LEGAL & POLICIES

Privacy Policy

SUJÁN Luxury Wilderness Safaris

Privacy Notice

Effective Date: 1st day of August 2026
Last Updated: 1st day of August 2026

The SUJÁN Life (referred to as "SUJÁN," "we," "us," or "our") respects your privacy and is committed to protect your personal data. This Privacy Notice explains how we collect, use, store, share, and protect your personal data when you use our website, make a reservation, stay at our hotel, use our services and other online services (collectively, the "Services"). This Privacy Notice is in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and other applicable data protection laws.

It sets out the categories of personal data we may collect, the purposes for which such data is processed, the persons or entities with whom we may share it, the measures we take to protect it, and the rights available to you under applicable privacy and data protection laws.

1. Scope and Applicability

By interacting with us, making reservations, using our website, visiting our premises, participating in events, or availing our services, you acknowledge that your personal data may be processed as described in this Privacy Notice.

In situations where a specific privacy notice is not presented at the point of data collection, the most recent version of the Privacy Notice available on our official website shall apply and will govern the collection, use, and processing of your personal data. We encourage users to review the Privacy Notice on our website regularly to stay informed about how we protect and use your data.

2. Personal Data collected, Purpose of Processing and Goods and services to be Provided

We collect only such personal data as is necessary for the specified purpose. The table below is intended to provide an itemised and understandable description of the main categories of personal data, purposes of processing, and goods or services enabled.

Category Examples of personal data Specified purpose Goods/services or uses enabled Requirement
Identity and contact data Name, mobile number, email address, postal address, date of birth, customer identifier Identity verification, communication, customer support and service administration Access to SUJÁN services, account management, customer service and support Mandatory where needed for service provision
Government identifiers and KYC data PAN, Aadhaar number or Aadhaar-related details where lawfully required, identity proof, address proof and related verification metadata KYC, fraud prevention, statutory compliance, customer verification and account security Regulated onboarding, identity verification and fraud prevention Mandatory only where required for the relevant service or by law; otherwise not collected
Transaction and payment data Payment method details, transaction history, billing details, order details and refunds data Order fulfilment, billing, payment reconciliation, financial reporting and fraud prevention Purchases, subscriptions, billing and order fulfilment Mandatory for payment and purchase-related services
Device and technical data IP address, browser type, device identifiers, operating system, log files, session data and security logs Website and app functionality, cybersecurity, service diagnostics, fraud prevention and performance monitoring Secure access, platform functionality and service optimisation Automatically collected where you use digital services
Usage and preference data Interactions with website or app, service preferences, feedback, support interactions and feature usage Service improvement, user experience, analytics, troubleshooting and personalisation where permitted Improved user experience, service reliability and tailored content Optional unless needed for service operation
Marketing preferences Subscription status, opt-in records, communication preferences and consent status Sending promotional updates, offers or campaigns where you have provided consent Marketing communications and promotional offers Optional and based on consent
Location data Approximate location based on IP address; precise GPS location only if enabled by you Localisation, delivery/service support, fraud detection and security features Regional customisation, fraud monitoring and location-based features Optional unless required for a specific service feature
Cookies and tracking data Session cookies, persistent cookies, analytics cookies, tracking pixels and cookie preferences Site performance, security, analytics, preference management and marketing measurement where permitted Personalised browsing, service functionality and analytics Subject to cookie preference settings where applicable
Children’s data, where applicable Child’s name, age, linked device details, parent or guardian contact details and consent verification records Child account setup, parental controls, child-friendly features and safety-related service delivery Child-friendly features and parental control services Processed only with verifiable parental consent unless an exemption applies
Person with disability data, where applicable Details necessary to verify lawful guardian consent and provide requested accessibility or support services Verifiable guardian consent, accessibility support and lawful service delivery Accessible support and service administration Processed only where required and with lawful guardian verification where applicable

These lists include examples and are not exhaustive.

