EcoRah Retreats ("EcoRah", "we", "us", or "our") is committed to protecting the privacy of everyone who uses our platform — travellers, hosts, and visitors alike. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.
By accessing or using ecorah.in, creating an account, making a booking, or listing a property, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform.
Information We Collect
We collect information in the following ways:
Account Information
When you register on EcoRah, we collect your name, email address, password (stored in encrypted form), and your chosen role (Traveller or Host). Hosts additionally provide property details, location, photographs, pricing, and availability information.
Booking & Payment Information
When you make a booking, we collect guest details, travel dates, number of guests, add-on selections, and the total booking amount. Payment transactions are processed by CCAvenue (a PCI-DSS compliant payment gateway). EcoRah does not store your full card number, CVV, or net banking credentials — these are handled entirely by CCAvenue.
Enquiry & Communication Data
When you submit an enquiry through our platform, we collect your name, email address, phone number, and the message you send. This information is used to respond to your enquiry and connect you with the relevant host.
Host Application Data
Hosts applying to list their property submit business documents, identity proofs, property photographs, and other supporting files. These are stored securely and reviewed only by authorised EcoRah staff.
Usage & Technical Data
We automatically collect information about how you use our platform, including your IP address, browser type, device type, pages visited, time spent on pages, and referring URLs. This helps us improve the platform and detect fraudulent activity.
Cookies
We use cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage. You may control cookies through your browser settings, though disabling them may affect certain features such as staying logged in.
How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account on the EcoRah platform.
- To process bookings, confirm reservations, and issue booking confirmations via email.
- To facilitate payment processing through CCAvenue and update booking status upon successful payment.
- To respond to enquiries and connect travellers with hosts.
- To review and approve host applications and property listings.
- To send transactional emails — booking confirmations, payment receipts, enquiry responses, and account notifications.
- To calculate and credit EcoRah Rewards to hosts upon confirmed bookings.
- To detect, investigate, and prevent fraudulent transactions and abuse of the platform.
- To improve our website, services, and user experience through analytics.
- To comply with applicable Indian laws and regulatory requirements.
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
With Hosts (for confirmed bookings)
When a booking is confirmed, we share the guest's name, contact details, travel dates, and number of guests with the relevant host to facilitate the stay.
With Travellers (for confirmed bookings)
We share the host's property address, contact information, and check-in instructions with the traveller upon booking confirmation.
With Payment Processors
Booking and payment data is shared with CCAvenue to process transactions securely. CCAvenue operates under its own privacy policy and PCI-DSS compliance framework.
With Service Providers
We may share data with trusted third-party service providers (such as email delivery services) who assist us in operating the platform, under strict confidentiality obligations.
Legal Requirements
We may disclose personal information if required to do so by law, court order, or in response to valid requests by Indian government authorities or law enforcement agencies.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Specifically:
- Account data is retained for the duration of your active account and for a reasonable period thereafter.
- Booking records are retained for a minimum of 7 years for financial and legal compliance purposes.
- Host application documents are retained for the duration of the host relationship and for a period thereafter as required by law.
- You may request deletion of your account and associated data by contacting us at [email protected], subject to our legal retention obligations.
Security of Data
We implement commercially reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include:
- Encrypted password storage using industry-standard hashing algorithms.
- AES-128-CBC encryption for all payment data transmitted to CCAvenue.
- Secure file storage for host-uploaded documents, accessible only to authorised staff.
- HTTPS encryption for all data transmitted between your browser and our servers.
- Role-based access controls ensuring staff can only access data relevant to their function.
Your Rights
You have the following rights regarding your personal data:
Access
You may request a copy of the personal information we hold about you.
Correction
You may update or correct your account information at any time through your profile settings, or by contacting us.
Deletion
You may request deletion of your account and personal data, subject to our legal obligations to retain certain records.
Opt-out of Marketing
You may opt out of non-transactional marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
Children's Privacy
EcoRah is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at [email protected] and we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:
Website
ecorah.in
If you have any questions about this Privacy Policy, please contact us at [email protected].