Privacy Policy

1. Who We Are

This website, cegpepco.com, is the website of:

Eco Garden Resort & Heritage

IV/290, Painkulam, near Kerala Kalamandalam,

Vallathol Nagar, Cheruthuruthy,

Thrissur, Kerala 679531, India.

The resort is owned and operated by Pepco Resorts Pvt Ltd, and marketed by Pepco Global Marketing LLC FZ, UAE (together “we”, “us”, “our”). This policy explains what personal data we collect, why we collect it, and your rights over it.

We process personal data in line with India’s Digital Personal Data Protection Act, 2023, and, where it applies, the UAE Personal Data Protection Law and the EU General Data Protection Regulation (GDPR).

2. What We Collect

Information You Give Us

Enquiries and contact forms: Name, email, phone/WhatsApp number, country, dates, number of guests, and your message.
Room bookings (made through our booking partner, IDS Next): Name, contact details, stay dates, room type, special requests and, where requested, card details to guarantee the booking.
At check-in: A valid photo ID for every guest. For foreign nationals, passport and visa details, as required by Indian law.
Events and weddings: Organiser details, event dates, guest numbers, and requirements.
Wellness enquiries: If you share health information when enquiring about Ayurveda at Layam, we use it only to respond to your enquiry.

Information Collected Automatically

Device and browser type, IP address, pages visited, and time on site, collected through cookies and analytics tools. (See our Cookie Policy).

3. Why We Use It

Purpose	Legal Basis
Responding to enquiries and sending quotes	Your consent / steps before a contract
Managing your booking and stay	Performing our contract with you
Guest registration and Form C reporting for foreign nationals	Legal obligation
Accounting, GST, and tax records	Legal obligation
Improving our website	Consent (analytics cookies)
Sending offers and news	Consent, which you can withdraw at any time
Safety and security on the estate	Legitimate use for safety (confirm CCTV in public areas)

Note: We do not sell your personal data.

4. Who We Share It With

We share personal data only where needed:

Pepco Resorts Pvt Ltd and Pepco Global Marketing LLC FZ, to manage your enquiry, booking, and stay.
IDS Next, our booking engine and property management provider.
Online travel agents (if you book through one), who share your booking with us.
Payment processors for payments made at the resort [name the card terminal/gateway provider].
Service providers who host our website, send emails and WhatsApp messages, or provide analytics, under confidentiality obligations.
Government authorities, where the law requires it, including Form C reporting to the Foreigners Regional Registration Office (FRRO) for foreign guests.

5. Transfers Outside India

Our marketing partner is based in the UAE, and some of our service providers may store data outside India. Where data is transferred abroad, we take reasonable steps to keep it protected and to comply with Indian law.

6. How Long We Keep It

Enquiries: Up to [24] months, unless you become a guest.
Booking and stay records: As long as required by tax and hotel regulations, typically [8] years.
Marketing lists: Until you unsubscribe.
Analytics data: As set out in our Cookie Policy.

7. Your Rights

You can ask us to:

Tell you what personal data we hold about you and how we use it.
Correct or update inaccurate data.
Erase data we no longer need, unless the law requires us to keep it.
Withdraw your consent for marketing or analytics at any time.
Nominate another person to exercise your rights in case of death or incapacity.

To make a request, contact our Grievance Officer (Section 10). We will respond within [30] days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India or, if you are in the EU or UAE, your local data protection authority.

8. Children

Our website is not intended for children. We collect children’s details only when a parent or guardian provides them as part of a booking.

9. Security

We use reasonable technical and organisational measures to protect your data, including secure (HTTPS) connections and access controls.

No method of transmission over the internet is completely secure, but we work to protect your information and will notify you and the authorities of a breach where required by law.

10. Contact and Grievance Officer

Role	Details
Grievance Officer	Pepco Resorts Pvt Ltd
Email	reservation@cegpepco.com
Phone	+91 6282 613 400
Address	Eco Garden Resort & Heritage, IV/290, Painkulam, Vallathol Nagar, Cheruthuruthy, Thrissur, Kerala 679531, India

11. Changes

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.