Skip to content

Policies

Privacy policy

Last updated 20 October 2026

What we collect when you book or contact us, why, who sees it, and how to ask us to change or delete it.

1.Who we are

Doksa Homestay, 13/1 ward no. 7 Gonpa rd. Manali 175131, HP, India, is responsible for the personal data described here (the “data fiduciary” under India's Digital Personal Data Protection Act, 2023). You can reach us at doksabnb@gmail.com or +917303427065.

2.What we collect

  • When you book: your name, email address, phone number (optional), the dates, rooms and number of guests, and any special requests.
  • Payment: the payment reference and status from Razorpay. We never receive or store card numbers, UPI PINs or bank logins.
  • At check-in: a government photo ID for each guest, as required by law. For guests from outside India, passport and visa details for the Form C registration.
  • When you contact us: what you send by email, WhatsApp or phone.
  • When you browse: technical data such as your IP address, device and browser type, and pages visited, collected by our hosting and analytics.

3.How we use it

  • To take and confirm your booking, take payment and send your confirmation and guest handbook.
  • To contact you about your stay, for example your arrival time or a special request.
  • To handle cancellations, refunds and any questions or complaints.
  • To meet legal duties, such as guest registration, accounting and tax records.
  • To prevent fraud and misuse of the booking system, for example limiting repeated payment attempts.
  • To understand how the website is used and improve it.

4.No marketing without asking

We don't send newsletters or promotions, and we don't sell or rent your data to anyone. If that ever changes, we'll ask for your consent first.

5.Who we share it with

Only the services we need to run bookings, each handling data on our behalf:

  • Razorpay: Takes your payment. Card, UPI and bank details go straight to Razorpay; we only receive a payment reference.
  • Cloudflare: Hosts this website and the database that stores your booking.
  • Resend: Sends our booking emails to you.
  • PostHog: Website analytics: which pages are visited and how the booking steps are used, so we can improve them.
  • OpenFreeMap: Shows the map on our pages; your browser loads map images from it.

We also share our availability calendar with Airbnb so the same room can't be booked twice. It shows only that dates are “Reserved”, never your name or details.

We share information with police or other authorities only where the law requires it, such as foreign guest registration. Some of these providers store data outside India; they protect it under their own security and privacy commitments.

6.Cookies and browser storage

Your browser keeps the rooms you've picked so they're still there if you close the tab, and your last booking for the confirmation page. Our analytics uses cookies or similar storage to count visits. You can clear these at any time in your browser settings; the site still works without them, but your picked rooms won't be remembered.

7.How long we keep it

  • Booking and payment records: 8 years, as required for accounting and tax.
  • ID copies from check-in: only as long as the law requires.
  • Emails and messages: up to 2 years after your stay, unless needed for an open issue.
  • Analytics data: up to 2 years.

8.Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct or update it;
  • delete it, where we don't need to keep it by law;
  • nominate someone to exercise these rights for you.

Write to doksabnb@gmail.com. We'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

9.Security

The site uses HTTPS throughout, payments are handled entirely by Razorpay, and booking data is only accessible to the people who run Doksa. No system is perfectly secure, but if a breach ever affected your data, we'd tell you and the authorities as the law requires.

10.Children

Bookings must be made by an adult. We only hold children's details when a parent or guardian gives them to us for a stay, such as their number and, at check-in, their ID where required.

11.Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top.

12.Grievances

For any concern about your personal data, contact us at doksabnb@gmail.com or +917303427065. We'll acknowledge it within 48 hours and aim to resolve it within 30 days.

Questions?

We're a small family homestay and happy to explain anything here.

© 2026 Doksa Homestay, Manali

powered by @norden