Azara Beach House

Privacy Policy

Last updated · 7 August 2026

Azara Beach House Villa is a property of Core Heritage Projects LLP (“we”, “us”, “our”). This policy explains what personal data we collect when you use azarabeachhouse.com, why we collect it, who we share it with, and the choices you have. It should be read alongside our Terms of Use, Booking Policy and Cancellation & Refunds policy.

Who We Are

Core Heritage Projects LLP operates Azara Beach House, a private villa at 449, E Wadi, Candolim, Bardez, Goa 403515, India. For the purposes of India’s Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

What We Collect

Information you give us. When you submit an enquiry or a stay request we collect your name, email address, country code and phone number, your intended check-in and check-out dates, the number of adults and infants in your party, any promotional code, and whatever you write in the message field.

Information from your booking. If you continue to our reservation engine we, or our booking partner, collect the details needed to hold and confirm a stay — including guest names, contact details, stay dates and payment status. We do not collect or store card numbers on this website. Payments are handled by our booking engine and its payment processors.

Information collected automatically. Like most websites we receive technical data each time a page is served: IP address, approximate location derived from it, browser and device type, operating system, referring page, the pages you view and how long you spend on them. We also store two small preferences on your device — your chosen language and your light/dark theme — so the site remembers them between visits.

WhatsApp enquiries. Several buttons on this site open WhatsApp with a pre-filled message. If you send it, your WhatsApp phone number and profile name become visible to us, and the conversation is also processed by WhatsApp under Meta’s own privacy policy, not ours.

Cookies, Analytics and Tags

We use a small number of cookies and similar technologies:

  • Strictly necessary — remembering your language and theme, and keeping forms working. These cannot be switched off.
  • Analytics — where enabled, Google Analytics 4 and Google Tag Manager help us understand which pages are read, which enquiries convert, and where guests drop out of the booking journey. Analytics data is aggregated; we do not use it to identify you personally.
  • Advertising — where enabled, a Meta (Facebook) Pixel lets us measure and retarget advertising.

Third-party tags on this site are loaded through Partytown, which runs them in a background browser thread. This is a performance measure; it does not change what those services collect. You can block or delete cookies in your browser settings, and most browsers offer a “Do Not Track” signal — be aware that blocking some cookies may stop parts of the site working.

Why We Use It

We use personal data to respond to enquiries, hold and confirm reservations, arrange your stay and in-villa services, send booking-related messages, meet legal obligations including guest registration and tax records, prevent fraud and abuse of our forms, and improve the site. Where we rely on your consent — for analytics, advertising and marketing messages — you may withdraw it at any time using the contact details below.

Who We Share It With

We share personal data only where necessary, with: our booking engine and payment processors; Google (Analytics, Tag Manager, Maps and, where applicable, Hotel Center listings); Meta (for WhatsApp conversations and advertising measurement); Cloudflare, which hosts this site and stores our images; our content management and email providers; and professional advisers, auditors or government authorities where the law requires it. Some of these providers process data outside India.

We do not sell your personal data.

How Long We Keep It

Enquiries that do not become bookings are kept for up to 24 months. Booking and financial records are kept for eight years to meet Indian tax and accounting requirements. Analytics data is retained according to the provider’s own settings, typically 14 months. Backups roll off within 90 days.

Security

Data in transit is encrypted with TLS. Access to booking data is limited to staff who need it. Our forms carry anti-bot checks. No system is perfectly secure, but if a personal data breach occurs we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

Children

This site and our villa bookings are intended for adults. We do not knowingly collect personal data from children under 18 other than as part of a booking made by a parent or guardian.

Your Rights

Under the DPDP Act you may ask us to confirm what data we hold about you and how it is processed; correct or complete inaccurate data; erase data we no longer need; nominate another person to exercise your rights if you die or become incapacitated; and withdraw a consent you previously gave. To exercise any of these, write to the address below. We will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Grievance Officer

Questions, requests and complaints about this policy or your personal data should go to our Grievance Officer:

Changes

We may update this policy as the site or the law changes. The revision date appears at the top of this page; material changes will be highlighted on the site.