Privacy Policy

Privacy Policy

Last updated: 4 July 2026, 11:00 hrs Indian Standard Time (Asia/Kolkata).

This Privacy Policy explains how Jungleciti Hospitality India Private Limited, operating Jungleciti House Kaziranga and referred to in this Policy as “JHIPL”, “Jungleciti”, “we”, “us” or “our”, collects, uses, stores, protects, shares and deletes personal information relating to guests, website visitors, enquirers, vendors, travel partners and other persons who interact with us.

This Policy is intended to be read with our Booking Policy, Cancellation Policy, Refund Policy, Hotel Policy and Terms & Conditions. It is designed to align with applicable privacy and data-protection requirements including the laws of India, the Digital Personal Data Protection Act and Rules as applicable, the Information Technology Act framework, the European Union GDPR, the UK GDPR and Data Protection Act framework, and applicable United States federal and state privacy principles where they apply to JHIPL’s services. Nothing in this Policy limits any non-waivable statutory right available to you under applicable law.

1. Data controller / data fiduciary and contact

• Business: Jungleciti Hospitality India Private Limited.
• Property / service brand: Jungleciti House Kaziranga.
• Contact email for privacy, data requests and grievances: [email protected].
• Business location: AT Road, NH-715, P.O. Kuthari, Kaziranga National Park, Assam 782136, India.

For Indian users, JHIPL acts as a data fiduciary where it determines the purpose and means of processing personal data. For EU/EEA and UK users, JHIPL normally acts as a data controller for direct bookings and enquiries. Where an online travel agency, booking platform, payment gateway, transport operator, safari operator or other third party independently determines how it uses your data, that party may act as a separate controller/data fiduciary under its own policy.

2. Information we collect

Depending on how you interact with us, we may collect the following categories of information:

• Identity and contact information: name, title, gender where required for booking or legal reporting, nationality, country code, phone number, email address, postal address, guest count, age group of guests where required, and emergency contact information where voluntarily provided.
• Booking and stay information: travel dates, room category, rate plan, meal plan, package, special requests, arrival/departure information, booking reference, OTA reference, internal folio number, invoices, payment status, cancellation/refund status, coupons, communications and support records.
• Legal check-in and regulatory information: identification document type, identification number, passport details, visa details, Foreigner Registration or C-Form details where legally required, local police/tourism reporting data, guest-register data and copies or scans of documents where law, authority direction, hotel safety or check-in process requires them.
• Payment and transaction information: payment confirmation reference, transaction ID, bank/UPI/card network reference, payment gateway response, invoice details, refund reference and limited payment status information. JHIPL does not intentionally store full card numbers, CVV or complete card magnetic/secure authentication data through the website contact form.
• Website and device information: IP address, browser, device type, operating system, page visited, referring page, date and time of visit, cookie identifiers, visitor counter logs and website performance data.
• Communications: emails, contact-form submissions, call-back notes, WhatsApp or chat messages if you contact us through those channels, complaint records, service feedback and marketing preferences.
• Service information for add-ons: safari preferences, transport requirements, airport transfer details, itinerary details, food preferences, accessibility needs or other information that you choose to provide so that requested services can be arranged.

3. Sensitive information and identity documents

Identity proofs, passports, visas, arrival/departure records, government forms and similar records may be processed only where required for check-in, security, fraud prevention, contractual necessity, local authority reporting, foreigner/tourism reporting or other lawful purposes. Once passport copies, ID proofs, guest registration information, C-Forms or other required documents are submitted to local police, tourism departments, immigration, tax authorities, statutory bodies or other lawful authorities, the custody, retention, deletion and further processing by those authorities is not under the control of JHIPL. Such authorities process and retain those records under their own laws, procedures and record-retention rules.

4. How and why we use information

• To respond to enquiries, quotes, booking requests and guest support communications.
• To create, confirm, manage, modify, cancel or refund bookings.
• To provide accommodation, food and beverage, safari assistance, transport support, custom-designed tours, high-season procurement support and related hospitality services.
• To process payments, issue invoices, reconcile accounts, manage coupons and comply with tax, accounting and audit obligations.
• To complete check-in, verify identity and comply with police, tourism, immigration, tax, consumer-protection, court or government authority requirements.
• To maintain guest safety, property security, fraud-prevention systems, visitor logs and incident records.
• To send service messages, booking updates, policy updates, cancellation/refund replies and guest-care communications.
• To send marketing and promotional communication only through JHIPL’s own secured systems or authorised in-house communication tools, where permitted by law and subject to your opt-out rights.
• To improve our website, services, guest experience, customer-care quality, security controls and legal compliance.
• To establish, exercise or defend legal claims and protect the rights, safety, property and lawful interests of JHIPL, guests, staff and third parties.

