Legal
Privacy Policy
How Shimla Cricket Ground collects, uses and protects your personal data when you browse the website, book a tour or buy match tickets.
On this page
Draft for client review. This page holds placeholder text written for the website build. It must be reviewed and approved by the client and its legal adviser before launch (launch checklist item 9).
Who we are
This website is operated by the organisation that runs Shimla Cricket Ground ("we", "us"). The legal entity name, registered address and GSTIN will be added here once confirmed by the client.
What we collect
Booking details: the lead guest's name, phone number and email address, the party size and any special requests.
Account details, if you create an account: your name, email address, phone number and password (stored only as a secure hash).
Payment records: amounts, status and the payment gateway's reference numbers. Card and bank details are entered on the payment gateway's own page and never reach our servers.
Newsletter and reminder sign-ups: your email address and the time, IP address and browser of your consent.
Contact form messages: your name, email address, optional phone number and your message.
Technical data: essential cookies and server logs needed to run the website securely.
Why we use it
To take, confirm and manage your bookings, issue tax invoices and admit you at the gate.
To send the emails you ask for: confirmations, passes, reminders, weather notices and replies to enquiries.
To send newsletters only after you confirm your subscription; every newsletter has a one-click unsubscribe link.
To meet our legal, tax and accounting obligations and to keep the website secure.
Who we share it with
We share personal data only with the service providers needed to run the service (payment gateway, email delivery and hosting) and with authorities where the law requires it. We do not sell personal data.
How long we keep it
Booking and invoice records are kept for the period required by Indian tax law. Unconfirmed newsletter and reminder sign-ups are deleted automatically. Other data is kept only as long as it is needed for the purpose it was collected for.
Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data and you may withdraw consent at any time. Use the contact page to make a request.
Changes to this policy
We will update this page when our practices change. The date at the top shows when it was last updated.