Privacy Policy

1. Introduction

Welcome to Arrivalin Technologies Pvt Ltd ("we," "our," or "us"). We are committed to protecting the privacy and security of the personal information of all individuals who visit our website, use our mobile application, or utilize our services (collectively, the "Platform").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform. This policy applies to Guests (users looking to book accommodations, travel packages, or read blogs) and Hosts (hotel owners, property managers, or individuals listing their properties on our Platform).

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. About Arrivalin Technologies Pvt Ltd

Arrivalin Technologies Pvt Ltd operates a technology platform that facilitates the booking of hotel rooms, travel plans, and packages. We act as an intermediary connecting Hosts who wish to list their properties and services with Guests seeking accommodation and travel experiences. We also provide content in the form of blogs and destination guides.

For the purposes of applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the General Data Protection Regulation (GDPR) (where applicable), Arrivalin Technologies Pvt Ltd acts as a Data Fiduciary (Data Controller) in relation to the personal data collected from you through the Platform.

3. Scope of this Privacy Policy

This Privacy Policy applies to all personal data processed by Arrivalin Technologies Pvt Ltd through:

• Our website located at https://arrivalin.com.
• Our mobile applications.
• Email, SMS, WhatsApp, and other electronic communications.
• Offline interactions related to customer support or host onboarding.

This policy does not apply to third-party websites, applications, or services that you may access through links on our Platform, including the specific payment gateways used by Hosts or third-party travel service providers.

4. Definitions

To help you understand this policy, we use specific terms defined as follows:

• Data Principal (or User): The individual to whom the personal data relates. This includes our Guests, Hosts, and Website Visitors.
• Personal Data: Any data about an individual who is identifiable by or in relation to such data. This includes names, email addresses, phone numbers, and payment information.
• Processing: Any operation performed on Personal Data, such as collection, storage, use, sharing, and deletion.
• Consent: A clear, affirmative action by the User signifying agreement to the processing of their Personal Data for a specified purpose.
• Data Fiduciary: The entity that determines the purpose and means of processing Personal Data (Arrivalin Technologies Pvt Ltd).
• Data Processor: An entity that processes Personal Data on behalf of the Data Fiduciary.

5. Information We Collect

We collect information to provide better services to all our users. The type of information we collect depends on how you use the Platform.

5.1 Website Visitors

If you are just browsing our website, reading blogs, or viewing travel packages without creating an account, we may collect limited information such as your IP address, browser type, and browsing behavior via cookies.

5.2 Guests

If you register as a Guest to book rooms or travel packages, we collect information necessary to facilitate your bookings and personalize your experience.

5.3 Hosts

If you register as a Host to list your hotel or property, we collect detailed information about you and your business to verify your identity and facilitate payments.

5.4 Automatically Collected Information

When you access the Platform, we automatically collect certain information, including:

• Device information (IP address, device type, operating system).
• Usage data (pages visited, time spent, search queries).
• Location data (approximate location derived from IP address).

5.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to track activity on our Platform and hold certain information to improve your browsing experience.

6. Information Collected From Guests

6.1 Account Information

When you create an account, we collect your name, email address, phone number, and password. You may also choose to link your social media accounts (e.g., Google, Facebook) for easier login.

6.2 Guest Checkout Information

To complete a booking, we may require your full name, billing address, and identity verification details (such as government-issued ID) as required by local laws or hotel policies.

6.3 Booking Information

We collect details about your bookings, including travel dates, destination, number of guests, room preferences, and special requests (e.g., dietary requirements, accessibility needs).

6.4 Payment Information

We collect payment details such as credit/debit card numbers, UPI IDs, or net banking details. Please note that for security reasons, full payment card numbers are typically processed and stored by our PCI-DSS compliant payment gateways and are not stored on our servers.

6.5 Communications

We retain records of your communications with us, including emails, chat logs, and WhatsApp messages with our support team or Hosts.

6.6 Reviews and Feedback

We collect the content of reviews, ratings, and feedback you provide regarding properties, hosts, or travel packages.

7. Information Collected From Hosts

7.1 Personal Information

We collect the name, email address, phone number, and residential address of the property owner or manager.

7.2 Property Information

We collect details about your hotel or property, including name, address, geo-location, amenities, photos, videos, house rules, and pricing.

7.3 Business Information

We may collect your business registration number, GSTIN, PAN card details, and other business identification numbers.

7.4 Verification Information

To ensure trust and safety, we require Hosts to provide government-issued IDs (e.g., Aadhaar, Passport, Driver’s License) and property ownership documents or lease agreements.

7.5 Banking/Payment Information

We collect your bank account details (account number, IFSC code), UPI ID, or other payout information to transfer earnings from bookings.

