Last updated: 29 September 2026
Ivara Resorts (“Ivara”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect when you visit www.ivararesorts.com (the “Website”), make an enquiry or reservation, or stay with us at Khudar Bridge, Khajuraho, Madhya Pradesh. It also explains why we collect that data, how we use and protect it, and the choices and rights available to you.
This policy is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 together with the Digital Personal Data Protection Rules, 2025, as each applies.
1. Personal Data We Collect
We collect only the personal data we need to respond to you, host you and meet our legal obligations.
a) Enquiries and contact forms
- First name, last name, email address, phone number
- The details you share in your message, such as travel dates, number of guests, event requirements or special requests
b) Reservations and stays
- Full name, contact details and address of the primary guest and accompanying guests
- Government-issued photo ID such as Aadhaar, Passport, Driving Licence or Voter ID, as required at check-in under applicable law
- For foreign nationals: passport and visa details, collected to complete the mandatory foreigner registration with the authorities (Form C)
- Arrival and departure details, room preferences, dietary requirements and special requests
- Billing and payment details, such as the transaction reference, amount and GST details where applicable. Card details entered on a payment gateway are processed directly by that gateway. We do not store full card numbers or CVV.
c) Events, weddings and group bookings
- Name, contact details and organisation of the host or planner
- Guest lists, event dates and specific requirements you share with us
d) Information collected automatically
- IP address, browser type, device information, pages visited, referring website and time spent on the Website
- This data is collected through cookies and similar technologies (see Section 7)
e) Communications
- Records of emails, calls, WhatsApp messages and feedback you exchange with us
We do not knowingly collect health, financial or other sensitive information unless you choose to share it with us, for example a dietary or accessibility need. In that case we use it only to meet that need.
2. How We Use Your Personal Data
We use your personal data to:
- Respond to your enquiries and send quotes or proposals you have requested
- Process, confirm, modify or cancel reservations and event bookings
- Complete check-in formalities and meet statutory requirements, including guest registers, ID verification and foreigner reporting (Form C)
- Provide and personalise services during your stay, including dining, golf, excursions and transfers
- Process payments, issue invoices and meet tax and accounting obligations
- Send service messages about your booking by email, SMS, phone or WhatsApp
- Send offers, newsletters and updates, only with your consent. You may opt out at any time.
- Improve our Website, services and guest experience through analytics and feedback
- Maintain safety and security on the property, including CCTV in public areas
- Prevent fraud, resolve disputes and comply with applicable laws, court orders or requests from government authorities
3. Legal Basis for Processing
We process your personal data:
- With your consent. When you submit a form, make a booking or subscribe to updates, you consent to processing for that purpose.
- For legitimate uses permitted by law. These include data you provide voluntarily for a specific purpose, compliance with legal obligations (such as guest registration and tax records), responding to medical emergencies, and ensuring safety.
Where processing is based on consent, you may withdraw it at any time (see Section 9). Withdrawal does not affect processing already carried out. It may, however, mean we cannot continue to provide a service that depends on that data.
4. How We Share Your Personal Data
We do not sell your personal data. We share it only as needed with:
- Service providers who help us operate, such as booking engine and property management system providers, payment gateways, website hosting, email and messaging platforms, and analytics providers. They may process your data only on our instructions and must protect it.
- Online travel agencies and travel partners. If you book through a third-party platform such as an OTA or travel agent, that platform shares your booking details with us. Its own privacy policy governs the data it collects.
- Experience and transport partners, such as safari operators, excursion guides and transfer providers, but only when you ask us to arrange such services
- Government and law-enforcement authorities, where required by law. This includes local police, the Foreigners Regional Registration Office and tax authorities.
- Professional advisers, such as auditors and legal counsel, under a duty of confidentiality
- A successor entity, in the event of a merger, acquisition or transfer of the business, subject to this policy
5. Data Storage and International Transfers
Your data is stored on secure servers in India and, where our service providers operate internationally, in other countries. Any transfer outside India is made in accordance with Indian law and any restrictions notified by the Government of India.
6. Data Retention
We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law:
- Enquiries that do not lead to a booking: up to 12 months from our last communication
- Reservation, guest register and billing records: for the period required under tax, accounting and applicable hospitality regulations (generally up to 8 years)
- Marketing preferences: until you withdraw consent or unsubscribe
- CCTV footage: overwritten on a rolling basis unless required for an investigation
After these periods, we securely delete or anonymise the data.
7. Cookies and Tracking Technologies
The Website uses cookies and similar technologies to:
- Keep the Website working correctly (essential cookies)
- Understand how visitors use the Website, for example through Google Analytics (analytics cookies)
- Measure and improve our advertising, for example through Google Ads and Meta (Facebook/Instagram) pixels (marketing cookies)
You can manage or disable cookies in your browser settings. Blocking essential cookies may affect how the Website works. Where required, we will ask for your consent before setting non-essential cookies.
8. How We Protect Your Data
We apply reasonable security practices and procedures to protect your personal data against unauthorised access, loss, misuse or alteration. These include:
- Encrypted (HTTPS) connections on the Website
- Access controls that limit personal data to staff who need it
- Secure, PCI-DSS compliant third-party payment gateways
- Regular review of our systems and service providers
No method of transmission over the internet is completely secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.
9. Your Rights
Subject to applicable law, you have the right to:
- Access. Obtain a summary of the personal data we hold about you and how we process it.
- Correction and updating. Ask us to correct inaccurate or incomplete data.
- Erasure. Ask us to delete data no longer needed for its purpose, unless the law requires us to retain it.
- Withdraw consent for processing based on consent, including marketing communications
- Grievance redressal. Raise a complaint with us and receive a response.
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity
To exercise any of these rights, write to reservations@ivararesorts.com with the subject line “Data Request”. We may need to verify your identity before acting on a request. To stop marketing emails, you can also use the unsubscribe link in any of them.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children's Privacy
Our Website and services are not directed at children under 18. Reservations must be made by an adult. We do not knowingly collect personal data from children except as provided by a parent or guardian for a stay (for example, names of accompanying minors on a guest register). If you believe a child has provided us personal data without consent, please contact us and we will delete it.
11. Third-Party Links
The Website may link to third-party websites, including social media, maps, OTAs and payment pages. We are not responsible for their privacy practices. Please review their policies before sharing any information with them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “Last updated” date. Significant changes will be communicated where appropriate.
13. Grievance Officer and Contact Us
For any questions, requests or complaints about this Privacy Policy or your personal data, please contact our Grievance Officer:
Email: reservations@ivararesorts.com
Phone: +91 93183 66456