full Name, Government Photo ID details (Aadhaar, Passport, Voter ID, Driving Licence), Nationality, Signature, Age.
Contact Data	Phone / WhatsApp Number, Email Address, Postal Address, Emergency Contact.
Booking & Stay Data	Check-in / Check-out dates, guest count, special requests, dietary preferences, booking reference ID.
Payment Data	Transaction reference ID, payment method, payment status, GST tax invoice details. (Full credit/debit card numbers are processed directly via secure payment gateways and are never stored on our servers).
Safety & Property Data	Security log records and exterior perimeter CCTV footage (CCTV is deployed strictly in exterior courtyard/entrance areas for safety; never inside bedrooms, bathrooms, or private living rooms).

2.3 Purpose of Processing Personal Data

Reservation Fulfillment: Processing availability searches, booking confirmations, invoice generation, and guest communications.
Legal & Tax Compliance: Maintaining government accommodation records, guest registers, Form C filings for foreign guests, and GST tax records.
Safety & Security: Ensuring security of guests, staff, and villa property.
Service Enhancements: Responding to special requests, dietary needs, or accessibility requests.

2.4 Data Retention and Secure Deletion

We retain personal data only for as long as necessary to fulfill the purpose of collection or as mandated by statutory retention laws under Indian law:

Financial & Booking Records: Retained for 8 years in compliance with Income Tax and GST laws.
Guest Identity Registers: Retained as mandated by local police/accommodation laws, then securely deleted or anonymized.
Enquiry Records: Retained for 6 months unless converted into a confirmed booking.

2.5 Your Rights as a Data Principal (DPDP Act 2023)

Under the DPDP Act 2023, guests ("Data Principals") possess the following statutory rights:

Right to Access Summary: Request a summary of your personal data being processed and sharing details.
Right to Correction & Erasure: Request correction of inaccurate data or erasure when processing is no longer required.
Right to Withdraw Consent: Withdraw consent for optional processing (such as promotional WhatsApp/email updates).
Right of Grievance Redressal: Submit grievances regarding data processing directly to our designated Privacy Contact.
Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity.

2.6 How to Exercise Your Privacy Rights or Submit a Grievance

To submit a data access, correction, or erasure request, email our Data Officer at:

📧 Email: reservations@greenvistaresorts.com (Subject: Privacy Request - DPDP Act)
📱 Phone / WhatsApp: +91 93494 44344

We aim to acknowledge privacy requests within 24 hours and respond within 30 days as mandated by applicable law.