Privacy Policy

Welcome to Tentasy!

This is the Tentasy Privacy Policy (‘policy’) which applies to the website, services, and all business operations and functionalities provided by ABC Outdoor Ventures Private Limited of No. 35, 3^rd Cross Road, Vannerpet Officers Colony, Victoria Layout, Bengaluru, Karnataka – 560047.*

When you use or interact with Tentasy’s website, application, and other offerings from Tentasy (‘Tentasy Platform’) or its subsidiaries or affiliates as the case may be, we and third parties may obtain certain information about you. We understand the importance of our users’ privacy and wish our users’ experience to be as comfortable and enjoyable as possible. This Privacy Policy, therefore, explains how ABC Outdoor Ventures Private Limited – trading under the name of Tentasy – handles, secures, and uses the personal data that we collect from our users and visitors.

The purpose of this policy is to ensure that our users and visitors are always aware of the type of information that we collect, the manner in which we collect, use, and secure any personal data that we have collected from you or from third parties in the context of our business activities, including, without limitation, any marketing events or surveys that we may hold, and under what circumstances we may disclose such information. It also informs you about your privacy rights and how and under what circumstances you make seek protection of the law.

We assure our users that we shall act responsibly while handling your personal data and take all possible measures to ensure its security. All data is held securely and will be treated with confidentiality and sensitivity to enable us to provide better services to our users. We aim to always be clear about how and why we collect your personal information, and assure you that we will not use the information for anything that you would not reasonably expect.

This policy supplements the Terms of Use of Tentasy and Tentasy’s Cookie Policy and is applicable to all services provided by ABC Outdoor Ventures Private Limited and includes all its subsidiaries and affiliates (‘Tentasy’). Note that this Privacy Policy should be read together with our Terms of Use and the Cookie Policy and any terms herein shall inherit any definition defined therein and vice versa.

Note that only persons who can enter into legally binding contracts in accordance with the Indian Contracts Act of 1872 can use this website and access its services. Persons who are ‘incompetent to contract’ as under the Act, including without limitation, minors, undischarged insolvents, and persons of unsound mind are not eligible to use the website and/or access the services. Therefore, Tentasy will not intentionally collect information about such persons and our website and communications are not extended to such persons.Tentasy will not intentionally collect information from/on/about such persons and  is not liable on any information entered by such persons defined above and its use for the purpose if the site.

WHO WE ARE

Tentasy is the trading name of ABC Outdoor Ventures Private Limited (registered in the Republic of India with the registration number: U55101KA2021PTC154704). Tentasy is a company engaged in urban tourism and provides its clientele with traditional cottage, homestays, nature, and premium spots (including urban and farm sites) for pitching tents and camping.

BASIS FOR PROCESSING YOUR DATA; TENTASY’S RESPONSIBILITIES

To undertake our business activities, it is necessary for us to process and store personal information concerning our visitors and users, and the services used by them. These activities – described as ‘legitimate interests’ – include, without limitation:

1. Preventing risk and fraud.
2. Communicating with our users and visitors.
3. Providing necessary services and information to users and visitors.
4. Answering queries and/or providing other types of support.
5. Improving our services by seeking feedback from users.
6. Informing users of new services and other features.
7. Assisting with marketing, advertising, or other communications.
8. Providing reporting and analytics.
9. Testing out features and additional services.
10. Enabling Tentasy to meet its strategic, business, and operational goals.

We may pursue these legitimate interests by contacting you via telephone, email, post, text, or social media. Note that we only process personal information for these legitimate interests after considering the potential risks, if any, to your privacy. We do so by ensuring transparency about our privacy practices, enabling you to control your personal information where appropriate, limiting the information that we retain, limiting our use of your information, and ensuring the best technical measures to safeguard your information. Information about how you can manage the ways that we may contact you, including how to opt out from some or all contact from Tentasy is outlined in the ‘Use of Information’ section below.

While Tentasy mainly relies on the aforementioned legitimate interests to be the legal basis for processing and storing your personal data, this is not overridden by the interests and rights or freedoms of the data subjects i.e., the users concerned. Tentasy recognises that this not the only lawful ground for processing your data and as such, where appropriate, Tentasy will, at times, process and/or store your personal data on an alternative basis such as your consent for us to do so.

THE DATA WE COLLECT AND HOW WE COLLECT IT

Type of Data Collected: We collect personal information about you when you use the Tentasy website. Without it, we may not be able to provide you with the services requested.

