We are committed to protecting your personal data and your privacy. Please read this policy carefully.
By accessing or using indiahospitalityhub.com, you acknowledge that you have read, understood and agreed to this Privacy Policy. If you do not agree, please discontinue use of this platform immediately. This policy is a legally binding document under the Indian Contract Act, 1872.
This Privacy Policy describes how India Hospitality Hub ("IHH", "we", "us" or "our"), operated at indiahospitalityhub.com, collects, uses, stores, shares and protects personal data of users ("you") of our platform.
This policy applies to all users of IHH including registered sellers, buyers who submit enquiries, and visitors who browse the platform. It covers data collected through our website, mobile browser and any associated communications.
This Privacy Policy is published in compliance with:
Under the DPDP Act 2023, the Data Fiduciary responsible for your personal data is:
We collect only the minimum data necessary ("data minimisation principle") to operate the marketplace. We collect data in the following situations:
When a seller registers an account
When a buyer submits an OTP-verified enquiry
When a user submits the Contact Us form
Automatically when you use the platform
Sensitive Personal Data: Bank account details, Aadhaar and PAN information are classified as Sensitive Personal Data or Information (SPDI) under IT Rules 2011. This data is encrypted at rest and access is strictly restricted to authorised personnel only.
We use personal data only for the purposes for which it was collected, with your consent or as permitted by law. Specifically:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & verification | Name, email, mobile, OTP | Consent + Contract |
| Seller identity verification | GST, PAN, Aadhaar, documents | Legal obligation + Consent |
| Delivering buyer enquiries to sellers | Name, mobile, email, requirement | Consent (OTP verified) |
| Sending email/SMS notifications | Email, mobile | Consent + Contract |
| Processing subscription payments | Bank details, billing info | Contract + Legal obligation |
| Customer support & grievance handling | All relevant data | Legal obligation |
| Platform security & fraud prevention | IP, device, usage data | Legitimate interest |
| Platform analytics & improvement | Anonymised usage data | Legitimate interest |
| Legal compliance & court orders | Any required data | Legal obligation |
We will NEVER: Sell your personal data to third parties. Send you unsolicited marketing without your explicit consent. Use your data for any purpose not listed in this policy without updating this policy and notifying you.
We retain personal data for as long as necessary for the purposes described in this policy, or as required by Indian law — whichever is longer.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active seller account data | Duration of account + 3 years | Legal & accounting compliance |
| Buyer enquiry / lead data | 2 years from submission | Platform operations & dispute resolution |
| Payment & billing records | 8 years | GST & Income Tax Act requirements |
| KYC / identity documents | 5 years post account closure | AML & regulatory compliance |
| OTP verification logs | 90 days | Security audit trail |
| Contact form submissions | 1 year | Support operations |
| Server & access logs | 90 days | Security & fraud prevention |
| Anonymised analytics data | Indefinite | Platform improvement (no personal data) |
After the applicable retention period, personal data is securely deleted or anonymised.
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
Request a summary of the personal data IHH holds about you and how it is being processed.
Request correction of inaccurate, incomplete or outdated personal data.
Request deletion of your personal data, subject to legal retention requirements and ongoing contractual obligations.
Withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
File a complaint with our Grievance Officer if you believe your data rights have been violated. Escalation to the Data Protection Board of India is available.
In the event of your death or incapacity, your designated nominee may exercise these rights on your behalf as per DPDP Act 2023.
We implement technical and organisational security measures as required under Section 43A of the IT Act 2000 and the IT (Reasonable Security Practices) Rules 2011:
IHH uses cookies and similar technologies to operate the platform and improve your experience. We use the following types of cookies:
These are strictly necessary for the platform to function — maintaining your login session, storing form data temporarily, CSRF security tokens. Cannot be disabled.
Used to understand how users interact with the platform — pages visited, time spent, search terms. Data is anonymised and aggregated. You may opt out.
Used to remember your preferences such as filters and settings. You may opt out.
You can control cookies through your browser settings. Disabling essential cookies will affect platform functionality.
IHH is a B2B platform intended exclusively for business use by adults. We do not knowingly collect personal data from persons under the age of 18 years.
If you are under 18, please do not register on this platform or submit any personal information. If we become aware that we have collected data from a minor, we will delete it immediately. If you believe a minor has submitted data, please notify us at privacy@indiahospitalityhub.com.
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements or other factors.
When we make material changes, we will:
Continued use of the platform after the effective date of a revised policy constitutes your acceptance of the changes.
As mandated by the IT (Intermediary Guidelines) Rules 2021 and the DPDP Act 2023, we have designated a Grievance Officer to address privacy-related complaints:
If your grievance is not resolved satisfactorily, you may escalate to the Data Protection Board of India once constituted under the DPDP Act 2023.
For any questions, requests or concerns regarding this Privacy Policy or your personal data, please contact us: