Privacy Policy

1. Introduction

1.1. This Privacy Policy explains how Alarion Hospitality Private Limited (“Alarion”, “we”, “us” or “our”) collects, uses, stores, processes and protects personal information of customers and visitors (“Customer”, “you” or “your”) who access or use the Alarion website, mobile application, platform or related services (“Platform”).

1.2. Alarion operates an online hotel-booking platform through which customers may search for, compare and book accommodation and related services offered by participating hotels, properties and accommodation providers (“Hotel Partner(s)”).

1.3. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your information as described herein, to the extent permitted by applicable law.

1.4. This Privacy Policy should be read together with Alarion's Terms & Conditions, Booking Terms, Cancellation and Refund Policy, and other policies displayed on the Platform.

2. Information We Collect

2.1. We may collect information that you provide directly to us, including:

• Full name;
• Mobile number;
• Email address;
• Billing and communication details;
• Date of birth or age, where required for a booking or applicable legal requirement;
• Guest details provided for a reservation;
• Check-in and check-out details;
• Booking preferences and special requests;
• Information required to process payments or refunds;
• Account login and profile information;
• Customer support communications and correspondence;
• Reviews, ratings, feedback or other information voluntarily submitted by you.

2.2. Where required for a hotel booking, applicable law or hotel check-in requirements, certain identification or verification information may be requested. Such information will be processed only for legitimate and applicable purposes.

2.3. Alarion does not ordinarily require customers to provide unnecessary personal information. You should provide information that is accurate, complete and current.

3. Information Collected Automatically

3.1. When you use the Platform, certain technical and usage information may be collected automatically, including:

• IP address;
• Device type and operating system;
• Browser type;
• Approximate location derived from technical information, where applicable;
• Platform access time and date;
• Pages, searches and features used;
• Booking-related activity;
• Cookies and similar technologies;
• Technical logs and diagnostic information.

3.2. This information may be used to operate, secure, maintain and improve the Platform and to understand how customers use our services.

4. Purpose of Collecting and Using Information

4.1. Alarion may process your information for purposes including:

• Creating and managing your account;
• Processing hotel searches and bookings;
• Confirming and communicating booking details;
• Sharing necessary booking information with the relevant Hotel Partner;
• Processing payments, refunds and related transactions;
• Providing customer support;
• Communicating booking modifications, cancellations and important service information;
• Preventing fraud, misuse and unauthorised transactions;
• Maintaining Platform security;
• Improving our Platform, services and customer experience;
• Conducting internal analysis and business operations;
• Sending promotional communications where permitted and, where required, with your consent;
• Complying with applicable laws, regulations, court orders and lawful government requests;
• Protecting the rights, property and safety of Alarion, customers and other persons.

4.2. Alarion will not use personal information for purposes that are materially unrelated to the purpose for which it was collected, except where permitted or required by applicable law.

5. Hotel Booking Information

5.1. In order to complete a hotel reservation, Alarion may share relevant customer information with the concerned Hotel Partner.

5.2. The information shared may include the customer's name, contact details, booking details, number of guests, special requests and other information reasonably required to fulfil the reservation.

5.3. The Hotel Partner may process such information for reservation management, guest services, check-in/check-out, payment reconciliation, legal compliance, customer communication and other legitimate purposes connected with the reservation.

5.4. Customers should understand that the Hotel Partner is a separate service provider and may have its own privacy practices and legal obligations.

6. Payment Information

6.1. Payments made through the Platform may be processed by third-party payment gateways, banks, financial institutions or other authorised payment service providers.

6.2. Alarion may receive transaction-related information such as payment status, transaction reference, payment method and other information necessary to confirm or reconcile the transaction.

6.3. Where payment details are processed directly by a third-party payment provider, such information may be subject to that provider's own terms and privacy policy.

6.4. Alarion will not intentionally retain complete card details, CVV numbers, PINs or similar authentication credentials except where lawfully permitted and technically necessary.

7. Cookies and Similar Technologies

7.1. Alarion may use cookies, pixels, tags and similar technologies to operate and secure the Platform and improve its functionality.

