Privacy
Policy

Last updated: October 2026

This policy explains how Ayati Resort & Spa, operated by Bakshi Hospitality LLP (“we”, “us”), collects and uses personal data through this website and during your stay. We act as the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023.

What we collect

• Enquiry and newsletter forms: the details you type, such as your name, phone number, email address, dates, number of guests and message, plus the time you sent it and a record of your consent.
• Reservations: booking details you share with us directly, through WhatsApp, by phone or through our online booking engine.
• During your stay: identity documents we are required by law to see and record at check-in, and CCTV footage of outdoor and common areas, kept for security.
• Technical data: basic information your browser sends, such as device type and pages visited, which our hosting provider uses to run and protect the website.

Why we use it

• To reply to your enquiry and manage your reservation or event.
• To look after you during your stay.
• To meet legal duties, such as guest registration.
• To send news or offers, only if you have ticked the box to receive them.

We rely on your consent, which you give by ticking the box on our forms, and on legitimate uses permitted by law, such as fulfilling a booking you asked for or meeting a legal obligation. You can withdraw your consent at any time, and it will not affect anything done before you withdrew it.

Who we share it with

We do not sell personal data. We share it only with those who help us serve you: our sales and marketing partner, our booking engine and payment providers, our website hosting and email providers, and WhatsApp (Meta) when you choose to message us there. We also share it with government authorities where the law requires. Some of these providers may store data outside India, under safeguards permitted by law.

Cookies

The website uses only the cookies it needs to work. Fonts are served from this website rather than from Google, and we do not use advertising cookies. If we add analytics or marketing tools in future, we will update this policy and ask for your consent first where required.

How long we keep it

• Website enquiries: deleted automatically after 12 months.
• Newsletter: until you unsubscribe.
• Guest registration and billing records: as long as the law requires.
• CCTV footage: overwritten on a rolling basis unless needed for an incident.

Your rights

You can ask us to tell you what personal data we hold about you, correct or update it, delete it, or stop using it for marketing. You can also nominate someone to exercise these rights on your behalf. Write to us using the details below and we will respond within the time the law allows.

Children

This website is not meant for children, and we do not knowingly collect personal data from anyone under 18 through it. Bookings must be made by an adult.

Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections to this website and restricted access to stored enquiries.

Grievance officer

For any question or complaint about your personal data, contact our Grievance Officer at info@ayatiresorts.com or Ayati Resort & Spa, Kaswand, Bhilar, Mahabaleshwar 412805, Maharashtra. Phone: +91 70024 27002. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.