Personal information or personal data means any information about an individual that can aid in identification of such individual. It does not include data where the personal identifiers have been removed i.e., anonymous data. Personal data collected by Tentasy shall ordinarily include, without limitation:

1. Account, profile, and contact information such as first and last name, phone number, postal address, email address, date of birth, passport and visa details (if applicable), and other travel information which will depend on the features that you use and the kind of service you to intend to book.
2. Identity verification and payment information including images of government issued ID (as permitted by applicable laws), ID number, passport number, other verification information (as the case may be), bank account, and other payment account information.
3. Where you have registered with us, your username and password.
4. Where you have submitted and/or posted content, your submissions and posts.
5. Any correspondence between you and Tentasy (archived for future reference).

How is the Data Collected: A user can sign in or sign up to the site by creating their username and password or through a linked network i.e., Facebook or Google. If you elect to sign up through a linked network, we receive certain profile and account information about you from the linked network. These linked networks may also appear on your profile, thereby allowing other users to find you on these linked networks. The specific information provided to us by the linked networks is determined by these third parties and may vary by network. In all cases, the permission page of the linked network will describe the information being shared. (Note that users are responsible to review the privacy policies of the respective linked networks to understand their privacy practices.)

You may connect or disconnect your linked networks through the account settings tab in your profile settings, and you may access, amend, and delete much of your profile through your profile settings. Once you disconnect a linked network, we will not receive any information from the linked network going forward, unless you choose to reconnect it. You may also control whether the linked network is visible in your profile.

Tentasy may also collect non-personal information for statistical analysis on the use of our website. This may include, without limitation, information filled in a form, response to surveys, and participation in promotions.

We may also collect some or all of the above types of information from our subsidiaries and/or affiliates and third parties who have your consent to pass that information to us or who may be authorised by you to authenticate or identify you to us or sign in to our website using credentials from that subsidiary, affiliate or third party.

In addition to the foregoing, Tentasy may also automatically collect some information about your activities on our website. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information about your activities including, without limitation, your searches, page views, date and time of your visit, and other information about the use of our website. We may also collect and store information that your computer or mobile device provides to us concerning your use of our website including, without limitation, type of browser, browser language, IP address, and requested and referring URLs. We also receive information when you view content or otherwise interact with the website, even if you have not created an account. (For more information, please see our Cookie Policy.)

Note that while we may keep a record of any financial transactions for accounting purposes, any debit/credit card details are not recorded, nor ever seen by us, particularly in the case of an online payment being made. All such information is via our third-party transaction handler and we refer you to their own privacy policies.

ACCURACY OF INFORMATION; ACCESSING AND UPDATING YOUR INFORMATION

Tentasy will endeavour to keep and maintain its records, including it users’ records up to date and accurate. In pursuance of it, we welcome you to help us by updating your information whenever it changes. To access and modify your information, you can:

1. Email us for a copy of your stored details and/or inform us of any changes that need to be made.
2. Access and update your profile via the online profile interface.
3. Access and update your information via the linked profile (if applicable).

We will also require you to suitably identify yourself before accessing such information. Note that there are no charges for these services.

Tentasy reserves the right to refuse access to and/or the modification of your information in the following cases:

1. The request does not relate to the information belonging to the person making the request.
2. Identification produced is insufficient.
3. Denial of access or modification is required by law.
4. Providing access or modification would result in interference or obstruction of any legal proceedings or negotiations relating to the individual.
5. Providing access to the information or enabling modification would pose a threat to the life and health of an individual or individuals.
6. The information provided for modification is reasonably believed to be false.

Without foregoing the generality of the above, note that users always have the right to:

1. Be informed about how their data will be used by Tentasy (as stated in this Privacy Policy).
2. Access or request a copy of the data we hold about you.
3. Update, amend or rectify the data we hold about you.
4. Change your communication preferences at any time to restrict how we process your data or opt out of some or all communication from Tentasy.
5. Object or restrict the processing of your information for any purpose as outlined in this policy.
6. Ask us to completely remove your data from our records.

USE OF INFORMATION AND WITHDRAWING OF CONSENT

How is your Data Used: The information collected by Tentasy is ordinarily used for the normal operation and maintenance of our business activities as well as to provide quality services to all our users. The collected information is also used for internal billing and security verification of users. In addition, we may also use your data in a variety of ways including, without limitation:

1. The promotion of the relationship between Tentasy and its users for mutual benefit.
2. Eliciting non-financial support (ex: service reviews and customer feedback).
3. Corporate mailings (ex: e-newsletters, promotional offers’ communications).
4. Promoting the benefits and services available to users.
5. The performance of analytics, debugging, and research.
6. The personalization and customization of your search results based on your interaction with the Tentasy Platform, your search and booking history, your profile information and preferences, and other content you submit.

