Last updated — 18 June 2025

Welcome to The Rishlist (“we,” “us,” “our”). We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Information you provide to us
  • Account & profile details – name, email address, password.
  • Booking information – travel dates, guest names, special requests.
  • Payments – billing address and partial card data (processed via secure payment gateways; we never store full card numbers).
  • Communications – emails, messages or reviews you send us.

1.2 Automatically collected data

  • Device & log data – IP address, browser type, operating system, referring pages, time-stamp.
  • Usage data – pages visited, clicks, search queries, time on site.
  • Cookies & similar technologies (see Section 4).

2. How We Use Your Information

  • To create and manage your account or bookings.
  • To list, operate and improve our villas, hotels, retreats & safari experiences.
  • To process payments and send booking confirmations/updates.
  • To respond to enquiries, support requests or feedback.
  • To send newsletters or marketing you have opted into (you can unsubscribe any time).
  • To analyse site performance and enhance user experience.
  • To detect fraud, enforce our terms, and comply with legal obligations.

3. Sharing & Disclosure

We never sell your personal data. We share it only:

  • With trusted service providers (hosting, payment, analytics, email) who process data on our behalf and under strict confidentiality agreements.
  • With property owners or on-ground partners solely to confirm and fulfil your booking.
  • If required by law, court order or to protect our rights, users or the public.
  • In connection with a business transfer, merger or acquisition, subject to the same privacy safeguards.

4. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in and remember your preferences.
  • Measure traffic and performance via tools such as Google Analytics.
  • Serve personalised content or promotions.

You can disable cookies in your browser, but the site may not work as intended.

5. Data Retention

We keep your information only as long as needed to provide services, meet legal requirements, resolve disputes, and enforce our agreements. When no longer required, data is securely deleted or anonymised.

6. Security

We use SSL encryption, access controls and industry-standard safeguards to protect your data. No online service is 100% secure, but we work continuously to keep your information safe.

7. Your Rights

You may have the right to access, correct, delete or restrict the personal data we hold about you. To exercise any of these rights, email info@therishlist.com. We will respond within the timeframe required by applicable law.

8. International Transfers

We are based in India but work with partners worldwide. When we transfer data internationally, we rely on GDPR-approved safeguards such as Standard Contractual Clauses.

9. Children’s Privacy

Our services are not directed at children under 13. We do not knowingly collect data from them. If you believe a child has provided personal information, please contact us and we will take appropriate action.

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with a new “Last updated” date. Continuing to use the site after an update means you accept the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please email us at info@therishlist.com.