3. Purpose of Processing Personal Data

Your Personal data is collected and processed by SUJÁN based on the following legal grounds depending upon the nature of Personal Data and the purposes for which it is processed:

  1. You have provided consent for the specified purpose after receiving the consent notice;
  2. You have voluntarily provided your personal data for a specified purpose and have not indicated that you do not consent to its use for that purposes;
  3. Processing is necessary for compliance with applicable law, statutory reporting, court orders, regulatory requests, or other obligations permitted under the Digital Personal Data Protection Act, 2023;
  4. Processing is necessary for medical emergency, safety, fraud prevention, cybersecurity, or other permitted legitimate uses under the Act, as applicable;

Consent

Where processing is based on consent, you have the right to withdraw consent at any time through the mechanisms provided in the privacy notice. However, Withdrawal of consent will not affect processing already carried out before withdrawal.

If we process your Personal Data based on other lawful grounds, like that of legitimate use, legal obligations, or statutory requirements, such processing shall continue as permitted under the applicable law.

4. Children Data and Person with Disabilities

If we process personal data of a child, we will obtain verifiable consent from the parent before processing such personal data, unless an exemption under applicable law permits otherwise.

We will not undertake tracking, behavioural monitoring of children, or targeted advertising directed at children, except where expressly permitted under applicable law and implemented with appropriate safeguards.

If we process personal data of a person with disability who has a lawful guardian, we will verify that the individual providing consent is lawfully appointed as guardian under applicable law, where such verification is required.

5. Disclosure of personal data

SUJÁN does not sell or rent your Personal Data. However, we may share your data with trusted third parties in the following circumstances:

Service Providers & Business Partners
We may share your Personal Data with third-party vendors, contractors, or service providers who assist us in delivering our services, such as:

  1. Payment processing and transaction services
  2. Customer support and communication platforms
  3. IT infrastructure, analytics, and security providers
  4. Marketing and advertising partners (where applicable)
  5. Cloud storage and data hosting providers
  6. IoT platform service providers who enable device connectivity, diagnostics, and software updates

Legal & Regulatory Compliance
We may disclose your Personal Data if required to:

  1. Comply with applicable laws, regulations, or legal processes (including government and law enforcement requests)
  2. Respond to court orders, notices, or regulatory authorities
  3. Protect our legal rights, privacy, safety, or property (including fraud prevention and cybersecurity measures)

Business Transactions
In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of the business transaction, subject to appropriate privacy safeguards.

Fraud Prevention & Security
We may share Personal Data with government agencies, financial institutions, or fraud prevention organizations to:

  1. Detect, investigate, and prevent fraud, cyber threats, or security breaches
  2. Ensure compliance with anti-money laundering (AML) and other regulatory requirements

International Data Transfers
If we transfer your Personal Data outside India, we ensure that such transfers comply with applicable laws and are subject to adequate safeguards, such as:

  1. Contractual Clauses wherever applicable with the recipient ensuring data protection
  2. Government-approved mechanisms for secure international data transfers
  3. Transfers to jurisdictions not explicitly restricted by the Government of India

6. Accuracy of Personal Data

You are responsible for ensuring that the Personal Data you provide to SUJÁN is accurate, complete, and up to date.

  • SUJÁN takes reasonable steps to verify and maintain the accuracy of your personal data. To ensure the information we hold is current and accurate, we may periodically request updates where necessary. However, it is your responsibility to promptly inform us of any changes to your personal data, including contact details or preferences. This collaborative effort helps us provide you with uninterrupted services and remain compliant with the Digital Personal Data Protection Act, 2023.

If you believe any personal data we hold is inaccurate or incomplete, you may exercise your right to request corrections as outlined in the in Contact Us section of this Privacy Notice.

7. Security measures

We implement appropriate technical, organizational, and security measures to protect your Personal Data from unauthorized access, loss, misuse, disclosure, or alteration.

While we take reasonable steps to protect your data.

These safeguards may include encryption, obfuscation, masking, virtual tokenisation, access controls, logging, monitoring, review of access, backup and resilience measures, incident response processes, contractual safeguards with processors, and other appropriate technical and organisational measures.

No system can be guaranteed to be completely secure. If a personal data breach occurs, we will notify affected Data Principals and the Data Protection Board of India in accordance with applicable law.

