Privacy Notice

Last Updated: December 2025

Winnies Holiday Resort & Spa Kasauli, along with its affiliated entities (hereafter collectively, "Winnies Kasauli", "we", or "us"), values you as our esteemed guest and recognizes that privacy is a fundamental right. We are committed to transparency, handling your Personal Data with the utmost respect, sensitivity, and integrity across all global interactions.

This Privacy Notice describes the privacy practices of Winnies Kasauli for Personal Data that we collect in connection with:

The websites from which you are accessing this Notice, including www.winnies.in (collectively, the "Websites").
Your visit or stay as a guest at our resort and spa, and your use of our various hospitality services including the Spa & Wellness Centre, Restaurants, Boutiques, or other offline interactions.
Our social media pages through which you are accessing this Privacy Notice (collectively, our "Social Media Pages").
The email messages and messages via platforms like WhatsApp that we send you that link to this Privacy Notice and through your other online communications with us, including your pre-arrival preferences.
Your online inquiries and purchases of resort-related items or services.
Your marketing preferences.
Your use of software applications (including automated tools and chat functionalities) we provide for use.

Types of Personal Data We Collect

"Personal Data" are data that identify you as an individual or relate to an identifiable individual. We collect the following Personal Data:

Identifying and Contact Information

Salutation, full name, preferred pronouns (shared voluntarily)
Telephone number (098056 33007)
Date of birth
Email address (sales@winniesholidayresort.com)
Postal address
Social media account ID and profile photo

Financial and Transaction Information

Credit and debit card data (processed securely by third-party payment gateways)
Billing address and transaction details

Official Identification

Passport, visa, or other official identification (e.g., Aadhaar/PAN) details, as required by Indian law for check-in

Travel Profile Information

Arrival and departure time
Nationality
Accommodation and travel preferences
Language preference
Travel agent/company

Resort Stays or Interactions

Records of purchases of goods and services during visits
Restaurant visits, preferred room types
Spa services, concierge requests

Technical Data & Tracking

IP address and approximate location
Computer type, screen resolution, operating system
Device manufacturer and model
Internet browser type and version
Pages viewed and digital interaction data

Additional Information (with consent):

Family Members and Companions: Names and ages of children for comfortable accommodations
Important Dates: Birthdays, anniversaries, special occasions
Guest Preferences & Sensitive Data: Dietary restrictions, allergies, mobility requirements, health information for Spa services
Images, Video and Audio: CCTV footage in public areas for safety and security
Survey Responses: Guest satisfaction, complaints, or emergencies

Methods of Personal Data Collection

Source	Details
Online Services	Personal Data collected through browsing, reservations, purchases via Websites, social media engagement, and newsletter sign-ups.
Visits to Properties	Data gathered when guests use on-property services through the relevant forms, including restaurants, concierge, and spa & wellness centres.
Customer Support	Personal Data obtained through phone reservations (098056 33007), email (sales@winniesholidayresort.com), WhatsApp, and customer service interactions.
Winnies Kasauli Affiliates	Personal Data disclosed internally within Winnies Kasauli Group for personalization, communication, and business operations.
Winnies Kasauli Partners	Information from independent partners providing services, such as travel booking platforms and marketing firms.
Other Sources	Data from publicly available records, joint marketing partners, or individuals sending gifts.
Internet-Connected Devices	Data gathered when guests connect devices to resort/hotel internet.

How We Use Personal Data

Processing bookings and reservations

Handling bookings, payments, reservations, and inquiries.

Legal Basis: Contractual obligation, legitimate interests, legal compliance

On-Site Recognition

Facilitating guest check-in, personalised services, payment processing, and handling requests.

Legal Basis: Contractual obligation, legitimate interests, consent, legal compliance

Marketing and communications

Sending newsletters, surveys, and marketing emails; managing customer databases and social sharing.

