Privacy policy

This policy explains how Ambali Resorts & Hotels ("Ambali", "we", "us", or "our") handles personal information through our website, booking services, guest accounts, and related communications. It applies when you browse properties, make a reservation, contact us, or use our guest services. You can contact our team using the details below.

• Account and contact details: your name, email address, phone number, profile image if supplied, account preferences, and verification and sign-in records. Passwords are stored as hashes. If you choose Google Sign-In, we receive your verified email address, name, and profile picture from Google.
• Reservations and stays: your selected property and rooms, travel dates, number of adults and children, booking reference, prices, offers, special requests, cancellation details, and booking history. This includes details you give our staff when they arrange a booking for you.
• Payments and rewards: payment and refund references, amounts, status, payment method and other transaction information returned by the payment provider, invoices, and loyalty points earned, redeemed, or adjusted.
• Messages and reviews: contact form submissions, support correspondence, ratings, review titles and comments, and notification and delivery records. Where WhatsApp is enabled, we may receive and store message content, sender details, and delivery or read status supplied by WhatsApp.
• Location and technical details: location search text, coordinates when you allow browser location access, IP address, browser information, session identifiers, and activity records used to operate and protect the service.

• Create and verify accounts, authenticate sign-ins, and recover access.
• Find suitable properties and manage reservations, stays, and guest requests.
• Process payments, cancellations, refunds, invoices, offers, and loyalty rewards.
• Send verification codes, booking updates, reminders, and service messages.
• Respond to enquiries and publish and moderate guest reviews.
• Maintain service and financial records, resolve disputes, prevent misuse, and meet applicable legal obligations.

Online payments are handled through Razorpay. To start checkout, we share booking and transaction details and may prefill your name, email address, and phone number. Payment credentials you enter in Razorpay checkout are handled by Razorpay and the relevant payment providers.

We retain transaction and refund records and information returned by Razorpay, including payment identifiers, status, method, and related payment metadata. Pay-at-hotel payments and refunds may also be recorded by property staff. Razorpay's own privacy policy applies to its handling of information.

With your browser's permission, we use your device coordinates to show nearby hotels or help fill in your destination. When you use the current-location search control, your coordinates are sent to BigDataCloud to find a place name. As you type a destination, search text is sent to OpenStreetMap's Nominatim service for suggestions.

Property pages may load an embedded Google Map. Loading a map connects your browser to Google, which may receive your IP address, browser details, and information through its own cookies or similar technologies. Opening directions takes you to Google Maps. These providers handle information under their own privacy policies.

You can deny or revoke location permission in your browser settings and enter a destination manually. Location access is optional for browsing and booking a stay.

We use authentication and security cookies to keep sessions working and protect account requests. Local storage remembers your profile and sign-in state and coordinates sign-out between tabs. Session storage helps prevent duplicate checkout attempts and remembers whether to show a review prompt.

You can remove cookies and site storage through your browser settings. Blocking or clearing them may sign you out or affect account and checkout features. Services such as Google Sign-In, Google Maps, and Razorpay may use their own cookies or storage when those features load.

• Property and support teams: authorised Ambali staff and the property handling your stay, to manage reservations and assist you.
• Service providers: hosting, storage, and messaging providers, including Amazon Web Services where configured; Razorpay for payments; Google for optional sign-in and maps; Meta for WhatsApp where enabled; and the location search providers described above. Information is shared according to the feature being used.
• Other website visitors: published reviews may display your name, ratings, review text, and our response. Please avoid including contact details or sensitive information in a public review.
• Authorities and professional advisers: where needed to meet legal obligations, address disputes, or protect guests and the service.

Depending on the service and channels enabled, account verification, booking confirmations, cancellations, payment updates, and reminders may reach you by email, SMS, WhatsApp, or in your account. We also use your contact details to respond to enquiries.

Contact our team to discuss communication choices. Some messages are necessary to verify access or fulfil a reservation. Your account's notifications page lets you view service messages and mark them as read.

Our application uses safeguards including password hashing, authenticated sessions, role-based access, and verification of payment and messaging notifications. No online service can guarantee absolute security. Keep your password and verification codes private.

Information is retained for account and booking services, payment and accounting records, support, security, dispute resolution, and applicable legal requirements. Retention depends on the record and purpose. Account deactivation or hiding a review does not necessarily erase associated booking, transaction, or audit records. Contact us to ask about retention or request deletion of your information.

Our providers may process information in India and other countries, depending on where their services operate. Any such processing is subject to applicable requirements.

You can update your name and phone number in your account. Contact support for help correcting an email address or other information. You can also control location permission, cookies, and site storage in your browser.

To request access, correction, or deletion of personal information, to withdraw consent where processing relies on it, or to raise a privacy concern, contact us using the details below. We will review your request under applicable law and may need to verify your identity. Please describe your request and provide the email address associated with your account or booking; do not send passwords, verification codes, or payment credentials.

Withdrawing information or consent needed for a service may affect our ability to provide it. Some records may need to be retained to meet legal obligations or resolve outstanding matters.

Bookings involving children should be managed by a parent, guardian, or responsible adult. Our booking flow asks for the number of children to arrange accommodation. Please provide only the details needed for the stay. If you believe a child has provided personal information inappropriately, contact us so we can review it.

We may update this policy as our services or applicable requirements change. The latest version will be available on this page with its revision date. Where required, we will provide additional notice or seek consent for changes to how information is used.