top of page
pinewood resort logo.png
WhatsApp Audio 2026-06-13 at 7.30.52 PM
00:00 / 01:47

Pinewood Resort, Varai Village, Karjat, Dist. Raigad, Pincode: 410201

Pinewood Resort, Varai Village, Karjat

9870900421, 9820739385

Introduction
Pinewood Resort, Karjat respects your privacy. This policy explains what personal data we collect when you visit our website, make an enquiry or booking, or stay with us, why we use it, who we share it with, and the choices you have. We never sell your personal data. If you have any questions, write to pinewood_resort@yahoo.co.in.

Who we are
​Pinewood Resort, Varai Village, Karjat, Dist. Raigad, Maharashtra 410201, India (“Pinewood”, “we”, “us”) runs this website, www.pinewoodresort.co.in. Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the party that decides how your personal data is used.
This policy applies to our website, our enquiry forms and WhatsApp chat, online bookings, and your stay at the resort. You can reach us at pinewood_resort@yahoo.co.in.

What we collect

The details we collect depend on how you deal with us:

  • Enquiries and bookings: your name, phone number, email address, city, state, country and postcode, the dates and type of stay you want, and any message you send us. Online bookings and payments are taken on pages run by our booking partner, ResAvenue, where you also enter your country and any remarks, and where you may be asked why if you leave without paying.

  • Payments: the amount, date and method of payment. Card, UPI and bank details are handled by the payment gateway, not stored by us.

  • At check-in: a valid government-issued photo ID for each adult guest (passport and visa for foreign guests), your GST details if you want a tax invoice, and the names and ages of children travelling with you, as the law requires us to keep a guest register.

  • During your stay: food preferences, allergies, special requests and anything you tell us so we can look after you.

  • WhatsApp and phone: your number and the messages you send us on our WhatsApp chat or by call.

  • Website visits: your device type, browser, pages viewed, the website you came from and an approximate location, collected through cookies and similar tools (see “Cookies, analytics and advertising”).

  • Accounts and blog: if you create an account or comment on our blog, your name, email and what you post.

  • CCTV: video images recorded in public areas of the property (see “CCTV on the property”).

Why we use your data
We use your personal data only for these purposes:

  • to answer your enquiry, confirm and manage your booking, and take payment;

  • to check you in, keep the legally required guest register and look after you during your stay;

  • to send booking confirmations, reminders and important updates about your stay;

  • to keep guests, staff and property safe, including through CCTV;

  • to improve our website and understand which pages and offers people find useful;

  • to show you our offers on Google and Meta platforms, if you have agreed to advertising cookies;

  • to send you offers and news by WhatsApp, SMS or email, but only if you have said yes. You can say no at any time.

Where you give us your data for one of these purposes, we rely on your consent. In some cases the law lets us use data without consent, for example to keep a guest register or respond to a lawful request from the authorities.

Cookies, analytics and advertising
Our website uses cookies and similar tools to work properly and to measure and advertise. Advertising and analytics cookies are used only if you accept them on our cookie banner.

  • Google Analytics tells us how many people visit, which pages they view and how they found us. It does not tell us who you are.

  • Google Ads lets us measure how well our ads work and show our ads to people who have visited our site.

  • Meta Pixel does the same for ads on Facebook and Instagram. It may share your visit activity and device identifiers with Meta.

  • Website host (Wix) uses cookies that keep the site secure and working.

​These providers handle data under their own privacy policies. You can opt out by:

  • changing your cookie choices on our banner or in your browser settings;

  • managing Google ad settings at adssettings.google.com, or installing Google’s Analytics opt-out add-on;

  • managing Facebook and Instagram ad preferences at facebook.com/adpreferences.

Our booking and payment pages are run by ResAvenue and have their own cookies. What you enter on those pages is collected for us, and ResAvenue’s own privacy policy also applies. Our Meta Pixel and Google Ads tools may not see what you do on those pages.

Who we share it with
We do not sell your personal data. We share it only with people who help us run the resort, and only as much as they need:

  • ResAvenue, our online booking engine and payment collection partner, and the payment gateways and banks it uses to process your payment;

  • Wix, which hosts our website and handles our enquiry forms, blog and member accounts;

  • Google and Meta, for analytics and advertising as described above;

  • our own staff and tools we use to follow up enquiries, such as our CRM and messaging apps;

  • the authorities, courts or police, where the law requires us to share guest records or other information, including reporting foreign guests to the immigration authorities.

We ask our service providers to protect your data. Some of them, such as Google, Meta and Wix, may store data on servers outside India

CCTV on the property
We use CCTV cameras in public areas of the resort to keep guests, staff and property safe. We do not place cameras inside guest rooms or washrooms.
Footage is seen only by authorised staff and is kept for [30 days] unless we need it to look into an incident. We may hand it to the police or other authorities when the law requires.

How long we keep it and how we protect it
We keep your personal data only as long as we need it for the purpose you gave it, or as the law requires. Guest register records are kept for the period required by law. Enquiry and booking details are kept for as long as we deal with you. Once we no longer need your data, we delete it or make it anonymous.
We use reasonable security measures to protect your data, such as password-protected systems and limiting access to staff who need it. No website or system is completely secure, so we cannot guarantee absolute security. If a breach affecting your data occurs, we will tell you and the Data Protection Board of India as the law requires.

Your rights
Under the DPDP Act you can:

  • ask for a summary of the personal data we hold about you and who we have shared it with;

  • ask us to correct, complete or update your data;

  • ask us to delete your data, unless the law requires us to keep it;

  • withdraw your consent at any time. This does not affect what we did before you withdrew, and we may not be able to complete a booking without the data it needs;

  • nominate another person to exercise these rights for you if you die or become unable to do so;

  • complain to us if you are unhappy with how we handled your data.

To use any of these rights, email pinewood_resort@yahoo.co.in with your name, phone number and what you want. We will reply within a reasonable time, and no later than the period the law sets. If we cannot resolve your complaint, you can approach the Data Protection Board of India.

Children and group bookings
We collect a child’s personal data only with the consent of a parent or legal guardian, and we do not track children or show them targeted advertising. Guests under 18 can check in only with a parent or official guardian.
For school, corporate and other group bookings, the person or organisation making the booking confirms that they have the consent of group members, and the parents or guardians of any minors, for us to hold the names and details needed for the stay.

Grievance redressal
If you have a concern about how we have handled your personal data, or you want to use any of your rights, email our grievance contact at pinewood_resort@yahoo.co.in. Please include your name and enough detail to identify your enquiry or booking. We will acknowledge your complaint and reply within a reasonable time, and no later than the period the law sets. If it is not resolved, you can approach the Data Protection Board of India.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top. For significant changes we will tell you through our website. This policy is governed by the laws of India, and disputes fall under the courts at Raigad, Maharashtra.

Privacy Policy

Last updated: 27 October 2026

bottom of page