Privacy Policy

1. Introduction

At SastaStay, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services.

By using our Services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

We collect several types of information from and about users of our Services:

2.1 Personal Information

When you register, book a stay, or contact us, we may collect:

• Identity Data: Name, date of birth, gender, photograph
• Contact Data: Email address, phone number, residential address
• Financial Data: Payment card details, billing address (processed securely by our payment partners)
• Identity Verification: Government-issued ID details, student ID
• Emergency Contact: Name and phone number of emergency contact

2.2 Automated Collection

We automatically collect certain information when you visit our website or use our app:

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent, clickstream data, booking history
• Location Data: General location based on IP address or precise location with your consent

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors regarding your transactions
• Social media platforms when you connect your account
• Background verification services (where applicable)

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis
To process and manage your bookings	Performance of contract
To communicate with you about your stay	Performance of contract
To process payments and prevent fraud	Legal obligation and legitimate interests
To provide customer support	Legitimate interests
To send marketing communications (with consent)	Consent
To improve our services and user experience	Legitimate interests
To comply with legal obligations	Legal obligation

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

• Payment processors
• Hostel staff and management
• IT and system administration services
• Marketing and analytics providers
• Customer support platforms

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders or legal processes
• Requests from government authorities
• To protect our rights, privacy, safety, or property
• To enforce our terms and conditions

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new entity.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and testing
• Access controls and authentication mechanisms
• Secure data storage and backup procedures
• Employee training on data protection

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking Technologies

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Correction

You have the right to access the personal information we hold about you and request correction of inaccurate information.

7.2 Data Portability

You can request a copy of your data in a structured, machine-readable format.

7.3 Deletion

You may request deletion of your personal information, subject to certain legal exceptions.

7.4 Restriction and Objection

You can request restriction of processing or object to certain types of processing.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@sastastay.com
• Phone: +91 9963439228
• Address: Data Protection Officer, SastaStay, 123 Hostel Street, City, State 123456