CAMPSVILLA

Privacy Policy

Last Updated: February 2026

──────────────────────────────────────────────────────────────────

Introduction

Welcome to Campsvilla!

Campsvilla ("we," "our," or "us") operates the website www.campsvilla.com and the Campsvilla mobile application (collectively, the "Platform"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, make bookings, list properties, or interact with our services. This policy applies to all users, including guests (travelers), hosts (property owners), and visitors.

By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

Compliance: This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and other applicable Indian laws governing data protection and privacy.

1. Definitions

For the purposes of this Privacy Policy:

· "Personal Data" means any data about an individual who is identifiable by or in relation to such data.

· "Data Principal" means the individual to whom the Personal Data relates (you, the user).

· "Data Fiduciary" means the entity that determines the purpose and means of processing Personal Data (Campsvilla).

· "Processing" includes collection, storage, use, sharing, and deletion of Personal Data.

· "Platform" refers to the Campsvilla website, mobile applications, and all related services.

· "Services" means all services provided through the Platform, including property listings, bookings, payments, and customer support.

2. Information We Collect

We collect information that you provide directly to us, information we collect automatically, and information from third-party sources.

2.1 Information You Provide Directly

When you use our Platform, you may provide us with the following types of information:

Account Information:

· Full name

· Email address

· Phone number

· Password (encrypted)

· Profile photograph

· Date of birth (optional)

· Gender (optional)

Booking Information (for Guests):

· Travel dates and destination preferences

· Number of guests (adults, children)

· Special requests or requirements

· Emergency contact information

· Government-issued ID (for verification purposes)

Host Information (for Property Owners):

· Property details and photographs

· Property address and location

· Bank account details (for payouts)

· PAN (Permanent Account Number)

· GSTIN (if applicable)

· Government-issued ID for verification

Payment Information:

· Credit/debit card details (processed securely by payment partners)

· UPI ID

· Net banking details

· Billing address

· Transaction history

Communication Information:

· Messages exchanged with hosts/guests through the Platform

· Customer support inquiries and correspondence

· Reviews and ratings

· Feedback and survey responses

2.2 Information Collected Automatically

When you access our Platform, we automatically collect certain information:

Device & Technical Information:

· Device type, model, and operating system

· Browser type and version

· IP address

· Unique device identifiers

· Mobile network information

Usage Information:

· Pages visited and features used

· Search queries and filters applied

· Booking history and patterns

· Time spent on the Platform

· Referral URLs and exit pages

· Clickstream data

Location Information:

· Approximate location based on IP address

· Precise location (with your consent) for location-based services

· Location data from your searches

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

· Social media platforms (if you sign up using Google, Facebook, etc.)

· Payment processors and financial institutions

· Identity verification services

· Marketing partners and affiliates

· Publicly available sources

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Improve Our Services

· Process and manage bookings

· Facilitate communication between guests and hosts

· Process payments and payouts

· Provide customer support

· Personalize your experience and recommendations

· Develop new features and improve existing services

3.2 To Ensure Safety and Security

· Verify user identity and prevent fraud

· Detect and prevent unauthorized access

· Enforce our Terms of Service and policies

· Protect the rights and safety of users and third parties

· Conduct risk assessments

3.3 To Communicate with You

· Send booking confirmations and updates

· Respond to your inquiries and requests

· Send promotional communications (with your consent)

· Notify you about changes to our services or policies

· Send administrative messages

3.4 For Legal and Compliance Purposes

· Comply with applicable laws and regulations

· Respond to legal requests and court orders

· Fulfill tax reporting obligations

· Maintain records as required by law

3.5 For Analytics and Research

· Analyze usage patterns and trends

· Conduct market research

· Measure the effectiveness of marketing campaigns

· Generate aggregated, anonymized insights

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your Personal Data based on the following lawful grounds:

· Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications, location tracking).

· Contractual Necessity: Where processing is necessary to fulfill our contract with you (e.g., processing bookings, payments).

· Legal Obligation: Where processing is required to comply with applicable laws (e.g., tax reporting, responding to legal requests).

· Legitimate Interests: Where processing is necessary for our legitimate business interests, provided such interests do not override your fundamental rights (e.g., fraud prevention, service improvement).

5. Sharing of Information

We may share your information with the following categories of recipients:

5.1 With Other Users

· Guests: Your name, profile photo, and communication will be shared with hosts whose properties you book.

· Hosts: Your property information, photos, and contact details will be visible to potential guests.

· Reviews and ratings are publicly visible on the Platform.

5.2 With Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

· Payment processors (Razorpay, PayU, etc.)

· Cloud hosting providers (AWS, Google Cloud etc.)

· Email and SMS service providers

· Analytics providers (Google Analytics)

· Customer support tools

· Identity verification services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 With Business Partners

· Marketing and advertising partners (with your consent)

· Affiliate partners for referral programs

· Insurance providers for travel insurance services

5.4 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

· Valid legal process (court orders, subpoenas)

· Requests from government authorities

· To protect our rights, property, or safety

· To investigate potential violations of our Terms of Service

· To prevent fraud or other illegal activities

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

5.6 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform.

6.1 Types of Cookies We Use

Essential Cookies:

These cookies are necessary for the Platform to function properly. They enable core features like secure login, shopping cart, and payment processing. You cannot opt out of these cookies.

Functional Cookies:

These cookies remember your preferences (language, currency, recently viewed properties) to provide a more personalized experience.

Analytics Cookies:

These cookies help us understand how visitors interact with our Platform by collecting anonymous information about page visits, traffic sources, and user behavior. We use Google Analytics for this purpose.

