Privacy Policy

Beachside Agatti Resort (B.A.R.) • Effective Date: 8 July 2026

This Privacy Policy explains how Beachside Agatti Resort (B.A.R.) ("we", "us", "our") collects, uses, discloses, and safeguards personal data you provide when you visit www.beachsideagattiresort.com or interact with us, including when you fill out any enquiry, booking, contact, or newsletter form on our website. By submitting a form or otherwise using our website, you agree to the practices described in this Policy.

This Policy is drafted with reference to India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), and reflects good-practice principles consistent with the EU General Data Protection Regulation (GDPR), given that guests booking with us may be located outside India. It is a general-purpose template and not a substitute for legal advice tailored to your specific circumstances.

1. Who We Are

Beachside Agatti Resort (B.A.R.) is a boutique resort located at Agatti Island, Lakshadweep, India. For the purposes of applicable data protection law, we are the "Data Fiduciary" (under the DPDP Act) / "Data Controller" (under GDPR) responsible for your personal data collected through this website.

Contact: beachsideagattiresort@gmail.com | +91-9881466003

2. Personal Data We Collect

We collect personal data directly from you when you fill out a form on our website, including but not limited to:

  • Contact and booking enquiry forms — name, email address, phone number, country/city of residence, preferred travel dates, number of guests, room preference, and any special requests or message you type.
  • Newsletter/subscription forms — name and email address.
  • Payment-related forms (where applicable) — billing name and address; we do not store full card numbers, which are processed directly by our payment gateway partner.

We may also automatically collect limited technical data when you browse our website (see our Cookie Policy below for full detail), such as IP address, browser type, device type, pages visited, and referring website.

3. How and Why We Use Your Data

We use the personal data collected through our forms for the following purposes:

  • To respond to your enquiry and process your booking request.
  • To communicate with you about your stay, including confirmations, changes, and pre-arrival information.
  • To send you promotional offers or newsletters, where you have opted in, and which you may unsubscribe from at any time.
  • To improve our website, services, and guest experience.
  • To comply with legal, tax, accounting, or regulatory obligations.
  • To detect and prevent fraud, spam, or misuse of our forms.

Our legal basis for this processing is your consent (given by submitting the form), the necessity of processing to take steps toward a booking contract at your request, and our legitimate business interest in operating and marketing the resort.

4. Sharing of Your Data

We do not sell your personal data. We may share it only with:

  • Service providers who support our operations, such as email/CRM platforms, website hosting providers, and payment gateways, strictly to the extent needed to perform their services for us.
  • Government or regulatory authorities, where required by law.
  • A successor entity, in the event of a business transfer, merger, or sale of the resort.

All third parties are expected to protect your data in line with applicable law and to use it only for the purpose we've engaged them for.

5. Data Storage, Security, and Retention

We store form submissions using reasonable administrative and technical safeguards, including restricted access and secure hosting. Data may be stored on servers located in India or with reputable international cloud/email service providers.

We retain personal data collected through forms only as long as necessary to fulfil the purposes described above, typically for the duration of an active enquiry/booking plus a reasonable period thereafter for record-keeping, or until you request deletion, whichever is earlier.

6. Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Withdraw consent and request erasure of your data.
  • Object to or restrict certain processing, including marketing communications.
  • Lodge a grievance with our Grievance Officer (below), or with the relevant data protection authority.

To exercise any of these rights, please contact us using the details in Section 9.

7. Children's Privacy

Our website and forms are not directed at children under 18. We do not knowingly collect personal data from minors without parental/guardian consent. If you believe a minor has submitted data to us, please contact us so we can remove it.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective Date" above indicates when it was last revised. We encourage you to review this page periodically.

9. Grievance Officer & Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Grievance Officer:

  • Name: Sunil Vaggu, Owner, Beachside Agatti Resort (B.A.R.)
  • Email: beachsideagattiresort@gmail.com
  • Phone: +91-9881466003
  • Address: Agatti Island, Lakshadweep, India
Explore More