5. Legal basis for processing

Depending on the law that applies to you, we rely on one or more of the following grounds: performance of a booking contract or pre-contractual enquiry; compliance with legal obligations; consent where required; legitimate interests such as service delivery, fraud prevention, security, record keeping and guest support; vital interests in emergencies; public-interest or statutory reporting obligations where applicable; and other lawful uses recognised under applicable Indian, EU/EEA, UK or US privacy laws.

6. Online travel agencies, booking platforms and payment partners

If you book through an online travel agency, booking platform, payment gateway, travel marketplace, bank or card network, that third party may collect and store your name, phone number, email address, card/payment details, billing address, device data, booking preferences, cancellation/refund history and other information at its own end. OTA and payment-partner collection, card processing, fraud screening, data storage, retention, marketing, profiling, cross-border transfer and deletion practices are not controlled by JHIPL. Guests should read the privacy policy and terms of the OTA, booking platform, card network, bank or payment gateway used for the booking.

For OTA bookings, JHIPL may receive only the booking details made available by the OTA, and JHIPL’s ability to correct, delete, refund, cancel or alter OTA-held data may be limited by the OTA’s system and rules. Requests relating to OTA-held card data, OTA account data, OTA marketing preferences or OTA platform records must be submitted directly to the OTA unless applicable law requires otherwise.

7. Sharing with service providers, operators and high-season procurement partners

JHIPL does not sell customer data to third-party marketing agencies. We do not share customer data with independent third-party marketing agencies for their own direct marketing. However, JHIPL may share information on a need-to-know basis with:

• booking engines, reservation systems, payment processors, banks and invoice/accounting systems;
• IT hosting, website, email, security, analytics, communication and customer-support service providers;
• safari operators, transport providers, airport-transfer partners, guides, restaurant or catering partners, event suppliers, itinerary suppliers and independent operators needed to provide requested services;
• independent companies, lessees, contractors or operators used when services are not directly offered by Jungleciti, when high-season procurement is required, when inventory or services are sourced externally, or when a requested package needs third-party performance;
• government authorities, police, tourism bodies, immigration/foreigner registration authorities, courts, tribunals, regulators, tax authorities or law-enforcement agencies where legally required or reasonably necessary;
• professional advisers, insurers, auditors, legal counsel, collection agencies, dispute-resolution bodies and prospective business transferees where permitted by law.

Where information is shared with service providers or operators, JHIPL endeavours to share only the information reasonably required for the service and to use appropriate contractual, technical and organisational safeguards where feasible. Some third-party operators may be independent businesses with their own legal obligations, insurance, licences, safety procedures, cancellation rules, liability limits and privacy practices.

8. Marketing communication and opt-out

JHIPL may use guest and enquiry contact details within the company’s secured systems to send service updates, offers, newsletters, local travel information or hospitality promotions, where permitted by applicable law. We do not provide your information to outside marketing agencies for their independent marketing campaigns. You may opt out of promotional emails by writing to [email protected]. Even after opting out, we may still send essential service, booking, payment, legal or safety communications.

9. Cookies, visitor counter and website logs

Our website may use essential cookies, preference cookies, security logs and limited analytics or performance technologies. The website may also maintain a visitor counter that records visit history in project-level text or log files, including the visit time, visitor count number, page URL/referrer, IP address and user-agent string. These logs are used for visitor counting, security, diagnostics, fraud prevention, abuse detection and website administration. Browser settings may allow you to block or delete cookies, but some website functions may not operate correctly without essential cookies.

10. Hashing, pseudonymisation and database protection

JHIPL may store certain customer-related identifiers, authentication data, verification tokens, duplicate-checking references, internal matching values or security records as hash values or in similarly protected formats in its databases or systems. Hashing can reduce exposure of raw data but may not always make data fully anonymous, especially if the hashed value can be linked back to a person or booking. Where a hashed or pseudonymised value can identify or relate to a person, JHIPL treats it as protected personal data and applies appropriate access controls and retention rules.

11. Data security

We use reasonable technical and organisational measures designed to protect personal information, including access controls, restricted operational access, secure hosting practices, staff confidentiality duties, role-based access where feasible, payment gateway segregation, backups, logging, hashing/pseudonymisation where appropriate and periodic review of systems. No internet transmission, email, booking platform or storage system can be guaranteed to be completely secure. Guests must not send unnecessary sensitive information by insecure channels.

