Privacy Policy

Introduction

DTHotel ("we", "us") provides a hotel booking and property-management platform. This Privacy Policy describes how we handle personal information when you use our website, apps and services.

By using DTHotel you agree to the practices described here. Where local law grants you stronger rights, those rights prevail.

Information We Collect

We collect information you provide directly, information generated as you use the platform, and information from trusted partners.

• Account details — name, email, phone, password.
• Booking details — guests, dates, preferences, special requests.
• Payment information — processed securely by our payment partners.
• Device, browser and approximate location (collected automatically).
• Usage — pages viewed, searches and interactions.
• Cookies and similar technologies (see Cookies below).

Example: when you search "Goa, 15–17 Aug, 2 guests", we store the query to show results and improve recommendations — never to identify you to third parties.

How We Use Your Data

• To process bookings, payments and refunds.
• To provide support and service updates.
• To personalise recommendations and offers.
• To detect fraud and keep the platform secure.
• To meet legal and regulatory obligations.

We never sell your personal data. We share only what's needed to deliver your stay, with the safeguards described below.

Cookies

We use cookies to keep you signed in, remember preferences, measure performance and (with consent) personalise marketing. You can adjust these at any time.

• Necessary — required for the site to work.
• Analytics — helps us improve.
• Marketing — personalised offers.
• Preference — remembers your settings.

Marketing

With your consent we send offers, travel inspiration and members-only deals. Every message includes an unsubscribe link, and you can manage channels from your profile at any time.

Location Data

With permission we use approximate location to show nearby hotels and relevant offers. You can revoke location access in your device or browser settings without losing core functionality.

Payments

Payments are handled by PCI-DSS-compliant providers. We store a tokenised reference and the last four digits only — never your full card number or CVV.

Stay alert: DTHotel will never ask for your full card number, password or OTP by phone or email.

Hotel Partners

To fulfil a booking we share necessary details (name, dates, requests) with the hotel you choose. Partners must protect your data and use it only to deliver your stay.

Third-party Services

We work with vetted providers for payments, analytics, messaging and maps. They access only what's required and are bound by contract to safeguard your information.

Which categories of providers? Payment gateways, cloud hosting, analytics, communications (email/SMS), and mapping. A current list is available on request from our privacy team.

Children's Privacy

DTHotel is intended for adults. We do not knowingly collect data from children under 16. If you believe a minor has provided data, contact us and we will remove it.

Security

We protect your data with layered technical and organisational measures.

• 256-bit encryption in transit and at rest.
• PCI-DSS-compliant payment processing.
• GDPR-ready data practices.
• Continuous fraud monitoring.

Data Retention

We keep personal data only as long as needed for the purposes described, to comply with law, resolve disputes and enforce agreements. When no longer needed, data is securely deleted or anonymised.

International Transfers

Your data may be processed in countries other than your own. Where it is, we use recognised safeguards (such as standard contractual clauses) to ensure equivalent protection.

Your Rights

You have meaningful control over your information. Manage everything from your account or contact our privacy team.

• Download Data — export a portable copy of your data.
• Delete Account — permanently remove your account.
• Request Correction — fix inaccurate information.
• Withdraw Consent — opt out of optional processing.
• Manage Notifications — choose what we send you.

Account Deletion

You can delete your account from Profile & Settings. We remove your personal data within 30 days, except records we must retain for legal or accounting reasons.

Policy Updates

We may update this policy as our services evolve. Material changes will be highlighted on this page and, where appropriate, notified to you. The "last updated" date always reflects the current version.