Privacy Policy

We only collect what we need to confirm and manage your visit. This includes:

• Booking details — your name, phone number, email address, the experience you choose, your preferred date and time slot, and the number of guests.
• Payment information — when you pay online, your card, UPI, or bank details are entered directly with our payment provider. We never see or store your full card number, CVV, or UPI PIN.
• Communications — any messages you send us by email, phone, or through the site.
• Technical data — basic device and usage information (such as browser type and pages viewed) that helps us keep the site secure and working.

Your information is used strictly to run the booking service:

• To create, confirm, and manage your booking requests and reservations.
• To contact you about your booking — including confirmations, changes, or cancellations.
• To process payments and issue refunds where applicable.
• To respond to your enquiries and provide customer support.
• To keep the site safe, prevent fraud, and meet our legal obligations.

We do not sell your personal information, and we do not use it for advertising by third parties.

Online payments are processed securely by Razorpay, our third-party payment gateway. When you choose to pay online, you are redirected to or served Razorpay's secure checkout, and your payment is handled under Razorpay's own terms and privacy policy.

We receive only a confirmation of payment and a reference identifier so we can mark your booking as paid — never your sensitive card or banking credentials.

We share your information only where it is necessary to provide the service:

• With our payment provider (Razorpay) to process transactions.
• With service providers who host our website and infrastructure, under confidentiality obligations.
• When required by law, or to protect the safety, rights, or property of our guests, staff, or the public.

We keep your booking and payment records for as long as needed to provide the service and to meet legal, accounting, and tax requirements. When information is no longer required, we delete or anonymise it.

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

The site uses only the cookies and local storage needed to keep you signed in and to remember your session. We do not use third-party advertising or tracking cookies. You can clear or block cookies in your browser settings, though some features (such as staying logged in) may not work as expected.

You may, at any time:

• Ask for a copy of the personal information we hold about you.
• Request that we correct information that is inaccurate or incomplete.
• Request deletion of your information, subject to records we must keep by law.

To make a request, contact us at info@thotambooking.com.

Bookings are made by adults on behalf of their families or groups. We do not knowingly collect personal information directly from children. If you believe a child has provided us information, please contact us and we will remove it.

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised “Last updated” date. Significant changes will be highlighted where appropriate.