Privacy notice

Who is responsible

For a direct stay or property enquiry, the property operator may decide why guest information is used. For the hosted property management service, the Aanandham platform operator may process information on behalf of a subscribing property. The parties’ roles can differ by transaction and must be confirmed in the applicable booking terms and customer agreement.

Legal operator

Not yet provided — publication required

Postal address

Not yet provided — publication required

Privacy requests

Not yet provided — publication required

Grievance contact

Not yet provided — publication required

Information that may be handled

• Booking and enquiry details, such as name, email, phone number, travel dates, party size, selected property or unit, booking status, and messages or preferences you provide. Emergency or dietary details may be included when you provide them.
• Payment-related records such as amount, status, gateway order, payment, or refund references. The exact fields depend on the payment provider and integration; this notice does not assert that payment-card or bank data are never handled by the service.
• For property staff and tenant users: account identifiers, authentication and authorization data, role/property assignments, and security or administrative activity records.
• If you allow optional analytics: visited page paths, an analytics session identifier, and limited source/channel or property-campaign context. Hosting, security, and request logs may separately process technical data such as IP address for delivery, abuse prevention, or troubleshooting.

How information is used

Depending on the service, information may be used to respond to enquiries, manage reservations and stays, coordinate property operations, process or reconcile payments, send service messages, secure accounts, prevent abuse, meet applicable recordkeeping duties, and—only where enabled and permitted—understand website usage. The responsible property or platform operator must identify the applicable legal basis and retention period for each use; this notice does not assign a legal basis on their behalf.

Service providers and sharing

Information may be available to authorized staff of the relevant property and platform, and to providers configured to host the application or database, deliver email or messaging, process payments, provide security/performance services, or deliver optional analytics. Information may also be disclosed when required by law or to protect people and services. The actual provider names, subprocessors, processing locations, and any international-transfer safeguards must be supplied by the operator; they are not fully established by this code review.

Browser storage and analytics choices

Essential application functions may use browser storage for authentication, security, and service operation. Optional website analytics are disabled until you allow them through the preference prompt. When allowed, the site can send page/event information to its configured analytics services and create a session identifier in session storage. You can change your choice here; withdrawing consent stops future optional events in this browser, but does not itself erase records already received by a provider.

Security, retention, and your requests

The service uses technical and organizational safeguards such as access controls and security monitoring. No internet service can promise absolute security. Information is retained according to operational need, contractual duties, and applicable law; the operator must publish a verified schedule covering production records, logs, backups, and provider copies.

Depending on the law that applies, you may be able to request access, correction, deletion, restriction, portability, or object to particular uses, or withdraw consent. The current application does not provide a complete self-service export/deletion workflow.Contact the verified privacy contact above or the property managing your booking. The operator may need to verify identity and may retain records where the law permits or requires it. You may also have the right to complain to a competent regulator.

Automated guest export, erasure, and retention-purge endpoints are currently paused. They do not accept a privacy request or report that your data has been exported or deleted. Submit requests to the responsible property's verified privacy contact for review. An unavailable endpoint does not mean your request has been recorded or that it has been refused.

Children and sensitive details

A parent or guardian should provide information for a child where needed to arrange a stay. Do not submit sensitive details unless they are necessary for the requested service. The responsible property should confirm its rules for children and any special category or sensitive information before collection.