OnClickStay logo OnClickStay
← Back to OnClickStay

Privacy Policy

Last updated: January 1, 2026

This Privacy Policy explains how OnClickStay ("we", "us") collects, uses, shares, and protects guest and customer information when you use our hotel reservation portal, mobile experience, and hospitality booking services (the "Platform"). By using the Platform, you agree to the privacy practices described here.

1. Information We Collect

  1. Account Information: Name, email address, mobile phone number, and password created during registration.
  2. Reservation & Guest Stay Data: Stay dates (check-in and check-out), room category choices, guest counts and ages, special requests, and mandatory guest identity details (such as Aadhaar or PAN numbers required for statutory hospitality check-in and verification).
  3. Payment & Billing Records: Transaction identifiers, payment methods, billing contact info, and generated invoice summaries. (Full payment card numbers are processed directly by PCI-DSS certified payment gateways).
  4. Browsing & Usage Information: Hotel searches, destination filters, saved stays, and interactions with resort listings, collected automatically during your visit.
  5. Device & Diagnostic Data: IP address, browser type, operating system, and session security telemetry.

2. How We Use Information

We use your information to:

  1. Process and confirm room bookings, check-in requests, and guest authorizations.
  2. Coordinate your arrival details and room allocations with host hotels and resort properties.
  3. Deliver booking confirmation vouchers, tax invoices, SMS/email OTP verifications, and stay reminder notifications.
  4. Personalize your travel experience and recommend hotel destinations tailored to your preferences.
  5. Prevent fraudulent bookings, detect security threats, and comply with hospitality and tourism regulations.
  6. Enhance platform performance, search speed, and reservation management workflows.

3. Cookies & Local Storage

We utilize cookies and secure local storage to keep your session authenticated, remember your preferred currency, language, and search dates, and analyze booking conversion rates. You can manage cookie permissions in your browser settings; disabling cookies may limit your ability to manage saved stays and active reservations.

4. Location & Destination Searches

When you search for hotels or nearby attractions, we process the destination city, address, or geographic coordinates you enter (or select via address autocomplete). This enables us to return nearby hotels, resort amenities, and accurate local maps. We do not track your real-time GPS location without your explicit action and browser consent.

5. Guest Identity & Government ID Data

Government-issued identity data (such as Aadhaar or PAN details collected for guest identity authorization) is securely stored with strict role-based access controls and encrypted at rest. This data is collected solely for regulatory compliance with hospitality laws, guest registration at hotel check-in desks, and fraud prevention.

6. Data Sharing

  1. Hotels & Resorts: We transmit your reservation details, guest names, stay dates, and authorized guest details to the booked hotel to ensure smooth check-in and room readiness.
  2. Service Providers: We work with trusted technology vendors (cloud hosting, transactional email/SMS gateways, and map services) bound by stringent confidentiality agreements.
  3. Legal & Regulatory Authorities: We may disclose information if required by court order, law enforcement, or statutory hotel guest register regulations.
  4. No Commercial Sale: We never sell guest personal data or booking history to third-party data brokers.

7. Data Security

We implement industry-standard administrative, physical, and technical safeguards, including TLS transport encryption and segregated database controls, to safeguard guest information against unauthorized access, loss, or misuse.

8. Guest Privacy Rights

Depending on your jurisdiction, you have the right to:

  1. Access and review your account details, past hotel reservations, and guest profile.
  2. Request correction of incomplete or outdated personal information.
  3. Request account closure and deletion of non-statutory data, subject to mandatory hotel accounting and tax record-keeping requirements.
  4. Opt out of promotional hotel newsletters or marketing communications at any time.

9. Data Retention

Reservation history and billing records are retained for the duration required by applicable financial, tax, and hospitality reporting laws. Inactive guest accounts may be archived or deleted in accordance with our data lifecycle schedules.

10. Children's Privacy

Primary account holders and booking leaders must be at least 18 years old. Minor guests staying as accompanying family members must be registered by a parent or authorized adult guardian.

11. Guest Privacy Contact

For privacy inquiries, identity record requests, or assistance, please contact our Data Protection Concierge at info@onclickstay.com.

12. Policy Updates

We may periodically update this policy to reflect enhancements in our booking technologies or statutory requirements. The "Last updated" date will reflect any revisions.