MUZA ROOMS respects your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you use our website and services, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Data we collect
- Identity and contact details: name, phone number, email address and address.
- Booking details: listing, dates, number of guests, room and meal choices, special requests and enquiries.
- Payment information: transaction ID, amount and status. Card, UPI and bank details are handled directly by our payment partner Razorpay and are not stored by us.
- Travel documents: ID or passport details where required for check-in, visa or insurance services.
- Technical data: device, browser, IP address and usage data collected through cookies and similar technologies.
2. Why we use your data
- To process bookings, payments, cancellations and refunds, and share necessary details with the Listing Owner.
- To send booking confirmations, updates and responses to your enquiries.
- To meet legal obligations such as guest registration, Form C reporting for foreign nationals, tax and accounting records.
- To prevent fraud, keep our platform secure and improve our services.
- To send offers and updates only where you have given consent; you can opt out at any time.
3. Consent
- We process your personal data based on your consent, given when you make a booking or submit a form, or for legitimate uses permitted under Section 7 of the DPDP Act.
- You may withdraw consent at any time by contacting us. Withdrawal will not affect processing already carried out, but may prevent us from completing a booking.
4. Sharing your data
- With Listing Owners (hotels, homestays, villas) to fulfil your booking.
- With payment processors, email providers, hosting and other service providers who process data on our behalf under confidentiality obligations.
- With government authorities, police or courts when required by law.
- We do not sell your personal data.
5. Data storage and security
- We use reasonable security practices, including encryption in transit, access controls and restricted admin access, in line with the IT Rules, 2011.
- Data may be stored on secure servers in or outside India, subject to restrictions notified by the Government of India under the DPDP Act.
- In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by law.
6. Data retention
- We keep your data only as long as needed for the purposes above or as required by law (for example, tax and accounting records are kept for up to 8 years).
- Data no longer needed is deleted or anonymised.
7. Your rights
- Right to access a summary of your personal data and processing.
- Right to correct, complete, update or erase your personal data.
- Right to grievance redressal and to nominate another person to exercise your rights in case of death or incapacity.
- To exercise these rights, email us at support@muzarooms.com.
8. Cookies
- We use essential cookies and local storage to keep the site working (for example, your chat history and search preferences) and analytics to understand usage.
- You can control cookies through your browser settings; disabling them may affect some features.
9. Children's data
- Our services are meant for adults. We do not knowingly process data of children under 18 without verifiable parental consent, as required by the DPDP Act.
10. Grievance Officer
- Grievance Officer, MUZA ROOMS — Email: support@muzarooms.com. Location: Mumbai, Maharashtra, India.
- We will acknowledge your complaint within 48 hours and resolve it within the time required by law. If unresolved, you may approach the Data Protection Board of India.
11. Changes to this policy
- We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date.