This Privacy Policy explains how Gujral Hotels Private Limited (CIN U55101MP1991PTC006272, GSTIN 23AAACG8410B1ZC; registered office: Hotel Rishi Regency, Opp SBI, Civil Lines, Jabalpur, Madhya Pradesh 482001), which owns and operates Armania (“Armania”, “we”, “us” or “our”), collects, uses, shares, stores and protects your personal data when you visit our restaurant at Rooftop, Hotel Rishi Regency, Opp SBI, Civil Lines, Jabalpur, Madhya Pradesh 482001, India, use this website (www.armaniapub.com), join our loyalty programme, or receive messages from us on WhatsApp, SMS or other channels.
We process digital personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, the Information Technology Act, 2000 and its rules, and other applicable Indian laws. For the purposes of the DPDP Act, Gujral Hotels Private Limited is the Data Fiduciary for the personal data described here.
1. Personal data we collect
We collect only the personal data we need for the purposes described in this policy:
- Contact details: your name, mobile number and, if you give it, your email address, for example when you reserve a table, place an order, settle a bill, join our loyalty programme or contact us.
- Optional profile details: such as your date of birth or anniversary, if you choose to share them with us to receive occasion-based offers.
- Visit and transaction details: the date and value of your bills, items ordered, mode of payment (not full card details), loyalty points earned and redeemed, and feedback you give us, including on feedback forms.
- Communication records: messages you send us by phone, email, WhatsApp or SMS, and whether you have opted in to or out of marketing messages.
- Reservation details: the number of guests, date, time and any special requests, including dietary or allergy information you choose to tell us so we can serve you safely.
- Website data: basic technical information that our hosting provider logs automatically, such as IP address, browser type and pages requested, for security and to keep the site working.
We do not ask for sensitive information such as financial account passwords, health records or government ID numbers through this website. Card and UPI payments made at the restaurant are processed by banks and payment service providers; we do not store your full card number.
2. How we use your personal data
- To take and manage table reservations and orders, and to serve you at the restaurant.
- To generate bills and invoices and to meet our tax, accounting and legal obligations, including under GST law.
- To run our tier-based loyalty programme: recording purchases, crediting and redeeming reward points, and telling you your points balance.
- To send you service messages, such as reservation confirmations, digital bills, loyalty point updates and feedback requests.
- To send you promotional messages about our food, events, offers and loyalty rewards on WhatsApp, SMS or email, only where you have given consent.
- To respond to your questions, feedback and complaints.
- To keep our premises, guests, staff and systems safe and secure, and to prevent fraud or misuse.
- To comply with law, court orders and lawful requests from government authorities.
We do not sell your personal data, and we do not use it for any purpose that is not compatible with the purposes above.
3. Consent and legal basis
We process your personal data on the basis of your consent, or for legitimate uses permitted under Section 7 of the DPDP Act, such as where you voluntarily provide your details for a specific purpose (for example, sharing your mobile number to receive a digital bill), or where processing is needed to comply with law.
When we ask for your consent, we will tell you what data we are collecting and why. Your consent is free, specific, informed and unambiguous, and you can withdraw it at any time as easily as you gave it (see Section 5). Withdrawing consent does not affect processing that took place before you withdrew it, and it will not affect your ability to dine with us.
4. WhatsApp and SMS marketing through our loyalty partners
We use trusted technology partners to manage billing, our loyalty programme and customer communications:
- Petpooja (point-of-sale and billing software), which records your bills and the mobile number you provide at billing.
- Reelo (customer loyalty and engagement platform, integrated with Petpooja), which maintains your loyalty profile and points and sends messages on our behalf.
- WhatsApp Business Platform, provided by Meta Platforms, used to deliver WhatsApp messages that appear as sent by Armania.
- Licensed SMS service providers and telecom operators, which deliver SMS using sender headers and message templates registered on the TRAI Distributed Ledger Technology (DLT) platform, as required by the Telecom Commercial Communications Customer Preference Regulations, 2018.
These partners act as our Data Processors. They process your data only on our instructions and for the purposes in this policy, and they are required to keep it secure and confidential. Their own privacy notices are available at reelo.io, petpooja.com and whatsapp.com.
What we send. With your consent, we may send you promotional messages about new dishes, food offers, events at Armania, birthday or anniversary offers, and loyalty rewards. We may also send service messages related to your visit, such as your bill, points balance or a feedback request.
How we get consent. We send promotional WhatsApp messages only to guests who have opted in, for example by ticking or confirming consent at billing or on a loyalty sign-up form, by scanning our loyalty QR code and agreeing, or by messaging us first and asking to receive offers. We keep a record of your opt-in. We do not buy contact lists.
