Privacy Policy

1. Who we are

This Privacy Policy applies to planetmunnar.com and the booking pages linked from it, operated by The Planet Munnar, a resort located at Papathichola, Suryanelli, Munnar, Idukki District, Kerala — 685618, India.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), The Planet Munnar acts as the Data Fiduciary for personal information collected through this website.

2. Information we collect

Information you give us directly

When you enquire or submit a booking request through our website or booking engine, we collect:

• Full name
• Phone / WhatsApp number
• Email address
• Check-in and check-out dates, number of adults and children
• Room preference and any special requests you share with us (e.g. anniversary, dietary needs, trekking add-ons)

Information collected automatically

When you browse our website, certain information is collected automatically via cookies and similar technologies, including:

• IP address and approximate location
• Device, browser type, and operating system
• Pages viewed, time spent, and how you arrived at our site (e.g. from a Google or Instagram ad)

3. Cookies & tracking technologies

We use cookies in three categories. You control which of these (beyond Strictly Necessary) are active via the cookie banner shown when you first visit, and you can change your choice at any time.

You can review or change your cookie choices at any time:

(This opens the cookie preference panel on our homepage.)

4. How we use your information

• To respond to booking enquiries and confirm reservations
• To contact you by email, phone, or WhatsApp regarding your stay
• To send booking confirmations and, where relevant, offers you have opted into
• To measure and improve the performance of our website and marketing campaigns
• To comply with legal, tax, and accounting obligations

We do not sell your personal information to third parties.

5. Who we share information with

We share limited information with the following categories of third parties, only as necessary for the purposes above:

• Google — Google Ads, Google Analytics, Google Tag Manager, and Google Maps (used to display our location)
• Meta — Facebook/Instagram Pixel, for ad measurement, and Instagram's embed service when you choose to play a guest video on our site
• WhatsApp Business — when you choose to message us via WhatsApp
• Our internal reservations system — to process and confirm your booking

These providers only receive the information necessary to perform their function and are bound by their own privacy and data-processing terms.

6. How long we keep your information

We retain booking enquiry details (name, phone, email, stay details) for as long as necessary to fulfil your booking and for a reasonable period afterward for accounting, legal, and customer-service purposes, after which it is deleted or anonymised. Analytics and advertising cookie data is retained according to the relevant platform's own policy (typically 30 days to 26 months, depending on the provider).

7. Your rights under the DPDP Act, 2023

As a person whose personal data we process ("Data Principal"), you have the right to:

• Request a summary of the personal information we hold about you
• Request correction or updating of inaccurate or incomplete information
• Request erasure of your personal information, where it is no longer necessary for the purpose it was collected
• Withdraw consent at any time (this does not affect the lawfulness of processing carried out before withdrawal)
• Nominate another individual to exercise these rights on your behalf, in the event of death or incapacity
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India

To exercise any of these rights, contact us using the details in Section 11.

8. Security

We take reasonable technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

Our website and booking services are intended for adults making travel arrangements. We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will indicate when it was last revised. We encourage you to review this page periodically.

11. Contact us / Grievance Officer

If you have questions about this Privacy Policy, wish to exercise any of your rights, or have a grievance regarding how your personal information is processed, please contact us: