Privacy Policy

Baizu Hotels & Resorts (managed and operated by Baizus Luxury Hotels Private Limited, hereinafter referred to as 'Baizus', 'we', 'our', or 'us') values your privacy. We are committed to protecting the personal data of our guests, visitors, and website users in accordance with the laws of India, including the Information Technology Act, 2000, and the Digital Personal Data Protection (DPDP) Act, 2023.

This Privacy Policy outlines how we collect, process, use, store, and secure the personal and sensitive personal information you provide when using our website or booking services.

We collect personal information to provide you with our signature luxury hospitality services. This includes:

• Identity & Contact Data: Full name, email address, phone number, billing address, and government-issued identification (Aadhaar Card, Passport, or Driving License) as required for mandatory registration under Indian law.
• Payment Data: Credit/debit card numbers, UPI IDs, and billing information processed securely via authorized, encrypted payment gateways.
• Booking Information: Dates of stay, room choices, special preferences, and travel companion details.
• Technical & Usage Data: IP address, browser type, device information, and browsing behaviour collected via cookies.

We process your data strictly under the following legal bases in compliance with the DPDP Act 2023:

• Consent: When you voluntarily submit your details to book a room or inquire about services. You have the right to withdraw this consent at any time.
• Legal Obligation: Registration details are stored to comply with local police regulations (e.g., maintaining Guest Register, submitting Form C for foreign nationals as required by the Ministry of Home Affairs, India).
• Contractual Performance: To process and confirm your room bookings, food & beverage requests, and custom itinerary planning.

We do not sell or lease your personal information. We share your data only in the following limited scenarios:

• Service Providers: Trusted third-party vendors who manage our PMS (Property Management System), payment gateways, and email alerts.
• Government Authorities: We are legally required to share guest details (specifically foreign nationals) with government portals (Form C filing under the Foreigners Act, 1946) or to law enforcement agencies upon valid legal warrants.

We implement strict administrative, technical, and physical security measures as mandated under Section 43A of the Information Technology Act, 2000 and the SPDI (Sensitive Personal Data or Information) Rules, 2011. Your information is stored on secure databases with limited access. Guest register records are retained for a minimum period as required by local tourism and police laws, and thereafter safely deleted or anonymized.

As a data principal under Indian law, you possess specific rights:

• Right to access summaries of personal data processed.
• Right to request correction, completion, or erasure of outdated or incorrect information.
• Right to withdraw consent for any processing that is consent-based.
• Right to nominate an individual to act on your behalf in the event of death or incapacity.

If you have any queries, concerns, or grievances regarding our data practices or this policy, please contact our designated Grievance Officer under the IT Act 2000 and DPDP Act 2023:

Grievance Officer: Divyang Mehta
Email: grievance.officer@baizushotels.com
Address: Baizu Hotels & Resorts, Gangtok Bypass Road, Gangtok, Sikkim - 737101, India