Tools may also be used to help us improve the effectiveness of Tentasy’s communications with you, including tracking whether the emails we send are opened and which links are clicked within a message. We monitor website visits and use tools such as Google Analytics to improve our website and services.

Opting Out and/or Withdrawing Consent: The aforementioned communications to you may be sent via post, telephone, email, text or social media, depending on the contact details we hold and the preferences expressed by you about the types of communication you wish to receive. You are, however, free to opt out from some or all contact from Tentasy by amending your preferences at any time, by making changes to your linked profile or writing in to the contact details provided in this policy.

Note that if you unsubscribe from any or all communication channels of Tentasy as aforementioned, we will update our records to stop further communication as quickly as we can. Please be aware that it can sometimes take a short while for the change to be fully implemented.

Note that withdrawing of your consent will not affect the lawfulness of processing of your information based on consent before its withdrawal nor the further processing of the same data under other legal basis such as contract or compliance with a legal obligation to which Tentasy may be subject to.

DISCLOSURE AND SHARING OF INFORMATION

Tentasy uses and shares the categories of information we collect from and about you consistent with the various business purposes outlined in this Privacy Policy. Tentasy does not sell or license personal information to third parties i.e., Tentasy will never give your email address or other personal details to a third party for the purpose of advertising or promotions, or as a part of any reciprocal arrangement.

Notwithstanding the above, Tentasy might need to share the information we collect about you to make our services run smoothly and to operate our business under the following circumstances:

1. Service Providers and Sub-processors: We may provide access to share your data with select third parties that use the information on our behalf to provide you or assisting in providing you with Tentasy’s services and/or features. These third parties include, without limitation, sales and marketing, provision of content and features, advertising, analytics, research, data storage, security, fraud protection, and other services.

In case data is shared with a third party (ex: for the purpose of analysis, updating or cloud storage), we always ensure that we have a data processing and non-disclosure agreement in place. This means that any third party is only able to use such information for specified purposes and must keep it secure.

1. Affiliates and Subsidiaries: We may share the information that we collect within the Tentasy family of companies to provide Tentasy’s services to you.
2. Business Transfers: If the ownership of all or substantially all of our business changes, or all or some of our assets are sold as part of a bankruptcy or other proceeding, we may transfer your information to the new owner so that the services can continue to operate. In such a case, your information would remain subject to the promises and commitments contained in this Privacy Policy until the acquiring party updates it. If such transfer is subject to additional mandatory restrictions under applicable laws or agreements, Tentasy will comply with those restrictions.
3. Compliance with Legal Obligations: Tentasy may share your information in order to comply with any valid legal subpoena, request or other lawful legal process. We will notify such individuals or users of such request unless we are prohibited from doing so by law or by a court order or there are exceptional circumstances such as an emergency involving the risk of bodily injury or death to a person or group of persons or potential harm to minors.
4. Public Forums: Our public forums make it possible for users to upload and share their reviews and comments publicly concerning Tentasy’s services with other users. Any information that you submit through such public forums is not confidential and Tentasy may use it for any purpose (including in testimonials or other Tentasy marketing materials). Any information that you post openly in these forums will be available to the public at large and potentially accessible through third party search engines. Such information can be read, collected and/or used by other users, and it could be used to send you unsolicited messages.

PROTECTION, STORAGE, AND DATA RETENTION

When you use Tentasy, all information about you will be stored in the Republic of India.

Tentasy will endeavour to take all technical and organizational measures to protect your information against unlawful or accidental destruction, loss, alteration, unauthorised access and/or unauthorised disclosure. For instance, all personal data is stored in a password protected database which is never accessible to the public or any non-authorised employee of Tentasy. Further, authentication information such as passwords are always encrypted. However, no method of transmission over the internet and no means of electronic or physical storage is absolutely secure and therefore, Tentasy cannot ensure or warrant the security of the information submitted to us. Nonetheless, we assure you that we are constantly updating and improving our safeguards to ensure better security of your information.

Tentasy maintains a record of all its users and therefore, maintains a record of the services availed in perpetuity. Other information, unless as instructed by you or unless a longer retention period is required by law or permitted by law, shall be reviewed according to Tentasy’s record retention schedule and deleted if the criteria for retention are no longer met.