How often. We aim to keep promotional messages relevant and infrequent. Message and data charges from your mobile operator may apply.
5. How to opt out or withdraw consent
You can stop promotional messages at any time, free of charge, using any of these methods:
- WhatsApp: reply STOP to any promotional message from Armania, or use the opt-out button or link included in the message. You can also block the business in WhatsApp.
- SMS: follow the opt-out instructions in the message, or register your preferences under the National Customer Preference Register (DND) through your telecom operator by sending START 0 to 1909 or using your operator’s app.
- Email or phone: write to armania@gujralhotels.com or call +91 9190099999 and tell us the mobile number you want removed.
- In person: ask any member of our team at the restaurant.
We will act on your request promptly, and in any case within 7 working days. After you opt out, we may still send you essential service messages related to a transaction you have made (such as your bill), unless you ask us not to. You can also ask us to close your loyalty account and erase your data (see Section 9).
6. Who we share your data with
We share personal data only as needed for the purposes above:
- With our Data Processors, including Petpooja, Reelo, Meta (WhatsApp), SMS and email service providers, payment service providers, and our website hosting and IT providers.
- With our professional advisers, such as auditors and legal advisers, under duties of confidentiality.
- With government authorities, courts or law enforcement agencies where we are required to do so by law.
- With a successor entity if our business is reorganised, merged or transferred, subject to this policy.
We do not sell, rent or trade your personal data to anyone for their own marketing.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Bills, invoices and accounting records | For the period required under GST, income tax and company law (generally up to eight years), after which they are deleted or anonymised. |
| Loyalty profile and points history | While your loyalty account is active. If you do not visit or interact with us for 24 months, or you ask us to close your account, we delete or anonymise it within 90 days, except records we must keep by law. |
| Marketing consent and opt-out records | For as long as you remain subscribed, and for up to 3 years after you opt out, so we can prove consent and respect your opt-out. |
| Reservation details | Up to 12 months after your reservation date. |
| Feedback and complaints | Up to 3 years after the matter is resolved. |
| Website server logs | As retained by our hosting provider for security purposes, typically not more than 90 days. |
When personal data is no longer needed for the purpose it was collected for, and we are not required by law to keep it, we erase it and ask our Data Processors to do the same.
8. How we protect your data
We use reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These include access controls limited to staff who need the data, password protection on our systems, encrypted connections (HTTPS) for this website, and contractual obligations on our Data Processors. If a personal data breach occurs, we will inform the Data Protection Board of India and affected individuals as required under the DPDP Act and its rules.
9. Your rights
Under the DPDP Act, you have the right to:
- Access information about the personal data we hold about you, how we process it, and the Data Processors we have shared it with.
- Correct, complete or update inaccurate or incomplete personal data.
- Erase personal data that is no longer needed, unless we must keep it by law.
- Withdraw consent at any time, including for marketing messages.
- Grievance redressal, by contacting our Grievance Officer (see Section 13).
- Nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, email armania@gujralhotels.com with the subject “Privacy request”, and include your name and the mobile number linked to your visits or loyalty account. We may need to verify your identity before acting on your request. We will respond within the time limits set by law, and in any case within 30 days.
10. Children
Our loyalty programme and marketing messages are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age without verifiable consent from a parent or lawful guardian, and we do not send promotional messages to children or track them. If you believe a child has given us personal data, please contact us and we will delete it.
11. Website, cookies and third-party links
This website is a simple information site. It does not use advertising or analytics cookies and does not track you across other websites. Our hosting provider may log technical data for security, as described above. The contact page shows an embedded Google Maps view, which is provided by Google and is subject to Google’s own privacy policy.
Our website links to third-party sites such as Instagram, Google Maps and Hotel Rishi Regency. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.
12. Where your data is stored
Your personal data is primarily stored and processed in India. Some of our service providers, such as Meta for WhatsApp messaging, may process data on servers outside India. Any such transfer is made in compliance with the DPDP Act and any restrictions notified by the Government of India.
13. Grievance Officer and contact
If you have any question, concern or complaint about how we handle your personal data, or you want to exercise your rights, please contact our Grievance Officer:
Grievance Officer: Indraneel GujralGujral Hotels Private Limited (Armania)
Registered office: Hotel Rishi Regency, Opp SBI, Civil Lines, Jabalpur, Madhya Pradesh 482001, India
Email: armania@gujralhotels.com
Phone: +91 9190099999 (12 noon to 11:30 pm)
We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India in the manner prescribed under the DPDP Act, after first exhausting the grievance redressal process with us.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law or in how we operate. The updated version will be posted on this page with a new “Last updated” date. If the changes are significant, we will take reasonable steps to tell you, for example through a notice on this website or at the restaurant.
See also our Terms of Use and Refund Policy.