This Privacy Policy explains how The Umrao Hotel & Resort ("The Umrao", "we", "us") collects, uses and protects personal data when you visit theumrao.com, make an enquiry, create a guest account or contact us through the website. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and their rules.

Who we are

The Umrao is the data fiduciary (the party responsible) for personal data collected through this website. You can reach us at: The Umrao Hotel & Resort, National Highway 48, Rajokri Road, D Block, Samalkha, New Delhi, Delhi 110037, India. Email: info@theumrao.com. Phone: +91 11 4770 7070.

The data we collect

Information you give us

Enquiries and reservations — when you send an event, dining, spa, membership or general enquiry: your name, email address, phone number, the date, guest numbers, occasion and any message you write.
Guest accounts — when you sign in: your mobile number (if you sign in with a one-time code), or your name, email address and Google account identifier (if you choose "Continue with Google"). You can add or edit your name and email in My Account.
Newsletter — your email address, if you subscribe.
Concierge chat — the questions you type into the website concierge.

Information collected automatically

Usage data — pages visited, links and buttons clicked (for example "Book Now"), approximate location from your IP address, device and browser type, and the website or campaign that brought you here. This is collected through Google Analytics.
Security data — a one-way, scrambled (hashed) form of your IP address, used only to stop spam and abuse of our forms. We cannot turn it back into your IP address.
Cookies and similar storage — see "Cookies" below.

We do not knowingly collect payment card details on this website. Room bookings and payments are made in our secure booking engine (see "Room bookings").

How we use your data

To answer your enquiry and to plan and manage your stay, table, treatment, event or membership.
To create and run your guest account, so you can see your reservations and enquiries in one place.
To send you a one-time sign-in code by SMS.
To send newsletters and offers — only if you have subscribed. Every newsletter lets you unsubscribe.
To answer your concierge questions.
To understand how the website is used and improve it.
To keep the website and our guests safe, prevent fraud and abuse, and meet our legal obligations.

We process your data on the basis of your consent (which you give when you send a form, sign in, subscribe or use the chat), and where the law allows it for legitimate uses such as meeting a request you made or complying with the law. You may withdraw your consent at any time (see "Your rights"); this does not affect anything done before you withdrew it.

If you choose "Continue with Google", Google shares your name, email address, profile picture and a Google account identifier with us, with your permission. We use them only to sign you in, to show your name in your account, and to match enquiries you send with the same email address to your account. We do not use them for advertising, we do not sell them, and we do not ask for access to your Gmail, contacts, calendar or any other Google data.

The Umrao's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove The Umrao's access at any time in your Google Account permissions.

Room bookings

Room reservations and payments are handled in our booking engine, which is provided by a specialist booking partner. The details you enter there (such as name, contact details and payment card) are processed under that provider's own privacy notice as well as this one. We receive your booking details so that we can welcome you and look after your stay.

We share personal data only where needed, with:

Service providers who work for us — website hosting, our customer relationship management system (Zoho CRM), email and SMS delivery (such as MSG91 for sign-in codes), Google Analytics, our booking engine provider, and Anthropic, which powers the concierge's answers. They may use your data only to provide their service to us.
WhatsApp — if you choose to message us on WhatsApp, that conversation is governed by WhatsApp's own terms and privacy policy.
Authorities — where the law requires it, or to protect the rights, property or safety of our guests, staff or the public.
A new owner or operator — if the hotel or this website is transferred, under the same protections.

We never sell your personal data.

The concierge chat

The concierge answers questions using information from this website. The text you type is sent to our AI provider (Anthropic) to produce the answer and is not used to train its models. Please don't type payment details or other sensitive information in the chat. For bookings and confirmations, our team has the final word.

Cookies

We use a small number of cookies and similar browser storage:

Essential — keep you signed in to your guest account (umrao_guest, umrao_g), protect Google sign-in (umrao_gstate, ten minutes), keep the website team signed in to the admin (umrao_admin), and open the website for the hotel team before launch (umrao_preview). The website does not work properly without them.
Preferences — remember things such as whether you have seen the book-direct message or the intro animation, and your concierge conversation during a visit (stored in your browser only).
Analytics — Google Analytics cookies (_ga and similar) measure visits. We have switched off Google's advertising features, and we do not send names, emails, phone numbers, booking references or membership numbers to analytics.

You can block or delete cookies in your browser settings. Blocking essential cookies will stop sign-in from working. You can also install Google's Analytics opt-out add-on.

How long we keep data

Enquiries: for as long as needed to respond and manage your booking or event, and then for up to three years for our records, unless the law requires longer (for example, tax and accounting records).
Guest accounts: until you ask us to delete your account. One-time sign-in codes expire after ten minutes.
Newsletter: until you unsubscribe.
Analytics: up to 14 months, in aggregated form.

Where your data is stored

Our website and records are hosted with reputable providers. Some of our service providers (such as Google, Zoho and Anthropic) may store or process data outside India. When this happens, we use providers with strong safeguards, and we comply with any restrictions set by the Government of India.

How we protect it

The website uses encryption (HTTPS). Access to enquiries and accounts is limited to authorised staff with individual logins and roles, every change is recorded, sign-in codes are stored only in scrambled form, and IP addresses are hashed. No method is completely secure, but we work to protect your data and will tell you and the authorities about a breach where the law requires.

Your rights

You can ask us to:

tell you what personal data we hold about you and how we use it;
correct, complete or update it;
delete it, where we no longer need it or you withdraw consent;
stop sending you marketing; and
name a person to exercise your rights if you are unable to.

You can update your name and email in My Account. For anything else, email info@theumrao.com from the address or number we have on file. We will reply within 30 days.

Grievance officer

If you have a concern about how we handle your data, contact our grievance officer: Grievance Officer, The Umrao Hotel & Resort, National Highway 48, Rajokri Road, D Block, Samalkha, New Delhi, Delhi 110037. Email: info@theumrao.com. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Children

This website is meant for adults. We do not knowingly collect personal data from children under 18 without the consent of a parent or guardian. If you believe a child has given us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If the changes are significant, we will show a notice on the website.

Contact us

The Umrao Hotel & Resort, National Highway 48, Rajokri Road, D Block, Samalkha, New Delhi, Delhi 110037, India. Email: info@theumrao.com. Phone: +91 11 4770 7070.