GPNext Technologies Privacy Policy

1. Scope

This Privacy Policy explains how Hotels In Alibaug collects, uses, stores, secures, and discloses personal data through the software platform used by subscribed hotels, hotel staff, superadmin users, and authorized police viewers where permitted.

2. Data collected

The platform may process guest name, mobile number, WhatsApp number, address, ID proof details, Aadhaar, passport, driving licence or other ID records, check-in and check-out dates, room details, vehicle number, travel details, staff identity details, and document images uploaded by hotels or end users.

3. Purposes of processing

Personal data is processed to operate the hotel check-in workflow, maintain statutory and operational guest registers, support hotel administration, enable reports, store proof documents, support compliance review, respond to lawful access requests, improve service reliability, and provide customer support.

4. Role of hotels

Each hotel is responsible for ensuring that it has a lawful basis and any required notice or consent for collecting and uploading guest and staff data into the platform. Hotels remain responsible for the accuracy of data entered by their team or their guests.

5. Data sharing

Data may be shared only with the relevant hotel, authorized hotel staff, superadmin users, service providers supporting hosting or storage, and authorized law enforcement or government authorities where disclosure is legally required or allowed. Guest document images stored in a hotel-linked cloud drive may be accessed only through system workflows and permissions configured in the platform.

6. Storage and retention

Data may be stored in the application database, device cache for offline sync, logs, backups, and hotel-linked cloud storage integrations. Data is retained for as long as needed for service delivery, legal compliance, audit, dispute handling, security, or backup restoration, unless a shorter retention period is required by contract or law.

7. Security measures

The provider uses reasonable technical and organizational safeguards intended to protect personal data from unauthorized access, misuse, alteration, disclosure, or loss. No transmission or storage system can be guaranteed to be completely secure, and hotels should also protect device access, tokens, and account credentials.

8. DPDP framework notice

Where applicable, personal data processing is intended to align with the Digital Personal Data Protection Act, 2023 and related rules in force in India. Hotels using the platform should provide appropriate privacy notices and obtain valid consent or rely on another lawful basis where required for guest and staff data collection.

9. Rights and requests

Requests relating to correction, access, or deletion of guest or staff data should ordinarily be directed first to the hotel that collected the data. The provider may assist the hotel with reasonable operational support for such requests, subject to law, system limitations, security, and retention obligations.

10. Third-party services

The platform may rely on third-party hosting, storage, image processing, or cloud providers. Their services remain subject to their own terms and operational controls. The provider is not responsible for independent actions taken by third-party systems outside the platform’s direct control.

11. Policy updates

This policy may be updated from time to time to reflect legal, technical, or business changes. Continued use of the software after an update takes effect constitutes acceptance of the revised policy.

12. Contact

For privacy or personal data questions relating to this platform, contact GPNext Technologies at checkin.hotelsinalibaug@gmail.com.