Last updated: 10 May 2026
This Privacy Policy describes how Vythiri Park, operated by V Sharp Promoters Pvt Ltd ("we", "us", "the Park"), collects, uses, stores, and shares your information when you visit our websites at vythiripark.com or bookings.vythiripark.com, book a ticket, or visit the Park in person. This policy is published in accordance with the Digital Personal Data Protection Act 2023 (DPDP) and the Information Technology Act 2000.
1. What information we collect
Information you provide
- Your name, email address, and mobile number (required to issue your e-ticket)
- Your city and state (for invoicing and statistical purposes)
- Number of visitors per ticket category (adults, kids, senior citizens, infants/PwD)
- Your visit date and chosen ride package
- Any special requests you voluntarily add to the booking
Payment information
Card numbers, UPI IDs, net-banking credentials, and similar payment data are processed directly by our payment gateway CCAvenue on their own secure infrastructure. We never see or store your full card or payment credentials. We only receive a transaction reference and the success/failure status.
Automatically collected
- IP address, browser, device type, operating system, and language preference
- Pages viewed, timestamps, referring URLs (for analytics)
- Cookies and similar tracking technologies (see Section 5)
2. Purposes for which we use your information
- Fulfilling your booking — issuing e-tickets, sending confirmation emails, allowing entry at the gate
- Contacting you about your booking — payment follow-ups, schedule changes, refunds, recovery if you didn't complete checkout
- Customer support — answering questions before, during, and after your visit
- Improving our service — aggregate analytics, identifying drop-off in the booking flow, fixing bugs
- Fraud prevention & security — verifying card-not-present transactions, detecting abusive bookings
- Legal compliance — tax invoicing under GST law, responding to court orders or government requests
We use your information for these purposes on the legal basis of (a) performance of contract (issuing your ticket), (b) your consent (where you provide optional info), and (c) our legitimate interests (security, support, service improvement).
3. When and how we share information
We do not sell your personal data to third parties for marketing. We share limited information only in these cases:
- Payment gateway (CCAvenue) — receives the order amount, your name, email, phone, and billing address to process the transaction
- Email and SMS providers — to send your booking confirmation and tickets
- Hosting and analytics providers — Cloudways (hosting), Cloudflare (DNS / CDN); they process data on our behalf under contractual safeguards
- Government or law enforcement — where legally compelled to disclose, such as a court order or tax authority demand
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same protections
4. Data retention
We retain your booking and contact information for as long as is reasonably necessary to support the purposes listed above, and to comply with our legal obligations (e.g. GST records must be kept for at least 6 years under Indian tax law). Specifically:
- Completed bookings: retained while you may need them for refund / dispute purposes (typically the financial year + 6 years for GST)
- Abandoned bookings (you started but didn't pay): automatically deleted after 30 days unless you complete the booking
- Marketing consent records: retained until you withdraw consent
- Analytics data: retained in aggregate, anonymised form
5. Cookies & tracking
We use minimal first-party cookies to keep your booking session active, remember a partially-filled form so you don't lose data on refresh, and prevent abuse. We do not use third-party advertising cookies or cross-site trackers on the booking platform. You can disable cookies in your browser settings, but doing so may prevent the booking form from functioning correctly.
6. Information security
We use industry-standard technical and organisational measures to protect your data, including TLS/HTTPS encryption, hashed admin passwords, restricted role-based access, and regular software updates. However, no transmission over the internet can be guaranteed to be 100% secure.
7. Your rights under DPDP
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or outdated information
- Erase your personal data, subject to our legal retention obligations
- Withdraw consent at any time (this will not affect lawful processing already carried out)
- Nominate a representative to act on your behalf if you are incapacitated
- File a complaint with the Data Protection Board of India if you believe your rights have been violated
To exercise any of these rights, email us at info@vythiripark.com with the subject line "Privacy Request". We will respond within 30 days.
8. Children's data
The booking platform is intended for use by adults. We do not knowingly collect personal data directly from children under 18. Where a booking is made for a minor, the booking adult (parent or guardian) is responsible for providing the minor's details and consenting on their behalf. If you believe we have collected information about a child without proper consent, please contact us immediately at info@vythiripark.com and we will delete it.
9. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in law or our practices. Material changes will be highlighted on this page with a revised "Last updated" date. For substantial changes that affect you directly, we may also notify you by email.
10. Grievance officer
Under the Information Technology Act 2000 and DPDP Act 2023, our Grievance Officer is:
Vythiri Park · Grievance Officer
Email: info@vythiripark.com
Address: Chelode, Vythiri, Wayanad 673576, Kerala, India