+91-9112222223
RoomsTree

Privacy Policy

Last Updated: September 18, 2025

Notice: This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our services. Please read it carefully.

1. Introduction

This Privacy Policy ("Policy") applies to RoomsTree ("we," "us," or "our") and governs data collection and usage. By using our website and services, you consent to the data practices described in this Policy. This Policy does not apply to third-party services that may be linked from our website.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Identification Data: Full name, date of birth, gender, passport/ID details.
  • Contact Information: Email address, phone number, physical address.
  • Payment Information: Credit/debit card details, billing address (processed through PCI-DSS compliant payment processors).
  • Travel Information: Booking details, travel preferences, special requirements.
  • Account Credentials: Username, password, security questions.

2.2 Automated Data Collection

We automatically collect certain information when you visit our website:

  • Device Information: IP address, browser type, operating system, device identifiers.
  • Usage Data: Pages visited, time spent, clickstream data, search queries.
  • Location Data: Approximate geographic location based on IP address.
  • Cookies and Tracking Technologies: For more information, see our Cookie Policy.

3. How We Use Your Information

We use your information for the following purposes:

  • To process and manage your bookings and reservations.
  • To communicate with you about your account and bookings.
  • To provide customer support and respond to inquiries.
  • To improve our website, services, and user experience.
  • To send marketing communications (with your consent where required).
  • To detect and prevent fraud and security incidents.
  • To comply with legal obligations and enforce our terms of service.

3.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the context in which we collect it:

  • Contract: Processing is necessary to fulfill our contractual obligations to you.
  • Consent: You have given us permission to process your data.
  • Legal Obligation: Processing is required by law.
  • Legitimate Interests: Processing is necessary for our legitimate business interests.

4. How We Share Your Information

We may share your information with:

  • Service Providers: Third-party vendors who provide services on our behalf (e.g., payment processing, IT services, customer support).
  • Travel Partners: Airlines, hotels, car rental companies, and other travel service providers to fulfill your bookings.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • Legal Requirements: When required by law, court order, or government regulation.
  • With Your Consent: For any other purpose disclosed to you when you provide the information.

4.1 International Data Transfers

Your information may be transferred to and processed in countries other than your own. We implement appropriate safeguards, such as Standard Contractual Clauses, to ensure your data remains protected when transferred internationally.

5. Data Security

We implement technical and organizational measures to protect your information, including:

  • Encryption of sensitive data in transit and at rest.
  • Regular security assessments and penetration testing.
  • Access controls and authentication procedures.
  • Employee training on data protection best practices.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of your personal data.
  • Correction: Update or correct inaccurate information.
  • Deletion: Request deletion of your personal data under certain circumstances.
  • Restriction: Request restriction of processing of your personal data.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to certain types of processing (e.g., direct marketing).
  • Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, please contact us using the information in the Contact Us section. We may need to verify your identity before processing your request.

6.1 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to opt-out of the sale or sharing of personal information. To exercise these rights, please use our Do Not Sell My Personal Information link or contact us.

8. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children without parental consent. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

RoomsTree Data Protection Officer
Email: [email protected]
Phone:
Address:

For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.