Marketing Cookies:

These cookies track your browsing activity to deliver relevant advertisements. They may be set by our advertising partners (Google Ads, Facebook Pixel) and are used to show you Campsvilla ads on other websites.

6.2 Managing Cookies

You can manage your cookie preferences through:

· Your browser settings (to block or delete cookies)

· Our cookie consent banner (when you first visit the Platform)

· Opt-out tools provided by analytics and advertising partners

Please note that disabling certain cookies may affect the functionality of the Platform.

6.3 Other Tracking Technologies

· Pixel Tags/Web Beacons: Small graphics embedded in emails and web pages to track open rates and user behavior.

· Local Storage: Used to store preferences and session data on your device.

· Mobile Device Identifiers: Used to recognize your device for analytics and advertising.

7. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

7.1 Retention Periods

Data Category Retention Period Reason

Account Information

Until account deletion + 3 years

Legal compliance, dispute resolution

Booking Records

7 years from transaction date

Tax and financial regulations

Payment Information

7 years from transaction date

Financial audit requirements

Communication Logs

3 years from communication date

Dispute resolution, quality assurance

Analytics Data

26 months

Service improvement

Marketing Preferences

Until consent withdrawn

Compliance with consent

7.2 Account Deletion

When you delete your account, we will delete or anonymize your Personal Data within 90 days, except for information we are legally required to retain. Some information may remain in our backup systems for a limited period before being permanently deleted.

8. Data Security

We implement robust security measures to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction.

8.1 Technical Measures

· 256-bit SSL/TLS encryption for all data transmission

· Encryption of sensitive data at rest

· Secure payment processing through PCI-DSS compliant partners

· Regular security audits and vulnerability assessments

· Firewalls and intrusion detection systems

· Multi-factor authentication for sensitive operations

8.2 Organizational Measures

· Access controls limiting data access to authorized personnel only

· Employee training on data protection and security

· Confidentiality agreements with employees and service providers

· Incident response procedures for data breaches

· Regular review and update of security policies

8.3 Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required under the DPDP Act, 2023, without undue delay.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your Personal Data:

9.1 Right to Access

You have the right to obtain confirmation of whether we are processing your Personal Data and to access a summary of your Personal Data and the processing activities.

9.2 Right to Correction

You have the right to request correction of inaccurate or incomplete Personal Data. You can update most of your information directly through your account settings.

9.3 Right to Erasure

You have the right to request deletion of your Personal Data, subject to our legal obligations to retain certain information. Upon receiving a valid erasure request, we will delete your data within 90 days.

9.4 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

9.5 Right to Grievance Redressal

You have the right to register a complaint with our Grievance Officer or the Data Protection Board of India if you believe your rights have been violated.

9.6 Right to Nominate

You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

9.7 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

· Email: hello@campsvilla.com

· Through your account settings

· By writing to our Grievance Officer (details in Section 15)

We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

10. Children's Privacy

Our Platform is not intended for children under the age of 18. We do not knowingly collect Personal Data from children under 18 years of age.

If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us immediately at hello@campsvilla.com. We will take steps to delete such information from our systems.

For bookings that include minors, the Personal Data of minors (name, age) may be collected as part of the booking process, but such data is provided by and with the consent of the parent or guardian making the booking.

11. Third-Party Links and Services

Our Platform may contain links to third-party websites, applications, or services that are not operated by us. These include:

· Social media platforms (Facebook, Instagram, Twitter)

· Payment gateways

· Map services (Google Maps)

· Travel insurance providers

· Review platforms

We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Platform.

12. International Data Transfers

Your Personal Data may be transferred to and processed in countries outside India where our service providers operate. When we transfer your data internationally, we ensure that:

· Appropriate safeguards are in place to protect your data

· Transfers comply with applicable data protection laws

· Service providers are bound by contractual obligations to protect your data

· The receiving country provides an adequate level of data protection, or we implement standard contractual clauses approved by relevant authorities

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make changes:

· We will update the "Last Updated" date at the top of this policy

· For significant changes, we will notify you via email or through a prominent notice on our Platform

· We may ask for your consent to the updated policy where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Specific Provisions for Hosts

If you are a Host (property owner) on Campsvilla, the following additional provisions apply:

14.1 Property Information

Information about your property, including photos, location, amenities, and pricing, will be publicly visible on the Platform to potential guests.

14.2 Financial Information

Your bank account details, PAN, and GSTIN are collected for payout processing and tax compliance. This information is stored securely and shared only with payment processors and tax authorities as required by law.

14.3 Guest Information

As a Host, you will receive Personal Data of guests who book your property (name, contact details, booking details). You must:

· Use guest information only for the purpose of fulfilling the booking

· Not share guest information with third parties without consent

· Comply with applicable data protection laws

· Delete guest information when no longer needed

14.4 Reviews and Ratings

Guest reviews of your property will be publicly visible. You may respond to reviews, and your response will also be publicly visible.

15. Contact Us & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Inquiries

Campsvilla

Email: hello@campsvilla.com

Website: www.campsvilla.com

Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns:

Email: hello@campsvilla.com

Response Time: We will acknowledge your complaint within 48 hours and resolve it within 30 days.

Data Protection Board of India

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.

16. Consent

By using our Platform, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.

For specific processing activities that require explicit consent (such as marketing communications or precise location tracking), we will seek your consent separately through clear opt-in mechanisms.

You may withdraw your consent at any time by:

· Adjusting your privacy settings in your account

· Clicking the "unsubscribe" link in marketing emails

· Contacting us at hello@campsvilla.com

──────────────────────────────────────────────────────────────────

DIPP Registered Startup | HP Tourism Registered