Last updated: 8 September 2026
Under the Digital Personal Data Protection Act, 2023 you are the Data Principal and Saffron Studios Private Limited is the Data Fiduciary. These are your rights and exactly how to use them.
Your rights
Access a summary of my data
A summary of the personal data we process about you, what we do with it, and the other fiduciaries and processors it has been shared with.
Correct or complete my data
Fix inaccurate details or fill in incomplete ones — name, phone, email, address, booking details.
Erase my data
Delete your personal data, except what we must keep to meet a legal obligation such as tax, GST and hospitality records.
Withdraw my consent
Stop processing that relies on your consent, including marketing messages and analytics.
Nominate someone
Name a person who may exercise these rights on your behalf if you die or become incapacitated (s.14).
Raise a grievance
Complain about how we have handled your personal data or an earlier request.
How to make a request
Use the data request form, or email privacy@saffronstays.com from the address registered on your account. We may ask you for one additional detail — a recent booking ID, or an OTP on your registered number — purely to confirm the request is yours; we will not ask for a government ID to process a rights request.
We acknowledge every request within 72 hours and complete it within 30 days. If we cannot, we will tell you why and when we will.
Withdrawing consent
Cookie and tracking consent can be changed yourself, immediately: . Withdrawing marketing consent there also switches off the email, SMS, WhatsApp and push opt-ins on your account, so the campaigns stop, not just the tracking scripts; every marketing message also carries its own unsubscribe link, and the newsletter, which Substack sends, is unsubscribed from the link at the foot of any issue. If you withdraw while signed out, we hold the withdrawal briefly and apply it to your account if you sign in on the same browser soon after — it is not held longer than that, so that one person's decision is never applied to someone else's account. Write to us and we will apply it directly instead. Turning marketing back on in the cookie panel restores advertising cookies only; the opt-out on your account stays until you ask us to lift it. Withdrawing consent does not make earlier lawful processing unlawful, and we may still hold records the law requires us to keep.
What we keep after erasure
When you ask us to erase your data, we delete your profile, marketing preferences and behavioural data. We retain, for the periods the law requires: invoices and GST records (8 years), guest stay records required under state hospitality rules, and records needed to defend a legal claim. These are kept restricted, not used for any other purpose, and deleted when the period expires.
Your duties
Section 15 of the Act asks you not to impersonate another person when giving your details, not to suppress material information when required to provide it, and not to file a false or frivolous grievance.
Grievance redressal
Grievance Officer & Data Protection Contact
Saffron Studios Private Limited
B19, Shriram Industrial Estate, Wadala West, Mumbai 400031, Maharashtra, India
privacy@saffronstays.com
If we do not resolve your grievance to your satisfaction, you may complain to the Data Protection Board of India under section 13(3) of the Act.