Privacy Policy

We collect information you provide directly to us, including:

• Account registration data: name, phone number, email address, and password hash
• Booking data: check-in and check-out dates, number of guests, room selections, and payment method
• Payment information: we do not store card numbers; payments are processed by Stripe and our local payment partner under their own PCI-DSS compliance
• Communications: messages you send to our support team or through the contact form
• Profile updates: avatar, address, and bank account details (property owners only)

We also automatically collect certain technical information when you use our platform: IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is collected via server logs and standard web analytics tools.

We use the information we collect to:

• Create and manage your account and authenticate your identity
• Process hotel & resort reservations, handle payments, and send booking confirmations
• Send transactional emails and SMS messages related to your bookings
• Provide customer support and respond to inquiries
• Send promotional communications (you may opt out at any time)
• Detect, investigate, and prevent fraud and abuse
• Improve our platform, personalise content, and conduct analytics
• Comply with legal obligations in Bangladesh

We do not sell your personal data. We share your information only in the following circumstances:

• With hotels or resorts you book: your name, phone number, and booking details are shared with the property to fulfil your reservation
• With payment processors (Stripe and our local payment partner) to process transactions
• With cloud infrastructure providers (hosting, email, object storage) under strict data processing agreements
• With law enforcement or regulators when required by Bangladeshi law
• In connection with a merger, acquisition, or sale of assets, with appropriate notice to you

We retain your account information for as long as your account is active. Booking records are retained for seven years for accounting and legal compliance purposes. You may request deletion of your account at any time; we will anonymise or delete your personal data within 30 days, except where retention is required by law.

We implement industry-standard security measures including TLS-encrypted data transmission, bcrypt password hashing, and role-based access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we are committed to protecting your data and will notify you promptly in the event of a breach that affects your personal information.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to processing of your data for direct marketing
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected].

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage. See our Cookie Policy for full details.

Our platform may contain links to third-party websites (hotel and resort websites, payment gateways, social media). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

Resortian is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the platform at least 14 days before the change takes effect. Your continued use of Resortian after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact our Data Protection team at [email protected] or write to us at: Resortian Ltd, Level 5, 42 Gulshan Avenue, Dhaka 1212, Bangladesh.