7.2. Cookies may be used for purposes such as:

• Maintaining sessions;
• Remembering preferences;
• Improving website performance;
• Understanding Platform usage;
• Analytics;
• Security and fraud prevention;
• Personalising relevant content or offers, where permitted.

7.3. You may control certain cookies through your browser or device settings. Disabling certain cookies may affect some Platform functionality.

8. Marketing and Promotional Communications

8.1. Alarion may send service-related communications necessary for your booking or account, including booking confirmations, payment notifications, cancellation information, security alerts and important service updates.

8.2. Where permitted by applicable law, Alarion may also send promotional offers, discounts, travel information and other marketing communications.

8.3. You may opt out of promotional communications by using the unsubscribe option provided in the communication or by contacting Alarion.

8.4. Opting out of promotional communications will not prevent Alarion from sending essential service or transaction-related communications.

9. Sharing of Information with Third Parties

9.1. Alarion may share necessary personal information with:

• Hotel Partners;
• Payment gateways and payment service providers;
• Technology and hosting service providers;
• Customer-support service providers;
• Communication and messaging service providers;
• Fraud-prevention and security service providers;
• Analytics and Platform-support providers;
• Professional advisers, auditors and consultants;
• Government authorities, courts, regulators or law-enforcement agencies where required or legally permitted.

9.2. Alarion will seek to limit information shared with third parties to information reasonably necessary for the relevant purpose.

9.3. Alarion will not sell your personal information as a standalone commercial product.

10. Service Providers and Data Processors

10.1. Alarion may engage third-party service providers to perform functions on its behalf.

10.2. Such service providers may process personal information only to the extent reasonably required to provide their contracted services, subject to applicable contractual, technical and legal safeguards.

10.3. Alarion may change or appoint service providers from time to time where reasonably required for business, operational, technical or legal purposes.

11. Data Security

11.1. Alarion takes reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, alteration, loss, disclosure or destruction.

11.2. Security measures may include access controls, authentication, encryption or other appropriate technical safeguards, monitoring and backup mechanisms, as appropriate to the nature of the information and risks involved.

11.3. No internet-based service can guarantee absolute security. Accordingly, Alarion does not guarantee that information transmitted through the internet will be completely secure at all times.

11.4. Customers are responsible for maintaining the confidentiality of their account credentials and should immediately notify Alarion if they suspect unauthorised access to their account.

12. Data Retention

12.1. Alarion will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, enforcing agreements and complying with applicable legal, regulatory, accounting or reporting requirements.

12.2. After the applicable retention period expires, Alarion may delete, anonymise or securely dispose of the information, subject to applicable law and legitimate business requirements.

12.3. Information relating to completed bookings may be retained for a reasonable period for accounting, reconciliation, customer support, fraud prevention, dispute resolution and legal compliance.

13. Customer Rights

13.1. Subject to applicable law and any applicable conditions or limitations, customers may have rights relating to their personal information, including the right to:

• Request information regarding processing of their personal data;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information where legally applicable;
• Withdraw consent where processing is based on consent;
• Request other rights available under applicable data-protection laws.

13.2. Withdrawal of consent will not affect processing that was already lawfully carried out before the withdrawal.

13.3. Withdrawal of consent may affect Alarion's ability to provide certain services where the information is necessary to provide those services.

14. Accuracy of Customer Information

14.1. Customers are responsible for providing accurate, complete and updated information.

14.2. Alarion shall not be responsible for consequences arising from inaccurate, incomplete or outdated information supplied by the Customer, including incorrect booking details, contact information or guest information.

15. Information Relating to Other Guests

15.1. If you provide personal information of another person, including a co-traveller or guest, you should ensure that you are authorised to provide such information and that the information is accurate.

15.2. Where required by applicable law, you should ensure that the relevant individual has been appropriately informed about the processing of their information.

16. Children's Information

16.1. The Platform is intended primarily for persons who are legally capable of entering into a booking transaction.

16.2. Where information relating to a child is required for a hotel reservation, such information should be provided by a parent, lawful guardian or other person legally authorised to provide it.

16.3. Alarion will process children's personal information in accordance with applicable law and applicable requirements relating to parental or guardian consent.

