Privacy Policy

1. Who this policy covers

AURA STAY & HOSPITALITY is based in Srinagar. This policy describes information shared through our website, email, telephone and travel enquiries. External websites and communication services have their own privacy practices.

This policy applies when you use Aura’s website or contact Aura about an enquiry or agreed arrangement. The website accepts enquiries, rather than instant bookings or online payments.

2. Information we may need

For an enquiry, we ask for contact details and relevant planning information: your name, email, phone number, requested service, travel dates, traveller count, budget range, interests and message. Provide only what is needed to discuss your request.

If a booking is later agreed directly with Aura, address details, payment references and traveller details may be needed for the confirmed arrangements. Identification or permit information should be requested separately only where a specific supplier or lawful requirement makes it necessary. We will explain the purpose at that point.

• Do not enter card numbers, PINs, passwords, identity-document copies or unnecessary medical information into the enquiry form.
• If you enquire for a group, share other travellers’ details only with their authority and only when needed.
• An adult should handle enquiries involving children. Please do not submit children’s contact details or identity documents through the public form.

3. Why information is used

Responding to an enquiry is separate from promotional marketing. Promotional messages would require a separate opt-in and a way to stop them. The website has no newsletter sign-up or marketing mailing-list integration.

• To understand and respond to your enquiry, check options and prepare a relevant proposal.
• To coordinate agreed accommodation or travel services and communicate confirmations, changes and support.
• To reconcile payments, maintain necessary business records and handle cancellation or refund requests where an arrangement is agreed.
• To protect the website and manage access, misuse and technical faults.

4. Necessary sharing

We do not sell, rent or trade your personal information. Relevant details may be shared with the accommodation, transport or activity provider needed for your requested arrangements, with service providers supporting communication, hosting or payment handling, or where disclosure is required by law.

Only information needed for the specific purpose is shared. The website and domain email are hosted with Namecheap. Staff enquiry notifications also use Google Gmail. These providers handle information under their own terms and privacy practices. Ask Aura which accommodation, transport or activity provider is involved before sharing sensitive details for an arrangement.

Authorised staff review saved enquiries in the staff dashboard and receive enquiry notifications through the designated staff email channels. Customer replies require staff review; submitting an enquiry does not create an automatic email acknowledgement or booking confirmation.

5. Cookies, browser storage and external links

The website includes no analytics, advertising cookies, embedded maps, external web fonts or website payment gateway. The campaign offer popup stores a session-only flag to remember that it has been shown. It does not put enquiry details into browser storage.

Unsent form details remain in the open page’s memory. Reloading or closing that page clears those unsent values. If an enquiry has already been submitted and saved, clearing the page does not delete the saved database record.

The staff dashboard uses an essential authentication cookie. The hosting provider may keep connection or security logs. Any analytics or other non-essential technology introduced later requires a revised disclosure and applicable choices before activation.

Phone, email and WhatsApp links open your chosen communication service. Clicking a WhatsApp link does not automatically send a message. Information you send there is handled by that service and the recipient. Linked source and supplier websites operate under their own policies.

6. Security and retention

We use appropriate access and security measures to protect information; no internet service can guarantee complete security. Do not send sensitive documents through the public enquiry form.

Aura keeps enquiry and booking records to support customer requests, agreed arrangements and necessary business, accounting or audit purposes. We have not set a single fixed retention period for every type of record. Applicable legal record-keeping obligations and unresolved disputes or investigations may require particular records to be retained. You can ask us to review and delete your information using the contacts below.

You may request deletion of your information. After proportionate verification, we will review the request and remove information that is no longer needed, subject to legal record-keeping and legitimate unresolved matters. If some information must be retained, we will explain the reason. Backup copies and records held by a separate service provider may require separate handling; this policy does not promise immediate erasure of every backup or automatic deletion.

7. Your questions and requests

Contact Aura using the details below to request access to information you provided, correction of inaccurate information or deletion where appropriate. You can also ask to stop optional marketing or withdraw permission for an optional use. Withdrawing information needed for an arrangement may affect our ability to provide that arrangement; this should be explained to you.

Include enough information to identify your enquiry or booking, but do not send passwords or identity documents in the initial request. We may need proportionate verification to avoid disclosing someone else’s information. Legal record-keeping requirements may limit deletion; the reason should be explained.

Send privacy questions, requests or complaints to aurastayskashmir@gmail.com or info@aurastayskashmir.com. Aura will give a first response within 7 working days. This is a first-response target, rather than a promise that every request will be completed within that time. We will explain any further verification, required retention or additional time. Rights and mandatory record-keeping requirements under applicable law remain unaffected.

8. Changes to this policy

Changes will be published on this page with an updated version. If the purpose or handling of information changes materially, the relevant notice and any required choices will be provided before the new use.