Privacy Policy

1. Who We Are

Orowoods is a boutique mountain retreat located in Old Manali, Log Hut Area, and Nasogi Village, Himachal Pradesh, India. Our website is orowoods.com. For the purposes of this policy, "we," "us," and "our" refer to Orowoods and its operating team. When you visit our website, enquire about a room, or contact us directly, you are entrusting us with personal information, and we take that responsibility seriously.

2. Information We Collect

We collect information in two ways: information you provide directly, and information gathered automatically when you use our website.

Information You Provide:

Your full name, email address, and phone number — submitted via our enquiry or contact form
Your city of residence — to better understand your travel context
Any message or request you share with us in free text
Reservation details including check-in and check-out dates, room preferences, and guest count
Payment information — processed securely through third-party payment gateways; we do not store card details on our servers

Information Collected Automatically:

3. How We Use Your Information

Every piece of information we collect is used to serve you better or to operate our retreat responsibly. Specifically, we use your data to:

Respond promptly to enquiries and reservation requests
Process bookings and confirm your stay
Send you booking confirmations, pre-arrival information, and essential updates
Personalise your experience at Orowoods based on stated preferences
Improve the functionality, content, and overall experience of our website
Understand seasonal trends and occupancy patterns to plan our services
Comply with applicable Indian laws and regulations, including tax and hospitality mandates
Send you occasional updates about Orowoods — only if you have given consent, and always with an easy way to opt out

We will never use your information for automated profiling, unsolicited advertising, or purposes unrelated to your engagement with Orowoods.

4. Sharing of Information

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

Service Providers: Trusted partners who help us operate - such as payment processors, email delivery services, or website hosting providers - bound by confidentiality agreements
Legal Obligations: When required by law, court order, or a government authority under Indian jurisdiction
Business Transfers: In the unlikely event of a sale or merger, your data would be transferred with appropriate protections in place and you would be notified
Safety Situations: Where disclosure is necessary to protect the safety of guests, staff, or third parties

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy, or as required by applicable law. Booking records are typically retained for up to five years to comply with Indian financial and hospitality regulations. Contact form submissions not resulting in a booking are deleted after twelve months. You may request earlier deletion at any time (see Section 7).

6. Data Security

We apply appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption. Payment transactions are processed via PCI-DSS compliant third-party gateways. Access to personal data within our team is limited to staff with a genuine operational need. While no digital system is completely immune to risk, we are committed to continuous improvement of our security practices.

7. Your Rights

You have the right to know what personal data we hold about you, and to exercise the following rights at any time by contacting us:

Access: Request a copy of the personal data we hold about you
Correction: Ask us to correct any inaccurate or incomplete information
Deletion: Request that we delete your personal data, subject to legal retention obligations
Withdrawal of Consent: Opt out of marketing communications at any time
Complaint: Lodge a complaint with the relevant Indian data protection authority if you feel your rights have been violated

We will respond to all valid requests within 30 days.

8. Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted personal data to us without parental consent, please contact us immediately and we will delete it promptly.

9. Links to Third-Party Sites

Our website may contain links to external platforms such as Instagram, Facebook, and YouTube, as well as map services. Once you leave the Orowoods website, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or practices of external websites.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how your data is being handled, please reach out to us: