Privacy Policy

Luminous Beach Resorts, of House No. 1057/A, Madhlawada, Near Milagres Church, Morjim, Pernem, North Goa 403512, India, operator of WENZET Cottages by Luminous Beach Resorts, is the data fiduciary for the personal data described here. We handle it in line with India's Digital Personal Data Protection Act, 2023 and the rules made under it. You can reach us about anything on this page at info@wenzet.com.

Stayora Holidays, who manage the property for us, process the same data on our behalf and under our instructions.

When you request a booking on this website, you give us:

• your name, email address and telephone number;
• your travel dates, the cottage category, the number of cottages, the number of guests, any meals you add;
• anything you choose to type into the notes field — please do not put health details, or any other sensitive information, in there.

Our server also records, alongside that request, the date and time, your IP address and your browser's user-agent string. We keep those three because they are how we evidence who made a booking, and how we investigate fraudulent or automated bookings and payment disputes. They are not used to profile you or to advertise to you.

When you pay, you do so on PhonePe's pages. We receive from PhonePe only the outcome: whether the payment succeeded, the amount, the payment method type (for example UPI or card) and PhonePe's transaction reference. We never receive or store your card number, UPI PIN or bank credentials.

If you stay with us, we additionally hold:

• the identity details the law requires us to enter in the guest register for every adult guest, and passport and visa details for guests who are not Indian nationals, which we are obliged to report to the immigration authorities on Form C;
• your billing details and what you spent, on the GST invoice we raise at the desk;
• the record of your booking as it changed — confirmed, checked in, cancelled — with who changed it and when.

If you write to us or message us on WhatsApp, we keep that correspondence so we can answer you and so we have a record of what was agreed.

• To answer your enquiry, hold your cottage, confirm your booking and give you the stay you booked — without this data we cannot do any of it.
• To contact you about your booking: the confirmation, a change of plan, an arrival detail. These are service messages, not marketing.
• To comply with the law: the guest register, Form C for foreign nationals, GST invoicing and the retention of accounting records.
• To protect the booking system and to defend a dispute or a chargeback, including by producing the record of what was requested and agreed.

We do not sell your data, we do not rent it, and we do not send you marketing email unless you have asked us to — in which case every message carries a way to stop.

• Our email provider, Brevo, which delivers the confirmation and desk notifications sent from wenzet.com.
• Our payment gateway, PhonePe (PhonePe Limited), which processes your payment. We pass it the amount, your booking reference, your name and your telephone number; what you enter on its pages is governed by PhonePe's own privacy policy.
• Our hosting provider, which operates the server this website and its database run on. The database is in our own control and is not shared.
• Stayora Holidays, as managers of the property, and the reception team who need it to receive you.
• Our accountants and auditors, for the tax records.
• The police, the immigration authorities, the tax authorities or a court, where we are legally obliged to provide it.

Two things on this website are loaded from third parties and therefore see your IP address and browser when a page renders: the Google Maps embed on the location section, and photographs served from Unsplash. Neither is given your booking details. Their own privacy terms apply to what they log. When you choose to pay, your browser is sent to PhonePe's own website, which sees your IP address and browser as any site you visit does.

We do not transfer your data outside India except insofar as those service providers operate internationally; where that happens we rely on their contractual commitments and on the transfers being permitted under Indian law.

This website sets no advertising cookies, no analytics cookies and no tracking pixels. There is no Google Analytics, no advertising tag and no cross-site tracker anywhere on it, which is why you are not asked to consent to any. The only credentials we store are for our own staff areas, and they are not set on any page a guest sees.

Your browser may still cache images and video from this site, and the two third-party embeds named above may set their own cookies in your browser when they load. You can block those in your browser settings; the map may then not display.

• An enquiry that does not become a booking: up to twelve months, then deleted.
• A booking, its invoice and its accounting records: at least eight years from the end of the financial year of your stay, which is what tax law requires of us.
• The guest register and the details reported under Form C: for as long as the applicable police and immigration rules require.
• Anything subject to a live dispute, chargeback or legal claim: until it is finally resolved.

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• tell you what personal data of yours we hold and who we have shared it with;
• correct or complete anything that is wrong or out of date;
• erase data we no longer need — we will do so except where the law requires us to keep it, as with invoices and the guest register;
• withdraw a consent you have given us, such as consent to marketing, which we will action without affecting the lawfulness of what was done before.

Write to info@wenzet.com with enough detail for us to find your record — your WZ reference, if you have one. We may need to verify who you are before we act, and we will respond within 30 days. You may nominate someone to exercise these rights on your behalf if you are unable to.

If you are not satisfied with how we have handled your request, you may escalate it to the Data Protection Board of India.

We do not knowingly take a booking from anyone under 18, and this website is not directed at children. Where children stay with us, their details are given to us by the adult making the booking. If you believe a child has given us data directly, tell us at info@wenzet.com and we will delete it.

This website is served only over an encrypted connection. The booking database is not reachable from the internet, our staff and desk areas are behind separate credentials, and access is limited to the people who need it to do their work. No system is perfect: if a breach ever affects your data, we will notify you and the Data Protection Board as the law requires.

This is version wenzet-policy-v2, effective 24 September 2026 and last updated 24 September 2026. When we change it we publish the new version on this page and change the date; where a change materially affects you, we will tell you directly. Your booking is governed by the version in force when you made it.

Luminous Beach Resorts, operator of WENZET Cottages by Luminous Beach Resorts — House No. 1057/A, Madhlawada, Near Milagres Church, Morjim, Pernem, North Goa 403512, India.

For anything about your personal data, or to exercise a right above, write to or call the reservations desk: info@wenzet.com · +91 89561 91749 / +91 77700 90702.

We acknowledge every written query and aim to resolve it within 30 days of receiving it. The property is managed by Stayora Holidays, who may answer on our behalf.