8. Data Breach Notification

If we become aware of a personal data breach, we will notify affected Data Principals in a concise, clear and plain manner without delay through their registered communication channel or user account, where applicable.

We will notify the Data Protection Board of India without delay and provide the detailed information required by applicable law within the prescribed timeline, including the nature, extent, timing and likely impact of the breach, mitigation actions and remedial measures.

In case you as a user detect or suspect any breach of your data you can inform to us by reaching out to privacy@theSUJÁNlife.com.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyse website traffic, and personalize content. IoT devices may also use embedded tracking mechanisms to optimize functionality, detect malfunctions, and enhance security.

You can manage cookie preferences through your browser settings or our Cookie Preference Centre.

For more details, refer to our Cookie Policy.

10. Retention of Personal Data

SUJÁN will retain your personal data in accordance with its Data Retention Policy and as required under applicable laws. We will only store your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required for compliance with legal, tax, regulatory, or contractual obligations.

11. Data Principal Rights and Duties

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you, as a Data Principal, have the following rights concerning your Personal Data:

Your Rights

  1. Right to Access: You have the right to request a summary of the personal data that SUJÁN holds about you.
  2. Right to Correction and Erasure: You may request correction, completion, or erasure of your personal data if it is inaccurate or no longer necessary for processing.
  3. Right to Grievance Redressal: If you believe your personal data is processed unlawfully or in violation of this Privacy Notice, you may file a grievance with SUJÁN’s DPO/Grievance Officer, and we shall aim to resolve your grievance within a period of ninety (90) days. If unsatisfied with the resolution, you may escalate the matter to the Data Protection Board (DPB).
  4. Right to Nominate: You have the right to nominate an individual who can exercise your rights under the Act in the event of your death or incapacity.
  5. Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time. However, withdrawal will not affect the lawfulness of processing conducted before withdrawal.
  6. Right to Be Informed: You have the right to receive clear, concise, and transparent information about how your personal data is collected and processed.

Your Duties

As a Data Principal, you also have certain duties under the DPDPA, 2023:

  • Provide accurate information: Ensure that any personal data you provide to SUJÁN is accurate and up to date.
  • Refrain from filing false or frivolous complaints: Misuse of rights under this Act may attract penalties as per applicable law.
  • Comply with lawful processing: You must not attempt to access or modify personal data that you are not authorized to process.

Method to Exercise Your Rights

As an interim measure, if you wish to exercise any of your rights under this Privacy Notice, please contact us directly at privacy@theSUJÁNlife.com. We will provide you with the appropriate Data Principal Request Forms, which you can complete and submit to initiate your request.

We are currently working to streamline this process. Once available, you will be able to directly access all necessary forms online and submit your requests electronically.

In the future, to exercise your rights, you may complete the Data Principal Request Form available at to be updated once the DPB is established and submit it to our Data Protection Officer at privacy@theSUJÁNlife.com. We will handle your request in accordance with applicable laws and respond within the prescribed timeframe within ninety days.

12. Grievance Redressal

If you have any concerns regarding the processing of your personal data and you are not satisfied with the initial response, you can file a complaint with SUJÁN’s Grievance Officer.

Contact Details of Grievance Officer:
Email: privacy@theSUJÁNlife.com

Escalation to the Data Protection Board (DPB)
If you are not satisfied with the resolution provided by the Grievance Officer, you have the right to escalate the matter to the Data Protection Board (DPB) of India, which is the regulatory authority established under the DPDPA, 2023 for handling data protection disputes and violations.

For more details on the DPB and how to escalate your complaint, please refer to the official government portal.

13. Updates to this Notice

SUJÁN may update this Privacy Notice periodically to reflect changes in legal, regulatory, or operational requirements. We will notify you of any significant changes through appropriate means, such as updates on our website. The latest version of this Privacy Notice will always be available at Website

14. Acknowledgment

  1. You acknowledge that you have received, read, and understood this Privacy Notice.
  2. You understand that this notice informs you of how SUJÁN processes my personal data, and where required, my consent will be sought separately for certain processing activities.
  3. You understand that you have the right to withdraw your consent for non-essential processing at any time by submitting a request to the Data Protection Officer at privacy@theSUJÁNlife.com