Privacy Policy
Effective Date: 13 October 2026
1. Introduction
Ayaath Spa at Amaya Resort (“we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us through our website, https://ayaathspa-amayaresort.com/.
This Privacy Policy explains how we collect, use, store, process, and protect your personal information when you visit our website, enquire about our spa and wellness services, make an appointment, or complete an online payment.
By using our website or providing your information to us, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will seek your consent before processing your personal information.
2. Information We Collect
We may collect the following categories of information, depending on how you interact with our website and services.
2.1 Personal Information
When you make an enquiry or appointment, we may collect:
Full name
Mobile number
Email address
Appointment date and preferred time
Selected spa service or treatment
Booking reference or transaction reference
Any additional information you voluntarily provide when contacting us
2.2 Payment Information
When you make an online payment, the payment may be processed through Cashfree Payments or another payment service provider explicitly offered on our website.
We may receive payment-related information such as the payment status, transaction reference, order reference, payment amount, payment method category, and other information required to verify your booking.
Your payment details may be processed by the payment service provider in accordance with its own terms and privacy policy. We do not intend to collect or store your full card number, card security code, UPI PIN, internet banking password, or other confidential payment authentication credentials on our website.
2.3 Technical and Website Usage Information
When you visit our website, certain technical information may be collected automatically, depending on the website features and technologies in use. This may include your IP address, browser type, device information, pages visited, access timestamps, and information about how you interact with the website.
Cookies or similar technologies may also be used where enabled.
3. How We Use Your Information
We may use your personal information for the following purposes:
To respond to enquiries and service requests.
To schedule, manage, and confirm spa appointments.
To communicate booking details, changes, reminders, and service-related updates.
To process and verify online payments.
To investigate failed, pending, or duplicate payment transactions.
To process eligible cancellations and refunds.
To provide customer support and resolve complaints.
To maintain booking, transaction, accounting, and business records.
To protect our website, customers, and business against fraud, misuse, and unauthorised activity.
To comply with applicable legal, regulatory, tax, and accounting obligations.
To improve our website and customer experience where permitted by applicable law.
We will not use your personal information for unrelated purposes in a manner inconsistent with applicable law.
4. Online Payments and Cashfree
Our website may use Cashfree Payments to facilitate online payments for spa services or appointments.
When you proceed to payment, relevant booking and transaction information may be shared with Cashfree to initiate, process, authenticate, verify, and reconcile the payment. Cashfree may process additional information under its own privacy policy and applicable terms.
Payment processing may involve your selected payment method, such as a card, UPI, net banking, or another method made available at checkout.
We do not control the independent privacy practices of Cashfree or other third-party payment service providers. Customers should review the applicable provider’s privacy policy and terms before completing a payment.
For payment-related assistance, you may contact us using the details provided at the end of this page.
5. When We Share Personal Information
We may share relevant personal information with the following categories of recipients when necessary and permitted by applicable law:
Payment service providers: To process, verify, reconcile, or refund transactions.
Website hosting and technology providers: To operate, maintain, and secure our website.
Appointment and communication service providers: To manage bookings and send service-related notifications, where such services are used.
The resort or authorised service personnel: Where necessary to coordinate an appointment, deliver a requested service, or manage customer support.
Professional advisers and relevant authorities: Where disclosure is necessary for legitimate legal, regulatory, accounting, or compliance purposes.
We do not sell personal information to third parties as a business practice.
Where third parties process information on our behalf, we will take reasonable steps, as applicable, to ensure that the information is handled appropriately.
6. Cookies and Similar Technologies
Our website may use cookies or similar technologies to support website functionality, remember preferences, maintain security, analyse website performance, or enable other features.
The specific cookies used will depend on the website configuration and the third-party tools enabled.
You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of some website features, including booking or payment processes.
Where required, we will obtain consent before using cookies or similar technologies that require consent under applicable law.
7. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.
These measures may include restricted access to business records, appropriate website security measures, and the use of third-party payment services for online transactions.
However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. We cannot promise absolute security of information transmitted over the internet.
If a personal data breach occurs, we will take appropriate steps in accordance with applicable legal requirements.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including appointment management, customer support, payment reconciliation, refunds, dispute resolution, and compliance with applicable legal obligations.
The actual retention period may depend on the type of information, the purpose for which it was collected, and applicable legal requirements.
Where information is no longer required and no lawful reason for retaining it remains, we will take appropriate steps to delete it or otherwise dispose of it securely, subject to applicable law.
Business confirmation required: [Specify any fixed retention periods or internal retention schedule, if applicable.]
9. Your Privacy Rights
Subject to applicable law, you may have rights concerning your personal information, including the right to request access to information about its processing, correction or updating of inaccurate information, deletion where legally permissible, withdrawal of consent where processing is based on consent, and the ability to raise a grievance.
Some information may need to be retained where required for legal compliance, financial records, transaction reconciliation, or the establishment or defence of legal claims.
To exercise a privacy-related right or raise a concern, contact us using the details below. We may request reasonable information to verify your identity before responding.
We will handle requests in accordance with applicable law and the procedures and timelines that apply to the request.
10. Children’s Privacy
Our website and spa services are not intended to collect personal information from children without appropriate authorisation where required by applicable law.
If a parent or lawful guardian believes that a child’s personal information has been provided to us inappropriately, they may contact us so that we can review the matter and take appropriate action in accordance with applicable law.
Any age restrictions or guardian consent requirements applicable to particular spa services will be communicated separately where relevant.
11. Third-Party Websites and Services
Our website may contain links to third-party websites or services, including payment service providers.
We are not responsible for the content, security, or privacy practices of websites that we do not operate. Your use of those services is subject to their own applicable terms and privacy policies.
We encourage customers to review those policies before providing personal information or completing a transaction on a third-party platform.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, payment arrangements, or applicable legal requirements.
The updated version will be published on this page with a revised effective date, where appropriate. We encourage customers to review this page periodically.
13. Contact and Grievance Redressal
If you have any questions about this Privacy Policy, wish to exercise your applicable privacy rights, or want to raise a privacy-related complaint, please contact us using the details below.
Ayaath Spa at Amaya Resort
Address: The Amaya Resort, Rauta, Uluberia, Howrah, West Bengal 711316, India
Phone: +91 6289516995
Email: info@ayaathhospitality.com
Website: https://ayaathspa-amayaresort.com/