The DPDP Act defines a child as an individual who has not completed 18 years and contains specific requirements concerning processing of children's personal data.

17. Fraud Prevention and Security

17.1. Alarion may process information to identify, investigate and prevent fraudulent bookings, payment fraud, misuse of promotional offers, unauthorised account activity, security incidents and other unlawful or prohibited activities.

17.2. Where reasonably necessary, Alarion may verify information or request additional information to protect customers, Hotel Partners, payment providers and Alarion from fraud or misuse.

18. Communications from Hotels and Service Providers

18.1. After a booking is made, the concerned Hotel Partner or service provider may contact the Customer regarding the reservation, including check-in arrangements, special requests, property information or other matters necessary for providing the booked service.

18.2. Alarion may facilitate such communication where reasonably necessary for fulfilling the booking.

19. International Data Processing

19.1. Certain technology, payment, hosting, communication or other service providers used by Alarion may process information from locations outside India.

19.2. Where personal information is transferred or processed outside India, Alarion will take reasonable steps to comply with applicable legal requirements relating to such processing or transfer.

20. Third-Party Websites and Services

20.1. The Platform may contain links, integrations or references to third-party websites, applications or services.

20.2. Alarion is not responsible for the privacy practices, security, content or policies of third-party websites or services.

20.3. Customers should review the applicable privacy policies of third parties before providing information to them.

21. Data Breach

21.1. If Alarion becomes aware of a personal data breach affecting customer information, Alarion will take reasonable steps to investigate, contain and mitigate the breach.

21.2. Where required by applicable law, Alarion will provide notifications to affected customers and/or relevant authorities within the applicable legal requirements and timelines.

The 2025 DPDP Rules prescribe security safeguards and breach-notification requirements, including specified information to be provided to affected individuals and the Data Protection Board.

22. Changes to Personal Information

22.1. If your personal information changes or you believe that information held by Alarion is inaccurate, you may contact Alarion to request appropriate correction, subject to applicable law and reasonable verification.

23. Account Deletion

23.1. Where the Platform provides an account-registration facility, you may request closure or deletion of your account, subject to applicable legal, contractual and operational requirements.

23.2. Account deletion may not result in immediate deletion of all information where Alarion is required or permitted to retain certain information for legal compliance, accounting, fraud prevention, dispute resolution, security or other legitimate purposes.

24. Grievance and Privacy Requests

24.1. Customers may contact Alarion regarding privacy-related questions, requests, complaints or concerns using the contact details provided below.

24.2. Alarion will take reasonable steps to review and respond to privacy-related requests in accordance with applicable law and within applicable timelines.

25. Consent

25.1. By using the Platform and providing personal information, you acknowledge that you have read this Privacy Policy and understand how Alarion may process your information for the purposes described in this Policy.

25.2. Where applicable law requires specific consent for a particular processing activity, Alarion will obtain such consent in the manner required by law.

25.3. You may withdraw consent where the applicable processing is based on consent, subject to the consequences and limitations permitted by applicable law.

The DPDP Rules contemplate a clear and standalone notice explaining the personal data collected, the purposes of processing, the services enabled, and the means for withdrawing consent and exercising rights.

26. Changes to this Privacy Policy

26.1. Alarion may update this Privacy Policy from time to time to reflect changes in its services, technology, business practices or applicable laws.

26.2. The updated Privacy Policy will be published on the Platform with the revised “Last Updated” date.

26.3. Where applicable law requires additional notice or consent for a material change, Alarion will provide such notice or obtain such consent as required.

27. Applicable Law

27.1. This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India.

27.2. Any privacy-related dispute shall be dealt with in accordance with applicable Indian law and the dispute-resolution provisions contained in Alarion's applicable Terms & Conditions, subject always to any rights or remedies that cannot lawfully be excluded or restricted.

28. No Waiver of Statutory Rights

28.1. Nothing in this Privacy Policy is intended to exclude, restrict or limit any right or remedy that cannot legally be excluded, restricted or limited under applicable law.

28.2. Where any provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the mandatory legal requirement shall prevail to the extent of such conflict.

29. Contact Us

For any questions, requests or complaints relating to this Privacy Policy or the processing of your personal information, please contact: