Privacy Policy

Glamour Palace Guesthouse ("we", "us", "our") is a privately operated guesthouse located near Mahabodhi Temple, Bodh Gaya, Bihar 824231, India. We operate the website glamourpalace.in and take the privacy of our guests seriously.

Contact: [email protected] · +91 77838 32432

We collect the following information when you make a booking or contact us:

• Booking data: Name, email address, phone number, check-in and check-out dates, number of guests, special requests.
• Payment data: Payment is processed by Razorpay. We store only the payment reference ID and amount — we never store card numbers, CVV, or bank details.
• Device data: IP address, browser type, and pages visited (via Google Analytics 4, if consent is given).
• Communications: Messages sent to us via WhatsApp, email, or the JINI chat widget.
• Government ID: At check-in, Indian law requires us to record a government-issued photo ID (Aadhaar, Passport, etc.) as per the Foreigners Act 1946 and applicable state rules. Physical records are stored securely on-premises.

• To process and confirm your booking
• To send booking confirmation, pre-arrival information, and post-stay review requests via email and WhatsApp
• To comply with legal obligations (tax records, guest registration)
• To improve our services using anonymised analytics
• To respond to enquiries and support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We use the following third-party services, each with their own privacy policy:

• Razorpay — payment processing (razorpay.com/privacy)
• Meta (WhatsApp) — booking notifications (facebook.com/privacy/policy)
• Google Analytics 4 — anonymised website analytics (only if you accept cookies)
• Cloudflare — security, CDN, and Turnstile CAPTCHA (cloudflare.com/privacypolicy)
• Groq — powers our JINI AI chatbot for unrecognised queries (groq.com/privacy)

We retain booking records for 7 years as required by Indian tax and accounting law. Communication records are retained for 2 years. Analytics data is retained for 14 months in Google Analytics.

You may request deletion of your personal data at any time, subject to legal retention obligations.

Under applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent for analytics cookies at any time
• Lodge a complaint with a relevant data protection authority

To exercise any of these rights, email [email protected].

Our website uses the following cookies:

• Session cookies: Required for the booking process. Deleted when you close your browser.
• Analytics cookies (GA4): Optional. Set only if you accept via our cookie banner.
• Cloudflare cookies: Set by Cloudflare for security purposes.

You can withdraw cookie consent at any time by clearing your browser cookies.

We implement industry-standard security measures including HTTPS encryption, WAF (Web Application Firewall), bcrypt password hashing, rate limiting, and prepared SQL statements. Payment data is handled entirely by Razorpay's PCI-DSS compliant infrastructure.

We may update this policy periodically. The "last updated" date at the top of this page will reflect any changes. Continued use of our website constitutes acceptance of the updated policy.