Privacy Policy
Effective date: 29 September 2026
Who we are
Roots & Peaks is a boutique hotel and yoga retreat at Secret Waterfall Rd, Upper Tapovan, Tapovan, Rishikesh, Uttarakhand 249137 ("Roots & Peaks", "we", "us"). This policy explains how we handle personal information when you use www.rootsandpeaks.in, book a room or retreat, contact us, or interact with us on Facebook, Instagram or WhatsApp. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
Information we collect
- Enquiries: your name, email, phone number, subject and message when you use our contact form.
- Retreat bookings: your name, email, phone number, chosen dates, number of guests, accommodation type and any special requests.
- Payments: payments are processed by Razorpay. We receive a payment reference and the amount paid; we never see or store your card, UPI or bank details.
- Room bookings: room reservations are handled by our booking engine provider (eZee), which receives the details you enter there.
- Stay information: identity documents required by law at check-in, and details you share with us during your stay.
- Website usage: pages visited, clicks (for example on WhatsApp, phone or booking buttons), device, browser and approximate location, collected through cookies and similar technologies (see below).
Facebook, Instagram & WhatsApp
When you message us, comment, react, fill in a lead or enquiry form, or otherwise interact with Roots & Peaks on Facebook, Instagram or WhatsApp (including through our Meta business app), we may receive the information you choose to share and that Meta makes available to us, such as your name, profile or account ID, phone number, email address and the content of your messages or forms.
We use this information only to respond to you, handle your enquiry or booking, and provide customer service. We do not sell it, and we do not use it for any purpose unrelated to your interaction with us. Your use of Meta's platforms is also governed by Meta's own privacy policy.
How we use your information
- To reply to enquiries and messages, and to plan and confirm stays and retreats.
- To take payments and send booking confirmations, receipts and important updates.
- To meet legal obligations, such as guest registration and tax and accounting records.
- To understand how our website is used and to improve it and our services.
- With your consent, or where you have contacted us, to send offers or updates about Roots & Peaks. You can opt out at any time.
How long we keep it
We keep personal information only as long as needed for the purposes above: enquiries typically for up to 3 years, and booking, payment and tax records for as long as the law requires (usually up to 8 years). After that, we delete or anonymise it.
Security
Our website uses HTTPS encryption, access to guest data is limited to authorised staff, and payments are handled by Razorpay's secure checkout. No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
You can ask us to give you a summary of the personal data we hold about you, correct or update it, delete it (unless we must keep it by law), or withdraw consent you have given. You can also nominate another person to exercise these rights on your behalf. Write to us using the contact details below; we will respond within a reasonable time.
Data deletion
To ask us to delete your personal data, including any data we received through Facebook, Instagram or WhatsApp:
- Email hello@rootsandpeaks.in with the subject "Data deletion request".
- Include your name and the email address, phone number or Facebook/Instagram name you used with us, so we can find your records.
- We will confirm your request and delete your data within 30 days, except records we are legally required to keep (such as tax invoices), which we will delete once that period ends.
You can also remove our app's access to your Facebook account at any time in Facebook: Settings & privacy → Settings → Apps and websites.
Children
Our website and services are not directed at children under 18. Bookings must be made by an adult; children's details are only collected from a parent or guardian as part of a family booking.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the effective date at the top.
Contact & grievances
For privacy questions, requests or complaints, contact our Grievance Officer:
Abhishek Gupta, Founder, Roots & Peaks
Secret Waterfall Rd, Upper Tapovan, Tapovan, Rishikesh, Uttarakhand 249137
Email: hello@rootsandpeaks.in
Phone: +91 7037850321
See also our Hotel Policies and Cancellation & Refund Policy.