12. How long information is kept

We keep personal information only for as long as reasonably necessary for the purpose collected, for guest service, audit, legal, tax, safety, dispute or statutory reasons, or as required by applicable Indian government regulations and other applicable laws. Typical retention periods are as follows, subject to longer or shorter legal requirements:

Record category	Typical retention approach
Website enquiries and non-booking communication	Normally up to 24 months from the last meaningful interaction, unless needed for a booking, dispute, legal claim or business record.
Confirmed booking, invoice, payment reference and accounting records	Normally retained for the period required for tax, GST, company, accounting, audit and limitation-law compliance in India, generally up to 8 financial years or longer where a claim, audit or authority request is pending.
Guest register, check-in, ID verification and statutory hotel records	Retained for the period required by hotel, police, tourism, foreigner/immigration, tax and local authority rules, and for safety or legal defence where required.
Passport, ID proof or government-submission records	Retained by JHIPL only as required for lawful hotel operations and statutory reporting. Records submitted to government/local authorities are retained by those authorities under their own rules and are not controlled by JHIPL.
Visitor counter, website security and server logs	Normally up to 12 to 24 months unless required for security, fraud investigation, legal compliance or technical troubleshooting.
Marketing records and opt-out lists	Marketing contact data is kept until opt-out, inactivity cleanup or legal deletion. Suppression/opt-out records may be retained as long as needed to honour the opt-out request.
Complaint, incident, damage, chargeback or legal-claim records	Until final closure of the matter and expiry of applicable limitation, audit or enforcement periods.

When information is no longer required, JHIPL deletes, anonymises, archives, hashes or restricts access to it in accordance with applicable law, system capability and legitimate record-keeping needs.

13. Your rights

Subject to verification, exceptions and applicable law, you may have rights to request access to your personal information, correction of inaccurate information, deletion/erasure, withdrawal of consent, restriction of processing, objection to processing, portability, information about processing, grievance redressal, nomination rights under Indian law where applicable, opt-out from promotional communication and non-discrimination for exercising applicable US state privacy rights. EU/EEA and UK users may also have rights to lodge complaints with their local supervisory authority. California and other US state residents may have rights to know/access, delete, correct, obtain portability and opt out of sale/share or targeted advertising where applicable.

To submit a request, email [email protected] with your full name, booking reference if any, contact details used for the booking/enquiry, country/state of residence and the right you wish to exercise. We may ask for information to verify your identity and authority. We may refuse or limit requests where the law allows, including where records must be retained for legal, tax, safety, fraud-prevention, statutory reporting, dispute or authority reasons.

14. International transfers

JHIPL is based in India and your information may be processed in India. Depending on service providers used, information may also be processed by cloud, booking, payment, communication or support providers located in other countries. Where data from the EU/EEA, UK, USA or another jurisdiction is transferred internationally, JHIPL will use appropriate safeguards where required by applicable law, such as contractual protections, adequacy mechanisms, standard contractual terms or equivalent measures as applicable.

15. Children and minors

Our website and services are not intended to be used by children to make bookings without adult supervision. Information about minors may be collected when provided by a parent, guardian or responsible adult for room allocation, legal check-in, safety, age verification, meal planning or guest-service purposes. A parent or guardian should contact us if they believe a minor’s information has been provided without proper authority.

16. Legal requests, fraud prevention and safety

We may preserve, disclose or process personal information where reasonably necessary to comply with law, lawful authority requests, court orders, police/tourism/immigration reporting, tax requirements, fraud checks, chargeback defence, guest safety, property security, incident investigation, recovery of dues, enforcement of terms or protection of rights and property.

17. Changes to this Privacy Policy

We may update this Policy from time to time. The “Last updated” date shows the latest published version. Continued use of the website or services after an update means the updated Policy applies, subject to any mandatory legal notice or consent requirement.

18. Governing law and jurisdiction

This Policy and disputes relating to JHIPL’s processing of personal information in connection with Jungleciti House Kaziranga shall be governed by the laws of India, subject to any non-waivable rights available under applicable foreign privacy laws. For disputes arising from Indian bookings, services, website use, hotel operations or JHIPL-controlled processing, the competent courts and forums at Nagaon, Assam, India shall have jurisdiction, unless applicable law provides a mandatory alternate forum that cannot be contractually excluded.