1. Who we are
Udaipurs (“we”, “us”) operates udaipurs.com as a curator and booking facilitator for stays, wedding venues, activities, stories, and shop orders in Udaipur. For this website and the personal data we decide how to process, we act as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).
Hotel, venue, and activity partners may separately process data needed to fulfil a booking they accept. Payment processors and Google reCAPTCHA act as our processors or independent controllers for the signals they collect.
2. Personal data we collect
- Identity and contact: name, email, phone, and addresses you give us for accounts, bookings, orders, or enquiries.
- Booking and order data: stay dates, guest counts, venue event details, activity selections, cart contents, and payment status. Full card numbers are handled by PCI-compliant processors, not stored on Udaipurs.
- Account and support: login identifiers, order history, refund requests, and messages you send to care@udaipurs.com or privacy@udaipurs.com.
- Device and usage: pages viewed, approximate region, browser type, and security logs. Form submissions use Google reCAPTCHA v3, which receives a token and related telemetry under Google’s policies.
- Consent records: your cookie choice (essential only or accept all), timestamps, and the policy version shown at the time.
3. Why we use it
We process personal data only for specified purposes:
- Create and operate your account, and complete bookings or shop orders you request.
- Communicate confirmations, itinerary changes, and support replies.
- Prevent spam and abuse on login, signup, checkout, contact, and enquiry forms.
- Understand aggregated site use after you accept optional analytics cookies.
- Meet tax, accounting, and other legal duties.
Lawful basis under DPDP: consent for optional analytics/marketing and any processing you can refuse; legitimate use / contract to deliver the booking or order you asked for. Withdrawing consent does not undo processing already completed to fulfil that request.
4. Sharing
We share data only as needed to fulfil your request or as the law requires:
- Hotel, venue, and activity partners for the booking you placed.
- Payment processors, hosting, email, and security providers acting on our instructions.
- Google, for reCAPTCHA verification on protected forms.
- Regulators or courts when Indian law requires it.
We do not sell personal data or share it with advertising networks for unrelated products.
5. Cookies
Essential cookies keep the site secure, remember your consent choice, and run checkout. Analytics and marketing cookies stay off until you choose Accept all. Details, categories, and how to change your choice: Cookie Policy.
6. Retention
- Account, booking, and invoice records: up to 7 years for tax and contract obligations, then deleted or anonymised.
- Support and enquiry messages: up to 24 months from last interaction, earlier on a valid erasure request where the law allows.
- Cookie consent preference: up to 12 months, after which we may ask again.
- Security logs: typically 90 days unless needed for an incident.
7. Your rights under DPDP
You may request access, correction, erasure, and a summary of processing, and you may withdraw consent for optional processing, by emailing privacy@udaipurs.com. We will acknowledge and respond within the timelines in the DPDP Act and its rules.
If you are unhappy with our response, you may escalate a grievance to the same address (mark it “Grievance”) and, thereafter, to the Data Protection Board of India.
8. Children
Bookings and shop orders are for people aged 18 or over. We do not knowingly process personal data of children (under 18) without verifiable parental consent as required by the DPDP Act.
9. Security
Data is encrypted in transit (TLS). Access to admin tools is restricted to authorised staff. No method of transmission is perfectly secure; we take reasonable safeguards appropriate to a travel and commerce site.
10. Updates
Material changes update the date on this page and, where required, we re-prompt for consent. Continued use after an update constitutes notice of the revised policy.
11. Contact
Data Fiduciary / Grievance: privacy@udaipurs.com. Care team: care@udaipurs.com. Address: Lake Palace Road, Udaipur, Rajasthan 313001.