Privacy Policy

• Account information: name, email, phone number, password (stored as an irreversible bcrypt hash).
• Booking information: check-in/out dates, guest count, property selected, special requests, ID details collected at check-in.
• Payment information: handled entirely by Razorpay. We do not see, store, or process your card, UPI, or bank details on our servers.
• Usage data: browser type, IP address, pages viewed, and referral source, collected via server logs and PostHog product analytics.

• To process and manage your booking
• To send you booking confirmations, receipts, pre-arrival info, and post-stay follow-ups
• To respond to enquiries you send us via the contact form, email, or WhatsApp
• To comply with Indian hospitality law, including foreigner registration (Form C) where applicable
• To improve our website, offerings, and guest experience through anonymised analytics

We share personal information only with:

• Razorpay — to process payments (governed by Razorpay's own privacy policy)
• Property hosts / caretakers — the minimum details required to receive you at check-in (name, arrival time, phone)
• Government authorities — when legally required (e.g., FRRO Form C for foreign guests)

We never sell your personal data to advertisers or third-party marketers.

Booking records are retained for 7 years to comply with Indian tax and hospitality record-keeping laws. Account data is retained as long as your account is active. You may request deletion at any time (see section 6).

We use essential cookies to keep you signed in and remember your preferences. We use PostHog to understand how visitors use our website; this data is aggregated and anonymised. You can disable cookies in your browser, though parts of the site may not function correctly.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at newdaystay@gmail.com.

We follow industry-standard practices to protect your data: HTTPS everywhere, bcrypt-hashed passwords, JWT-based session tokens, secure MongoDB storage on managed infrastructure, and PCI-DSS-compliant payment processing via Razorpay. No system is 100% secure, but we take reasonable steps to protect you.

Our website is not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with data, please contact us and we will delete it.

In accordance with the Information Technology Act, 2000 and rules made thereunder, the grievance officer for NewDayStays is:

• Name: The Founder, NewDayStays Hospitality
• Email: newdaystay@gmail.com
• Phone / WhatsApp: +91 63607 34483
• Response time: within 30 days of a written complaint

We may update this policy occasionally. The updated version will be posted here with a new "Last updated" date.