Privacy Policy

The Silk Routee Resort & Spa, Manchar Last updated: [29 August 2026]

The Silk Routee Resort & Spa (“we,” “us,” “our,” or “the Resort”), located at G. No. 696/1, Near Shamdar Mandir, Eklahare Village, Manchar, Pune, Maharashtra – 410503, is committed to protecting the privacy of our guests, website visitors, and event clients. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and rules made thereunder.

By using our website, making a reservation, staying at the Resort, or engaging our services for events, weddings, or dining, you acknowledge that you have read and understood this Policy.

1. Who This Policy Applies To

This Policy applies to:

• Visitors to our website (www.thesilkrouteeresort.com)
• Guests booking rooms, cottages, or packages directly or via third-party platforms
• Wedding, banquet, and event clients and their guests
• Restaurant, spa, and activity guests (including day visitors)
• Job applicants and vendors, where relevant

2. Information We Collect

2.1 Information You Provide Directly

• Identity and contact details: name, email address, phone number, postal address
• Government ID proof: as required for check-in under applicable hospitality and local police regulations (e.g., Aadhaar, passport, driving licence, voter ID)
• Booking and stay details: check-in/check-out dates, number of guests, room preferences, special requests
• Payment information: billing details and payment card information, processed via secure third-party payment gateways (we do not store full card details on our servers)
• Family/companion details: names and ages of accompanying guests, including children, where relevant for occupancy and pricing
• Event and wedding details: guest counts, catering/menu preferences, vendor coordination information, for banquet and lawn bookings
• Special requirements: dietary preferences (e.g., vegetarian, Jain, allergies) or accessibility needs you voluntarily share with us to serve you better
• Communications: messages, feedback, or enquiries sent via phone, email, WhatsApp, contact forms, or social media

2.2 Information Collected Automatically

• Website usage data: IP address, browser type, device information, pages visited, and time spent, collected via cookies and similar technologies
• Booking platform data: information shared with us when you book through partner platforms such as Booking.com, EaseMyTrip, or similar Online Travel Agencies (OTAs)

2.3 On-Premises Information

• CCTV footage: for the safety and security of guests, staff, and property, CCTV cameras operate in common and public areas of the Resort (not in guest rooms, washrooms, or other private areas)
• Wi-Fi network data: if you use our complimentary guest Wi-Fi, we may collect device identifiers and connection logs for network security purposes

We do not intentionally collect sensitive personal data (such as health information) unless you voluntarily provide it — for example, informing us of a medical condition to arrange appropriate assistance.

3. How We Use Your Information

We process personal data for the following purposes:

• Processing and confirming room, dining, spa, and event bookings
• Verifying guest identity at check-in, as required by law
• Facilitating payments and billing
• Personalising your stay (e.g., special occasion arrangements, dietary accommodations)
• Coordinating weddings, banquets, and group events with you and your chosen vendors
• Responding to enquiries, feedback, and support requests
• Sending booking confirmations, stay-related communications, and (with your consent) promotional offers or newsletters
• Ensuring the safety and security of guests, staff, and property through CCTV monitoring
• Complying with legal, tax, and regulatory obligations, including local police/hospitality registration requirements
• Improving our website, services, and guest experience through analytics

4. Legal Basis and Consent

Under the DPDP Act, we process your personal data where you have given clear, informed consent, or where processing is necessary for a specified legitimate use — such as fulfilling a booking you have requested, complying with a legal obligation, or responding to a medical emergency. Where we rely on your consent (for example, for marketing communications), you may withdraw it at any time, as described in Section 8.

5. How We Share Your Information

We do not sell your personal data. We may share information with:

• Online travel agencies and booking partners (e.g., Booking.com, EaseMyTrip) when you book through their platforms
• Payment processors and banks, to complete transactions securely
• Service providers and vendors, such as decorators, caterers, or photographers you have engaged for an event, limited to information necessary to deliver that service
• Government and law enforcement authorities, where required by law (e.g., mandatory guest registration, local police verification)
• Professional advisors, such as auditors or legal counsel, where necessary
• Group/associate entities, if applicable, for internal administrative purposes only

Any third party we share data with is expected to handle it securely and use it only for the purpose for which it was shared.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including:

• Statutory retention periods for guest registration and financial records under applicable Indian law
• The duration needed to resolve disputes, complaints, or legal claims
• CCTV footage, which is retained for a limited period and then automatically overwritten, unless required for an ongoing investigation

Once retention is no longer necessary, data is securely deleted or anonymised.

7. Data Security

We implement reasonable security safeguards to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Restricted, role-based access to guest data
• Secure payment gateways compliant with industry standards
• Physical security measures for on-premises records
• Staff awareness regarding confidentiality of guest information

While we take these precautions seriously, no method of transmission or storage is completely secure, and we encourage you to also take care when sharing personal information online.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Withdraw consent for processing based on consent (e.g., marketing emails), without affecting the lawfulness of processing carried out before withdrawal
• Request erasure of your personal data, subject to our legal retention obligations
• Raise a grievance regarding how your data has been handled
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity, as provided under the DPDP Act

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before actioning a request.

9. Cookies and Website Tracking

Our website may use cookies and similar technologies to:

• Remember your preferences
• Understand how visitors use our website
• Improve website performance and content

You can control or disable cookies through your browser settings. Disabling cookies may affect certain website features, such as booking forms.

10. Children’s Information

We welcome families and guests of all ages. Where information about children is collected (e.g., for room occupancy or age-based pricing), it is provided by, and processed with the consent of, a parent or guardian, and used solely for stay-related purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.

12. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how your personal data is handled, please contact us:

The Silk Routee Resort & Spa Behind Chaudhary Dhaba, Shamadar Baba Road, Pune–Nashik Highway, Eklahare Village, Manchar – 410503, Maharashtra, India

Email: rm@thesilkrouteeresort.com
Phone: +91-77097 87648

If you are not satisfied with our response, you may have the right to lodge a complaint with the Data Protection Board of India, once its grievance mechanisms are operational under the DPDP Act.

This Privacy Policy is provided for general informational purposes and should be reviewed by qualified legal counsel to ensure full compliance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and any other applicable law before publication.