Privacy policy

 

Last Updated: April 23, 2026

At Hillstay, we are committed to protecting the privacy of our guests and website users. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit www.hillstay.in or book our stays and events.

1. Information We Collect

We collect information to provide a better experience and to facilitate your bookings in the hills of Uttarakhand. When you open the Website, our servers automatically record information that your browser sends. This data may include information such as your device's IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to the Website and Services, pages of the Website and Services that you visit, the time spent on those pages, information you search for on the Website, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Website and Services. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.

  • Personal Identification: Name, email address, phone number, and physical address provided during registration or booking.

  • Booking Details: Information regarding your selected stays (e.g., in Nainital, Mukteshwar), event participation (e.g., Sunrise at Cheena Peak), and travel dates.

  • Payment Information: While we use secure third-party processors, we may collect billing details necessary to finalize transactions.

  • Automatically Collected Data: Technical data including your IP address, browser type, and "Cookies" which are required to provide all website features.

2. How We Use Your Information

In order to make the Website and Services available to you, or to meet a legal obligation, Hillstay needs to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Any of the information we collect from you may be used for the following purposes:

  • Booking Fulfillment: To process your reservations for villas, cottages, or guided hikes.

  • Customer Support: To respond to inquiries sent via our "Contact Us" or WhatsApp support channels.

  • Marketing & Loyalty: To manage our Rewards Program (PointsPLUS) and send updates about new locations or "curated" offers.

  • Safety & Legal: To comply with local regulations in Uttarakhand and for fraud prevention.

Processing your Personal Information depends on how you interact with the Website and Services, where you are located in the world and if one of the following applies: (i) you have given your consent for one or more specific purposes; this, however, does not apply, whenever the processing of Personal Information is subject to European data protection law; (ii) provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which you are subject; (iv) processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

Note that under some legislations we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

3. Cookies and Tracking

The Website and Services use "cookies" to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

Our website requires cookies to function properly. By using the site, you agree to:

  • Store your preferences and wishlist items.

  • Analyze site traffic to improve user experience.

  • Maintain your login session.

    We may use cookies to collect, store, and track information for statistical purposes to operate the Website and Services. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. To learn more about cookies and how to manage them, visit internetcookies.org

4. Data Sharing and Third Parties

We do not sell your personal data. We only share information with:

  • Service Partners: Local guides and property managers essential for your stay or event (e.g., mountain guides for the Cheena Peak hike).

  • Legal Authorities: When required by law or to protect against unauthorized transactions.

  • Affiliate Programs: If you engage with our partners or "List My Hotel" services.

5. Your Rights

You have the right to:

  • Access, update, or correct your personal information via your Account settings.

  • Withdraw consent for marketing communications at any time.

  • Request the deletion of your account and associated data, subject to legal retention requirements.

You may exercise certain rights regarding your information processed by us. In particular, you have the right to do the following: (i) you have the right to withdraw consent where you have previously given your consent to the processing of your information; (ii) you have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) you have the right to learn if information is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the information undergoing processing; (iv) you have the right to verify the accuracy of your information and ask for it to be updated or corrected; (v) you have the right, under certain circumstances, to restrict the processing of your information, in which case, we will not process your information for any purpose other than storing it; (vi) you have the right, under certain circumstances, to obtain the erasure of your Personal Information from us; (vii) you have the right to receive your information in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that your information is processed by automated means and that the processing is based on your consent, on a contract which you are part of or on pre-contractual obligations thereof.

6. Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure. 

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and the Website and Services cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts. We encourage users to use strong passwords for their Hillstay accounts.

7. Acceptance of this policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Website and Services you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the website and its services.

8. Contact Us

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may do so via the contact form.

For questions regarding this Privacy Policy or your data, please contact our Legal department, email us at stay@hillstay.in