Privacy policy

illa By the Sea is a five-room bed and breakfast in Udupi, operated by Sri Ram Agencies, GSTIN 29AGZPS7598G1ZZ, at Thottam, Badanidiyur, Udupi, Karnataka 576115, India.

Email info@illabythesea.com for anything on this page.

• The name, email address and phone number of the lead guest.
• Your arrival and departure dates, and the rooms chosen.
• The number of guests, as a count.

Booking online asks for nothing about the other members of the party. We use these details to hold the rooms, take payment, confirm the booking and contact you about the stay.

On arrival our caretaker records the details of every guest staying at the property, including children, and takes a photocopy of government-issued photographic identification. For foreign nationals this includes passport and visa details, which are reported to the authorities as required of accommodation providers in India.

These records are kept at the property and in our own records. They are used for guest registration and for the reporting obligations above, and are not used for marketing.

Payments are handled by Razorpay. You enter your card, UPI or bank credentials on Razorpay's own secure page, so your full card number, CVV and PINs never reach us.

What Razorpay sends back to us is more limited, and can include the payment method used and partial details such as the last four digits of a card or a UPI ID. We keep the payment reference, the amount, whether the payment succeeded and the fee charged. We do not store card numbers or UPI IDs.

• Google Analytics, which records the pages viewed, an approximate location derived from your network address, and the device and browser used.
• The Meta Pixel, which tells Meta that a visit took place and helps it recognise visitors who have a Facebook or Instagram account.
• A record of how you arrived, including any advertising click identifier in the link you followed and the site that referred you. It is kept for ninety days.
• Page view counts collected by our hosting provider without cookies and without identifying you.

Pages that embed content from elsewhere, such as the Instagram feed, the guest reviews and the map, load that content directly from those services, which can therefore see that your browser requested it.

When a booking is confirmed we report the sale so that we can tell which advertising produced it. We send a reference for the booking, the amount, the currency, and a one-way scrambled form of your email address and phone number that allows Meta to match the sale to an existing account without receiving the address itself.

We do not send the dates of your stay, the rooms booked, the number of guests or anyone's name.

• A confirmation when your booking is paid for, and anything else we need to tell you about that stay.
• If you enter your details at checkout but do not pay, one reminder about an hour later. One only, and never again for the same checkout.

We do not send marketing email, and we do not sell or rent your details.

We use a small number of service providers to run the business. Each receives only what it needs for its part.

• Razorpay, to take and refund payments.
• A reservation management service, which holds the booking and keeps our availability consistent across the sites we list on.
• Hosting and database services, which store our records. Our database is hosted on servers in Japan, so your booking record is stored outside India.
• An email delivery service, which sends the messages described above.
• Google and Meta, for the measurement and advertising described above.

• A booking cookie, set when you begin a booking, which keeps your dates and chosen rooms with you between pages. The site cannot take a booking without it.
• A cookie recording your choice about analytics and advertising, so that we do not ask again.
• The ninety-day record of how you arrived, described above.
• Cookies set by Google Analytics and by the Meta Pixel.

Use the Cookie preferences link at the foot of any page to allow or decline analytics and advertising, and to change your mind later.

If you decline, we do not set or read any analytics or advertising cookie, and the record of how you arrived is deleted.

Meta is then blocked entirely. The Meta Pixel is not loaded, and we do not report your booking to Meta from our systems either.

Google is limited rather than blocked. The Google tag still loads and sends cookieless signals, which can include that a page was viewed or a booking was completed, together with information such as the time, the referring site, your browser, device and network address. No cookie is set or read and no advertising identifier is sent. Google uses this for statistical estimates rather than to recognise you.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked before any cookie is set, and advertising measurement stays off until they agree. The cookieless signals described above may still be sent before and after that choice.

Declining does not affect your booking. We still hold the records needed to provide the stay and to meet our accounting and tax obligations.

• Booking, payment and guest registration records, for as long as we need them for the stay and to meet our accounting, tax and reporting obligations.
• The record of how you arrived at the site, ninety days.
• Analytics data, for the retention period set on our Google Analytics property.

We do not keep personal information for longer than we need it.

Write to info@illabythesea.com to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, or to withdraw a permission you have given. We may not be able to delete records we are required to keep, and we will say so if that applies.

Tharanath Shetty is the grievance contact for Sri Ram Agencies and can be reached at info@illabythesea.com. Write with any concern about how your information is handled and you will get a reply from a person.

If we change how any of this works we will update this page and the date above. Where a change requires your permission, we will ask again.