Legal Basis: Consent, legitimate interests

Responding to public authorities

Providing information to law enforcement and authorities for security and legal requirements.

Legal Basis: Legal compliance

On-site security and incident documentation

Ensuring safety, documenting incidents, and protecting individuals (via CCTV).

Legal Basis: Contractual obligation, legal compliance

Providing personalised services

Analysing preferences, honouring health-related and dietary restrictions in the context of our services.

Legal Basis: Legitimate interests, explicit consent

Business operations

Fraud prevention, audits, data analysis, product and service improvements, investigation of complaints.

Legal Basis: Contractual obligation, legal compliance, legitimate interests

Sharing and Disclosure of Personal Data

We disclose Personal Data to:

Winnies Kasauli affiliates for purposes described in this Privacy Notice, such as service provision, personalisation, and communication.
Owners of Winnies Kasauli branded properties (if applicable) to comply with their legal obligations.
On-Property service providers offering goods, services, and experiences that enhance your stay (e.g., Spa partners, taxi services).
Digital service providers who support our operation, such as website hosting, payment processing, data analysis, customer service, and email delivery.
Advertising partners (e.g., Google Ads, Meta, Trivago) to facilitate marketing communications and personalized advertisements.

Other Uses and Disclosures

We may use and disclose your Personal Data when necessary or appropriate, including to comply with applicable law, cooperate with law enforcement, protect our terms and conditions, or in connection with business transactions such as mergers or sales.

Your Options for Managing Your Personal Data

You have control over how we use and share your Personal Data for marketing purposes. You may opt out from:

Receiving marketing-related emails

To stop receiving these emails, email sales@winniesholidayresort.com or use the unsubscribe link at the bottom of each marketing email.

Sharing with affiliates for direct marketing

If you prefer that we no longer share your data with our affiliates for marketing purposes, email sales@winniesholidayresort.com or use the unsubscribe link.

We will process your request as soon as reasonably practicable. Opting out of marketing emails will not affect your receipt of important administrative messages.

Other Important Information

Retention

We retain Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include the length of time we have an ongoing relationship with you, legal obligations, and whether retention is advisable in light of our legal position.

Security

We seek to use reasonable organisational, technical, and administrative measures to protect Personal Data within our organisation. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us.

Sensitive Data

We only collect Sensitive Data which may be necessary to perform expected services or as required by law. Unless we request it, please do not send us, or disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion, criminal background, or trade union membership).

Use of Services by Minors

The Services are not directed to individuals under the age of eighteen (18), and we do not knowingly collect Personal Data directly from individuals under 18.

International Transfers

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. We utilize legally recognized transfer mechanisms (such as Standard Contractual Clauses) to protect your Personal Data during international transfers.

Contact Us

Winnies Holiday Resort & Spa, Kasauli, is responsible (data controller) for the Personal Data we hold about you.

Resort Address

Tehsil, Village Sanawar on Main Dharampur Kasauli Road
1 Km after Pinegrove School Sanawar Resorts
Sanawar, Kasauli, Himachal Pradesh 173202

Updates to This Privacy Notice

The "LAST UPDATED" legend at the top of this Privacy Notice indicates when this Privacy Notice was last revised. Any changes will become effective when we post the revised Privacy Notice on our Website.

Additional Privacy Provisions for Residents of Certain Countries

EU/EEA/UK Residents

You may request access, correction, update, suppression, restriction, or deletion of your Personal Data, object to its processing, or receive a copy of your Personal Data for transfer. We will respond within 1 month. You may also lodge a complaint with your local data protection authority.

USA Residents

You have the right to know if we process your personal information, request deletion, correct inaccurate information, and opt out of sales, sharing, or targeted advertising. You have the right to be free from unlawful discrimination for exercising your rights.

People's Republic of China (PRC) Residents

We may collect sensitive information including payment card information, stay records, web browsing history, and precise location. We will obtain your consent as required by PRC law and only share data internationally with your separate consent.