Privacy Policy for XD HOTELS AND TRAVELS

This Privacy Policy explains how XD HOTELS AND TRAVELS collects, uses, stores, shares, protects, and manages information when a person uses the website, listing pages, account pages, enquiry forms, booking flows, quote flows, checkout pages, payment links, invoice pages, restaurant ordering pages, kitchen workflows, waiter workflows, delivery partner workflows, host dashboards, customer-service forms, WhatsApp links, call links, email links, and related digital or operational services connected with Bommasandra.com and Sagar Niwas style accommodation, hospitality, rental, sale, restaurant, delivery, and marketplace services. By using the website or sharing information with the business, a user agrees that XD HOTELS AND TRAVELS may process information for legitimate business, contractual, safety, support, legal, tax, payment, fraud-prevention, service-delivery, and communication purposes as described here.

The information collected may include name, phone number, WhatsApp number, email address, login details, role, company name, GSTIN or other tax identification, billing name, billing address, stay purpose, stay dates, guest count, patient or attendant requirements voluntarily shared by the user, family requirements, food preferences, restaurant instructions, table or room reference, delivery address, delivery instructions, identity or KYC information, booking details, quote details, order details, invoice details, payment status, refund details, service request content, support messages, host details, child host details, listing ownership details, commission and payout details, browser data, device data, IP address, cookies, page visits, source campaign, search filters, saved favourites, cart data, and interactions with website features. Some information is required to process a booking, order, invoice, payment, tax record, support request, or host operation. If required information is not provided, the service may be delayed, restricted, rejected, or cancelled.

XD HOTELS AND TRAVELS uses information to respond to enquiries, prioritize direct calls, send WhatsApp support links, create accounts, authenticate users, protect accounts, manage listings, confirm availability, create quotes, convert quotes to orders, process bookings, manage restaurant orders, issue kitchen tickets, coordinate delivery, calculate delivery charges, collect deposits, process payments, generate invoices, attach invoice documents to emails, calculate applicable GST or other tax settings, manage refunds, returns, replacements, cancellations, order modifications, security deposits, folios, recurring stays, subscriptions, host commissions, parent host revenue share, child host payouts, customer-service cases, delivery partner assignments, restaurant operations, reports, audits, search indexing, marketing campaigns, SEO content, and operational quality checks. The business may also use data to improve page design, mobile responsiveness, search filters, maps, listing quality, fraud prevention, support scripts, email templates, and payment success rates.

Information may be shared with employees, administrators, hosts, parent hosts, child hosts, property managers, restaurant teams, waiters, kitchen teams, delivery partners, payment service providers, banks, email service providers, SMS or WhatsApp communication providers, website hosting providers, analytics tools, accounting providers, customer relationship management tools, automation platforms, auditors, tax professionals, legal advisors, and government or regulatory authorities where required. Sharing is limited to the purpose of enquiry handling, booking fulfilment, payment processing, invoice creation, tax compliance, support, dispute resolution, safety, service delivery, fraud prevention, or legal compliance. The business may use integrations such as payment gateways, mail servers, spreadsheets, CRM tools, or workflow platforms where configured by the super admin.

Payment information is processed through approved payment service providers and banking partners. XD HOTELS AND TRAVELS should not ask users to send complete card numbers, UPI PINs, banking passwords, one-time passwords, or other sensitive authentication credentials through ordinary email, chat, or support forms. Users are responsible for checking the payment page, amount, currency, tax line, merchant name, and order reference before completing a payment. The India site configuration is intended to use Indian Rupees for India locale transactions, with UPI, cards, netbanking, or similar methods enabled through an approved payment strategy. Payment status, gateway reference, refund status, invoice number, order number, and reconciliation data may be stored to support accounting, customer service, audit, and dispute handling.

Cookies, pixels, server logs, analytics scripts, search indexing tools, and similar technologies may be used to keep users signed in, remember preferences, maintain carts, secure sessions, measure traffic, understand marketing sources, improve page performance, index published content, and diagnose errors. Users can restrict cookies through their browser, but some features such as login, cart, checkout, saved searches, quote conversion, and dashboard workflows may not operate correctly if essential cookies are disabled. Marketing cookies, if configured, should be used in accordance with applicable consent, platform, and advertising requirements.

XD HOTELS AND TRAVELS keeps information for as long as needed for booking fulfilment, account management, customer support, legal compliance, tax records, invoice records, audit records, fraud prevention, dispute resolution, property management, host settlement, restaurant fulfilment, delivery tracking, and business reporting. Retention periods may differ for leads, bookings, payments, invoices, KYC documents, restaurant orders, delivery records, support cases, host payouts, commission ledgers, and marketing records. When information is no longer reasonably required, the business may delete, anonymize, archive, restrict, or securely retain it according to operational and legal requirements.

Users may request correction, update, access, withdrawal of optional marketing communication, account support, deletion where legally possible, or clarification regarding their personal information by contacting XD HOTELS AND TRAVELS through the channels listed on the website. Some records cannot be deleted immediately if they are required for invoices, tax, payment reconciliation, fraud prevention, legal claims, customer-service history, safety, or statutory records. Withdrawal of consent for optional communications will not affect processing that is required to complete an existing booking, process an order, issue an invoice, defend a claim, comply with law, or maintain business records. Identity verification may be required before actioning a request.

The business uses reasonable administrative, technical, and operational safeguards to protect information, including role-based access, frontend account separation, administrator-only WordPress access, payment provider controls, email controls, data minimization, audit references, service request references, invoice references, and operational logging. No digital system is completely risk free. Users should keep passwords secure, avoid sharing login access, use accurate contact details, report suspected misuse quickly, and avoid sending sensitive medical or financial details unless required for a specific service and appropriate to share.

This Privacy Policy is governed by laws applicable in India and Karnataka. Any complaint, claim, dispute, proceeding, or legal action connected with this Privacy Policy, website use, data handling, booking data, order data, restaurant data, delivery data, payment data, invoice data, account data, or support communication shall be subject to Bangalore jurisdiction only. The competent courts, consumer forums, arbitral seat where applicable, and legal forums located at Bengaluru/Bangalore, Karnataka, India shall have exclusive jurisdiction, subject only to mandatory law that cannot be contractually restricted. Users outside Bangalore agree that use of the website and sharing of information with XD HOTELS AND TRAVELS is accepted on this Bangalore jurisdiction only basis.

XD HOTELS AND TRAVELS may update this Privacy Policy from time to time to reflect changes in law, technology, payment providers, mail providers, marketplace operations, restaurant operations, delivery operations, integrations, security controls, or business processes. The latest version posted on the website will apply from publication unless a different effective date is stated. Continued use of the website after publication means the user acknowledges the revised policy. For privacy support, users should contact the business through the official call, WhatsApp, account, booking, invoice, or service request channels shown on the website.