VBS Hospitality Private Limited · villasbyserene.com
Effective: 1 June 2025 · Last updated: June 2025
This Privacy Policy explains how VBS Hospitality Private Limited ("Villas By Serene", "we", "our", "us") collects, uses, stores, and protects your personal data when you use our website at villasbyserene.com or make a booking with us. It is governed by India's Digital Personal Data Protection Act 2023 (DPDPA). By using our platform, you consent to the practices described in this policy.
Villas By Serene is a premium holiday villa rental and management platform operated by VBS Hospitality Private Limited, incorporated under the Companies Act 2013, India. We are the data fiduciary responsible for your personal data collected through villasbyserene.com and associated booking communications.
Company
VBS Hospitality Private Limited
GSTIN
27AALCV7250R1ZD
villasbyserene@gmail.com
+91 95943 77736
Website
villasbyserene.com
—
Full name
—
Email address
—
Mobile phone number
—
Government-issued photo ID (Aadhaar, Passport, Driver's Licence, or Voter ID) — collected at check-in by the property caretaker, not stored on our servers
—
Check-in and check-out dates
—
Property selected, number of guests, special requests
—
Booking reference and payment status
—
Communications related to your booking (email, WhatsApp messages)
Payment transactions are processed by Razorpay. We do not collect, store, or have access to your full card number, CVV, or banking credentials. We retain only the transaction reference, amount, and payment status returned by Razorpay after a transaction.
—
IP address and approximate geographic location
—
Browser type and version
—
Pages visited and time spent on our website
—
Device type (mobile, desktop, tablet)
If you sign in using Google (OAuth), we receive your name, email address, and profile picture from Google. We do not receive your Google password. The data shared is governed by Google's own Privacy Policy in addition to ours.
—
Directly from you when you fill in the booking form, create an account, or contact us via WhatsApp or email
—
Automatically via our website server when you browse villasbyserene.com (IP address, device, and page data)
—
From Google when you choose to sign in using your Google account
—
From Razorpay when a payment transaction is completed or attempted
—
From third-party booking platforms (Airbnb, MakeMyTrip) when a booking is made through those channels and relayed to us
Process and manage your booking
ContractSend booking confirmations and check-in details
ContractProcess payments via Razorpay
ContractRespond to support queries and complaints
Legitimate interestSend booking-related WhatsApp communications
ContractComply with legal and tax obligations
Legal obligationImprove our website and service
Legitimate interestPrevent fraud and ensure platform security
Legitimate interestProcess and manage your booking
Contract
Send booking confirmations and check-in details
Contract
Process payments via Razorpay
Contract
Respond to support queries and complaints
Legitimate interest
Send booking-related WhatsApp communications
Contract
Comply with legal and tax obligations
Legal obligation
Improve our website and service
Legitimate interest
Prevent fraud and ensure platform security
Legitimate interest
We do not use your personal data for automated decision-making or profiling.
We do not sell, rent, or trade your personal data. We share it only in the following circumstances:
Your name, contact number, and booking details are shared with the property owner and on-site caretaker solely to facilitate your stay. They are not permitted to use this data for any other purpose.
Razorpay receives the data necessary to process your payment. Their privacy policy is available at razorpay.com/privacy.
If you sign in with Google, Google processes your authentication data under their own privacy policy at policies.google.com/privacy.
We may disclose your data to law enforcement or regulatory authorities where required by law, court order, or to protect the rights and safety of our guests, staff, or the public.
In the event of a merger, acquisition, or sale of VBS Hospitality Private Limited, your data may be transferred to the acquiring entity. You will be notified of any such change via email.
—
Booking records and guest data: 7 years from the date of stay, to comply with Indian tax and accounting obligations
—
Account data: for as long as your account is active, or until you request deletion
—
WhatsApp and email communications: 2 years from the date of last communication
—
Payment transaction records: 7 years, as required by Razorpay and Indian GST law
—
Technical/server logs: 90 days
After the applicable retention period, data is securely deleted or anonymised.
—
All data transmission between your browser and our servers is encrypted using HTTPS/TLS
—
Passwords are never stored in plain text
—
Payment data never passes through our servers — handled entirely by Razorpay's PCI-DSS compliant infrastructure
—
Access to booking data is restricted to authorised VBS staff only
—
Checkout URLs are AES-encrypted to prevent parameter tampering
No method of transmission over the internet is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by law.
Under India's Digital Personal Data Protection Act 2023, you have the following rights regarding your personal data:
—
Right to access — you may request a copy of the personal data we hold about you
—
Right to correction — you may request that inaccurate or incomplete data be corrected
—
Right to erasure — you may request deletion of your data, subject to our legal retention obligations
—
Right to grievance redressal — you may raise a complaint with us directly
—
Right to nominate — you may nominate another individual to exercise your rights on your behalf in the event of death or incapacity
To exercise any of these rights, contact us at villasbyserene@gmail.com or WhatsApp +91 95943 77736. We will respond within 30 days. We may ask you to verify your identity before processing your request.
If you are unsatisfied with our response, you may escalate your complaint to India's Data Protection Board once it is established under the DPDPA 2023.
No third-party advertising pixels, retargeting scripts, or behavioural tracking tools are installed on villasbyserene.com.
Our website uses only the following functional cookies, which are strictly necessary for the site to operate:
Keeps you logged in during your visit
Session (cleared on close)Authenticates your Google Sign-In session
Up to 30 daysRouting and server-side rendering functionality
SessionSession cookie
Keeps you logged in during your visit
Session (cleared on close)
Functional
Auth token
Authenticates your Google Sign-In session
Up to 30 days
Functional
Next.js internal
Routing and server-side rendering functionality
Session
Functional
Because we use only functional cookies, we do not display a cookie consent banner. You can disable cookies in your browser settings, but doing so may prevent you from logging in or completing a booking.
Our website integrates with the following third-party services. Each operates under its own privacy policy:
Razorpay
Payment processing
razorpay.com/privacyGoogle OAuth
User authentication (Sign in with Google)
policies.google.com/privacyGoogle Ads
Paid advertising to acquire new users (no pixel on this website)
policies.google.com/privacyResend
Transactional email delivery (booking confirmations, receipts)
resend.com/privacyWhatsApp Business
Booking communications and customer support
whatsapp.com/legal/privacy-policyRazorpay
Payment processing
razorpay.com/privacy
Google OAuth
User authentication (Sign in with Google)
policies.google.com/privacy
Google Ads
Paid advertising to acquire new users (no pixel on this website)
policies.google.com/privacy
Resend
Transactional email delivery (booking confirmations, receipts)
resend.com/privacy
WhatsApp Business
Booking communications and customer support
whatsapp.com/legal/privacy-policy
We run Google Ads campaigns to reach new audiences. These campaigns operate on Google's platform and do not place any tracking pixel or retargeting cookie on villasbyserene.com. Visitors to our website are not tracked for advertising purposes.
Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from children under the age of 18. Bookings must be made by an adult Lead Guest. If you believe a minor has submitted personal data to us without parental consent, please contact us immediately at villasbyserene@gmail.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be published at villasbyserene.com/privacy with a revised effective date. For material changes, we will notify you via email or a notice on our website. Your continued use of our platform after the effective date constitutes acceptance of the revised policy.
For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact our privacy point of contact:
Company
VBS Hospitality Private Limited
villasbyserene@gmail.com
+91 95943 77736
Response time
Within 30 days of receipt