8. How We Use Personal Information

We use the collected information for the following purposes:

• To Provide Services: To create accounts, facilitate bookings, process payments, and send confirmations.
• To Facilitate Communication: To connect Guests with Hosts regarding bookings and travel arrangements.
• Personalization: To tailor your experience, showing you relevant travel packages, blogs, and property recommendations.
• Verification: To verify Host identities and property details to prevent fraud.
• Customer Support: To respond to your inquiries, resolve disputes, and troubleshoot issues.
• Marketing: To send you promotional offers, newsletters, and updates (subject to your consent).
• Legal Compliance: To comply with applicable laws, tax requirements, and law enforcement requests.

9. How We Share Personal Information

We do not sell your personal data. We may share your information in the following circumstances:

• 9.1 Hotels/Hosts: When you make a booking, we share your name, contact details, and booking preferences with the specific Host to facilitate your stay. Hosts are contractually obligated to protect this data.
• 9.2 Payment Providers: We share necessary payment data with third-party payment processors (e.g., Razorpay, Stripe) to process transactions securely.
• 9.3 WhatsApp/Communication Providers: We may use third-party communication platforms (e.g., Twilio, WhatsApp Business API) to send booking confirmations and updates.
• 9.4 Cloud/Hosting Providers: Our Platform is hosted on secure cloud servers (e.g., AWS, Google Cloud). These providers store data on our behalf but do not have permission to use it for their own purposes.
• 9.5 Analytics Providers: We share usage data with analytics partners (e.g., Google Analytics) to understand how our Platform is used and to improve our services.
• 9.6 Legal Authorities: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., police, courts, or regulatory bodies).

10. Payments

All financial transactions on the Platform are handled through secure, PCI-DSS compliant payment gateways. Arrivalin Technologies Pvt Ltd does not store your full credit card or debit card information on its servers.

For Guests: Payment processing is subject to the terms and privacy policies of the payment gateway provider.

For Hosts: Payouts are processed based on the banking information provided. We may share your banking details with our banking partners to facilitate these transfers.

11. WhatsApp, SMS, Email and Notifications

By creating an account or making a booking, you consent to receive transactional messages via WhatsApp, SMS, Email, and Push Notifications. These are essential for the functioning of the service (e.g., OTPs, booking confirmations, host verification status). You may manage your marketing preferences in your account settings.

12. Cookies and Similar Technologies

We use Cookies to:

• Keep you logged in.
• Remember your preferences (e.g., currency, language).
• Analyze site traffic and trends.
• Serve targeted advertisements.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

13. Location Information

We may collect and process information about your actual location to provide location-based services, such as showing nearby hotels or travel experiences. We use various technologies to determine location, including IP address and GPS data from your mobile device.

14. Data Retention

We retain your Personal Data only for as long as it is necessary for the purposes set out in this Privacy Policy, or as required by law. For example, we may retain transaction records for tax and accounting purposes for a period of 7 years or as mandated by Indian law. Guest profile data may be retained as long as the account is active.

15. Data Security

We implement reasonable security practices and procedures as mandated under the Digital Personal Data Protection Act, 2023, including:

• Encryption of data in transit and at rest.
• Firewalls and access controls.
• Regular security audits.
• Employee training on data privacy.

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure.

16. User Rights and Choices

Under the DPDP Act and other applicable laws, you have the following rights:

• Right to Access: You can request a copy of the Personal Data we hold about you.
• Right to Correction: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your data, subject to legal retention requirements.
• Right to Withdraw Consent: You can withdraw your consent at any time by contacting us.
• Right to Nominate: You can nominate another individual to exercise your rights in case of death or incapacity.
• Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer.

To exercise these rights, please contact us at: privacy@arrivalin.com.

17. Marketing Communications

We may use your email address and phone number to send you newsletters, special offers, and travel promotions. You can opt out of receiving these marketing communications at any time by clicking the "Unsubscribe" link in the emails or by updating your notification preferences in your account settings.

18. Account Deletion

You have the right to delete your account at any time.

Guests: You can delete your account via the "Account Settings" section of the Platform. Once deleted, your profile and booking history (subject to legal retention requirements) will be removed.

Hosts: Hosts must ensure all pending bookings and financial obligations are cleared before account deletion.

19. Third-Party Services and Links

Our Platform may contain links to third-party websites, advertisers, or services (e.g., airlines, tour operators). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

20. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, or country where the data protection laws may differ. If you are located outside India and choose to provide information to us, please note that we transfer the data to India and process it there.

21. Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

22. Data Breach/Security Incidents

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in accordance with the requirements of the DPDP Act. We will provide information regarding the nature of the breach and the mitigation steps taken.

23. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

24. Grievance Redressal / Privacy Contact

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns.

If you have any complaints regarding the processing of your data, you may contact the Grievance Officer. We will endeavor to resolve your complaint within the timeframes prescribed by law.

25. Contact Us

If you have any questions about this Privacy Policy, please contact us: