Legal
Privacy Policy
Effective 1 July 2026
Magic Valley Adventures Private Limited (“Magic Valley”, “we”, “us”), Near Chilandhiyar Falls, Kottakamboor P.O., Munnar, Kerala 685615, operates magicvalley.in. This policy explains what personal data we collect and how we use it.
1. What we collect
When you book or enquire:
- Name, email address, and phone number (WhatsApp)
- Visit dates, group size, and stay type
- Any messages or special requirements you share with us
From the website (anonymous):
- Page views and navigation paths via Plausible Analytics (cookie-free, no personal identifiers)
- Aggregate traffic data via Google Analytics 4 (IP anonymisation enabled)
2. Why we collect it
- To process and confirm bookings and send you a booking reference
- To reply to your enquiry via WhatsApp or email
- To send transactional notifications (booking confirmation, checkout summary)
- To understand how guests find and use our website — aggregate only, never sold
We do not use your data for unsolicited marketing.
3. Who we share it with
We do not sell, rent, or share your personal data with third parties for marketing purposes. Booking details are shared only with the staff members handling your stay.
When payment processing via Razorpay is enabled, your payment data is handled directly by Razorpay under their own privacy policy. Magic Valley does not store card numbers or UPI credentials.
4. Data retention
- Booking records: retained for 7 years as required under Indian accounting and tax law
- Enquiries not converted to a booking: deleted after 12 months
- Analytics data: aggregate only, no personal identifiers retained
5. Your rights
You may request access to, correction of, or deletion of your personal data at any time. Contact us via WhatsApp or email and we will respond within 14 days.
6. Cookies
This site does not use cookies for tracking or advertising. Plausible Analytics is entirely cookie-free. Google Analytics 4 uses an anonymised session identifier that does not identify you personally.
7. Security
Booking data is stored in Supabase (hosted in Mumbai, India) with row-level access controls. All data in transit is encrypted via TLS 1.3. Secrets and API keys are stored in an encrypted vault and never hardcoded in the application.
8. Contact
For privacy queries or data requests:
WhatsApp: +91 77365 79666
Email: magicvalleybooking@gmail.com