Privacy policy
What personal information the centre collects, why, how long it is kept, and your rights under the DPDP Act 2023.
Last updated: not yet approved
Who is responsible for your data
Sabari Pilgrim Trust is the data fiduciary for the personal data collected through this website.
To be confirmed
the named grievance officer and their contact details. The Digital Personal Data Protection Act 2023 requires a published contact — this page cannot go live without one.
What we collect
We collect only what a booking and a stay actually require.
- Your name, mobile number and email address.
- The names, ages, genders and relationship of the pilgrims travelling with you.
- A government identity document for each pilgrim who must be verified.
- Your booking, service and payment records.
- For enquiries: your name, mobile number, email and message, and the IP address the enquiry was sent from.
Identity documents
Identity documents are treated as sensitive. They are never published, never listed in a public folder and never sent by email.
A document can only be opened by centre staff whose role requires it, and every single time one is opened the system records who opened it and when. Aadhaar numbers are masked to the last four digits everywhere except the one screen where a verifier makes the decision.
How long we keep it
To be confirmed
confirm the retention period. The system is currently built to purge verification documents 90 days after checkout while keeping the verification decision and the last four digits of the number. Keeping identity documents indefinitely is a liability and we do not recommend it.
Booking and payment records are kept for as long as tax and accounting law requires.
Who we share it with
Payment information is handled by our payment gateway. The centre does not store your card or bank details at any point.
We do not sell personal data and we do not share it for advertising.
Your rights
Under the DPDP Act 2023 you may ask for a copy of your data, ask for it to be corrected, ask for it to be erased, or withdraw a consent you have given. Write to the grievance officer above.
A request for a copy is answered with a file listing everything held about you and your party, including a record of every occasion a member of staff opened one of your documents.
A request for erasure removes the identity documents, the Aadhaar numbers, the addresses and the contact details held about you and everyone travelling with you. Payment and booking records are kept, because tax and accounting law requires them — the amount, the date and the reference, with the contact details removed. Erasure is carried out once any stay has finished and any payment has settled.
Cookies
This site sets a cookie to keep you signed in. It sets no advertising or tracking cookies.
