Privacy Policy & Data Protection

1. Overview & Data Fiduciary Identity

Aanandham.go ("we", "our", or "the Platform") operates as a Data Fiduciary under the Digital Personal Data Protection Act (DPDP) 2023 and the General Data Protection Regulation (GDPR). We are committed to safeguarding the personal information and digital privacy of our guests, resort partners, and visitors.

2. Data Collected & Processing Purpose

We collect and process the following information strictly for facilitating wilderness resort reservations, safety protocols, and statutory tax compliance:

• Identity Data: Full Name, Government Photo ID (Aadhaar / Passport for mandatory mountain permit verification).
• Contact Data: Mobile Phone number (for WhatsApp booking vouchers and 4x4 safari dispatch notifications), Email address.
• Operational & Health Data: Dietary requirements (Vegetarian, Vegan, Allergies) and high-altitude emergency contacts.
• Transaction Data: Razorpay payment identifiers, SAC 9963 / 9964 GST billing details (card and UPI details are securely tokenized and never stored on our servers).

3. Data Storage & Cryptographic Encryption

All personal identifying information (PII) is encrypted at rest using industry-standard AES-256-GCM encryption. Administrative database changes are logged to an immutable, cryptographically chained Write-Ahead Log (WAL) with SHA-256 hash block verification.

4. Guest Rights & "Right to be Forgotten"

Under Section 12 of the DPDP Act 2023 and Article 17 of GDPR, you retain the right to access, rectify, or request complete erasure of your personal data. You may execute your Right to be Forgotten at any time by contacting our Data Protection Officer or by requesting 1-Click PII redaction from your booking manager.

5. Contact Our Data Protection Officer (DPO)