At Aurae Wellness (referred to as “Aurae”, “we”, “us”, or “our”), we are committed to respecting and protecting the privacy, confidentiality, and security of our guests, website visitors, and employees. This Privacy Policy outlines how we collect, use, disclose, handle, process, and safeguard your personal and sensitive information across our official website (https://auraewellness.com), on-premise wellness resort services, and our mobile applications (including the Aurae Staff Attendance app and related applications published on the Google Play Store).

This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Google Play Developer Policies.

1. Information We Collect

We collect information to provide, maintain, and enhance our hospitality, retreat, and enterprise management operations. The categories of information we collect include:

A. Personal Identification Data

• Contact Information: Name, email address, telephone number, physical address, and emergency contact details.
• Guest Profile & Reservation Details: Check-in/check-out dates, room preferences, dietary choices, identity proof (as required by local hospitality regulations), and billing/transaction details.
• Employment & Staff Records: Employee ID, designation, departmental assignment, official email address, work schedule, and shift attendance logs.

B. Mobile Application Permissions & Sensitive Device Data (Google Play Disclosures)

To deliver core enterprise and attendance services, our mobile applications (such as Aurae Staff Attendance) may request access to specific device capabilities:

C. Health & Wellness Information (Guests Only)

For guests participating in personalized wellness, naturopathy, or ayurvedic therapies, health questionnaires and medical histories are collected on a strictly voluntary basis to tailor therapeutic schedules and dietary plans. This sensitive information is treated with highest confidentiality and stored securely.

2. How We Use Your Information

We use the collected information for legitimate business, operational, and service delivery purposes, including:

• Processing room reservations, therapy scheduling, dining arrangements, and wellness package consultations.
• Verifying staff presence, processing attendance, managing shift rosters, and calculating accurate payroll records.
• Communicating booking confirmations, updates, essential announcements, and service notifications.
• Protecting the safety, security, and integrity of resort premises, assets, guests, and personnel.
• Complying with statutory reporting requirements, tax laws, and hospitality regulations under Indian law.

3. Information Sharing & Third-Party Disclosure

We disclose information only under the following limited conditions:

• Trusted Service Providers: We may share data with vetted third-party vendors (such as cloud hosting, transactional SMS/email services, and database maintenance providers) who process data strictly on our behalf under binding confidentiality agreements.
• Legal & Regulatory Obligations: We may disclose information if required to do so by applicable law, court order, or governmental authority, or to protect the vital interests, rights, and safety of our guests, staff, or the public.

4. Data Security & Storage Practices

Aurae Wellness enforces robust, industry-standard administrative, physical, and technical measures to protect your personal data from unauthorized access, accidental loss, alteration, or unlawful disclosure:

• All communications between client devices, the mobile applications, and our servers are encrypted using modern Transport Layer Security (TLS/HTTPS).
• Database records are stored within protected, firewalled servers with strict role-based access permissions.
• Sensitive employee passwords and access tokens are hashed using cryptographic one-way hashing algorithms.

5. Data Retention & Account Deletion (Google Play Compliance)

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by Indian labor, taxation, and statutory accounting laws.

6. Your Privacy Rights

In accordance with applicable privacy regulations, you have the right to:

• Access, inspect, and review the personal information we maintain about you.
• Request corrections, updates, or rectifications of inaccurate or incomplete personal records.
• Withdraw consent previously granted for specific processing activities (e.g., opting out of non-essential communications).
• Lodge a grievance regarding the processing of your data with our designated Grievance Officer.

7. Children’s Privacy

Our mobile applications and digital administrative platforms are strictly intended for adult guests and authorized staff members aged 18 and older. We do not knowingly collect personal or biometric information from children under 13 years of age. When children stay at the resort under parental or guardian care, their basic registration details are collected exclusively from the accompanying parent or legal guardian.

8. Resort Guest Policies & On-Premise Guidelines

To ensure a harmonious, safe, and rejuvenating atmosphere for all guests undergoing healing therapies at Aurae Wellness Resort, all visitors and residents agree to adhere to our on-premise policies:

A. Attendant Policy

• Attendants are permitted to accompany guests requiring assistance. Attendants stay in dedicated attendant accommodations and are not permitted to stay in guests’ private treatment rooms.
• Meals and beverages for attendants are charged separately and are not included in guest wellness packages.
• Guests are responsible for their attendant’s conduct. Aurae Wellness reserves the right to ask attendants to vacate the premises if they disrupt the tranquil retreat environment.
• Attendants and guests are strictly prohibited from consuming or possessing alcohol, cigarettes, or tobacco on campus.

B. Do’s and Don’ts

• Prohibited Substances: Consumption or possession of alcohol, cigarettes, cigars, vape products, pan, and gutka is strictly prohibited anywhere on resort premises.
• Exclusively Vegetarian Campus: Outside food is strictly prohibited. Our culinary team serves exclusively prepared, nutritious vegetarian meals tailored to guests’ wellness regimens.
• Safe Keeping: Guests are strongly advised to store valuables and jewellery in the safe lockers provided in their rooms. The resort does not accept liability for lost or misplaced personal items.
• Campus Exits: Once checked in for a structured wellness program, guests are expected to remain on campus to maintain therapy continuity.

C. Child Policy

• Guests aged 14 and above are eligible to participate in structured wellness and yoga programs.
• Children under 14 may accompany their families and enjoy the dedicated kids’ recreational zone, but are not permitted in therapy, treatment, and yoga arenas.
• Parents and guardians must supervise their children at all times.

D. Electronic Devices & Laptop Policy

• To foster peaceful immersion, mobile phones must be kept on silent mode or used with headphones in public zones.
• Mobile phone and electronic device usage is strictly prohibited in all treatment rooms, therapy chambers, and yoga halls.
• Laptops are permitted in guest private rooms only, and are not allowed in public lounge, dining, or therapy areas.

E. Visitor Policy

• All visitors must obtain prior authorization from management and register at guest reception.
• Visitors are permitted only within the reception/lobby lounge and must be accompanied by their host guest. Visiting hours are restricted between 9:00 AM and 7:00 PM.

9. Grievance Redressal & Contact Information

If you have any questions, concerns, comments, or grievances regarding this Privacy Policy, your personal data, or our mobile applications, please reach out to our designated Grievance Officer:

10. Policy Updates & Modifications

We may update or revise this Privacy Policy periodically to reflect changes in our operational procedures, legal frameworks, or mobile app features. Any amendments will be published on this page with an updated “Effective Date”. Continued use of our website, guest facilities, or mobile applications after such updates constitutes your acceptance of the revised terms.