Privacy Policy

We collect information you provide directly (account details, Booking/Order details, support messages, reviews) and information generated by using the Platform (booking history, device/technical information). We do not collect more than is needed to operate the marketplace described below.

When you create an account, we store your email address and, if you provide them, your name and phone number. Your password is handled by our authentication provider and is never visible to Wellnest Baystaff in plain text.

When you make a Booking, we store the Listing, dates, guest count, room count, the price breakdown shown to you, and any promo code applied. This information is shared with the relevant Vendor so they can fulfill your Booking, and is retained as part of your Booking history.

When you place a product Order, we store the item(s), quantity, shipping-relevant contact details, and the price breakdown shown to you. This information is shared with the selling Vendor so they can fulfill and ship your Order.

Payments are processed by Razorpay. Wellnest Bay receives confirmation that a payment succeeded or failed, and a reference identifier, but does not receive or store your full card number, UPI credentials, or bank account details — those are handled entirely within Razorpay's own systems.

When you contact support or open a support case, we store the message you send, any reply from our team, and (if you're signed in) the association with your account, so the conversation can be tracked and followed up on.

A review you submit is associated with your account (to verify it comes from a real completed Booking or Order) and, once approved, is displayed publicly alongside a name derived from your profile — never your raw email address.

Like most web applications, our servers automatically log basic technical information (IP address, browser type, pages visited, timestamps) for security, fraud prevention, and diagnosing problems with the Platform.

• To create and maintain your account.
• To process and fulfill Bookings and Orders, including sharing necessary details with the relevant Partner.
• To process payments and refunds through Razorpay.
• To respond to support requests.
• To moderate and display reviews.
• To maintain the security and integrity of the Platform.

We share information with independent Vendors only as needed to fulfill a Booking or Order you've made with them, and with our payment processor (Razorpay) to process payments and refunds. Legal review requiredA complete list of technical infrastructure subprocessors (hosting, database, and similar providers) will be finalized and disclosed here as part of legal review.

Razorpay processes all payments on the Platform and is itself responsible, under its own privacy policy, for any payment data it collects directly from you during checkout.

We apply reasonable technical and organizational measures to protect your information, including role-based access controls that limit which staff can view which data, and audit logging of sensitive administrative actions. No online service can guarantee absolute security.

We retain Booking, Order, and payment records for as long as needed to resolve disputes, meet accounting and tax obligations, and comply with applicable law. Legal review requiredExact retention periods per data category will be confirmed during legal review.

You can request a correction to your account information, or ask what information we hold about you, by contacting us through our Contact page. If you have an account, you can also request an export or deletion of your data at Account → Privacy. Legal review requiredThe formal process and response timeline for access/erasure requests will be confirmed during legal review.

We use a small number of first-party cookies, and one optional analytics service. Strictly necessary cookies are always on; analytics cookies are set only if you choose “Accept all” or switch Analytics on. Rejecting non-essential cookies is as easy as accepting them, and the site works the same either way. We do not use advertising or marketing cookies.

Changing your choice. Use Cookie settings (also in the site footer) at any time. If you withdraw analytics consent we stop sending data and delete the analytics cookies from your browser. When you make a choice we keep a record of it (your choice, the time, the policy version, the random identifier from wb_consent and, if you are signed in, your account) as evidence that we respected it. We will ask again if this policy changes materially (current version: 2026-10-10).

Page counts. To show partners how many people looked at a listing, we add one to a daily counter for that listing when its page is opened. The counter holds no cookie, no identifier, no IP address and no information about you; your browser only remembers locally that it already counted that page today.

Razorpay's checkout may set its own cookies while you pay; those are governed by Razorpay's privacy policy.

The Platform is not directed to children under 18, and we do not knowingly collect information from anyone under that age.

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision.

Questions about this Privacy Policy can be sent through our Contact page. Legal review requiredA dedicated privacy/grievance officer contact address will be added here once confirmed.