LIABILITY DISCLAIMERS

Tentasy’s website may link or be linked from other websites on the internet. Unless such websites form a part of the Tentasy Platform, we shall not be liable for the actions of such websites and we advise you to read the privacy policies of such websites.

In case the Tentasy Platforms directs you to a secure server – for instance, while making an online payment – it is your responsibility to verify the authenticity of such website by checking the URL of the website. You should check to ensure that the website is secured by looking for the ‘padlock’ symbol or a URL beginning with ‘https://’. In case of any uncertainty, contact us before proceeding. Note that in case of uncertainty, should you proceed before or without contacting Tentasy, you shall do so at your own risk and will be liable for all consequences of such action.

We also do not accept any responsibility for any breach of privacy that might result from a user’s compromised computer system or security information where the breach did not occur as a result of an action or inaction on the part of Tentasy. This includes, without limitation, the case of a password being stolen and used to access the user’s profile or email account for purposes including sabotage and data theft.

DATA BREACH NOTIFICATION

While Tentasy shall act responsibly and undertake all possible measures while handling your personal data and information submitted to us, Tentasy shall notify all its users immediately in writing (and in any event within 48 hours) of any known or suspected data security breach incident.

Promptly after providing such notice, Tentasy shall investigate the cause of such data security breach, take all measures to eliminate or mitigate the exposure of users’ data, and keep its users informed of the status of the investigation.

Within 30 days of the discovery of the known or suspected data security breach incident, Tentasy shall develop and execute a plan which reduces the likelihood or recurrence of a future data security breach. The measures so taken shall be communicated to all users by updating or changing this Privacy Policy.

CHANGES TO THE POLICY

Due to future legislation, new company priorities or implementation of new data security measures, we may have to amend elements of this Privacy Policy. If this should happen, Tentasy will attempt to alert all users before any changes are brought into effect.

Notwithstanding the above, any changes to the Privacy Policy will be announced by updating the relevant section of this policy. All users are, therefore, advised to review this policy periodically for any changes.

CALIFORNIA RIGHTS

The California Consumer Privacy Act of 2018, as amended from time to time (‘CCPA’) requires specific disclosures for each category of personal information that we collect. Therefore, in addition to the aforementioned rights and information, California users and their authorised agents can request information about the types of information we collect or disclose about you, the categories of sources of such information, the business or commercial purpose for collecting your information, the categories of third parties we share or disclose your information, and the financial incentives that we offer to you (if any). For your convenience and so that you do not have to request it, we have included that information in this Privacy Policy.

INTERPRETATION OF THE POLICY

The headings used in this Privacy Policy are present solely for readability and are not to be used in the interpretation of any clause.

Neither this policy nor any uncertainty or ambiguity herein shall be construed against Tentasy, whether under any rule of construction or otherwise.

COMMENTS AND COMPLAINTS

Privacy is a crucial issue and it is important that Tentasy provide a policy that is reasonable, fair, and responsible. If for any reason, you feel the need to complain or comment about our privacy practices or policies, we encourage you to contact us using the details provided herein so that we may resolve the issue at the earliest.

RAZOR PAY POLICY

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

SECTION 2 – CONSENT

How do you get my consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.             

How do I withdraw my consent?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at info@tentasy.com or mailing us at: No 35, Third Cross, Victoria Layout, Bangalore 560047

SECTION 3 – DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SECTION 4 – PAYMENT

We use Razorpay for processing payments. We/Razorpay do not store your card data on their servers. The data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) when processing payment. Your purchase transaction data is only used as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is not saved.

Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read terms and conditions of razorpay on https://razorpay.com

SECTION 5 – THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 6 – SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

SECTION 7 – COOKIES

We use cookies to maintain session of your user. It is not used to personally identify you on other websites.

SECTION 8 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at info@tentasy.com or by mail at No 35, Third Cross, Victoria Layout, Bangalore 560047

[Re: Privacy Compliance Officer]

Privacy Enquiries / Contact

Attention: Karthikeyan Sathyaseelan

No. 35, 3rd Cross Road

Vannerpet Officers Colony

Victoria Layout

Bengaluru – 560047

Karnataka

Email: Karthikeyan@tentasy.com

Ph No: +91 9738510690

* Note that this document is an electronic record in accordance with the Information Technology Act of 2000 and the rules made thereunder. This electronic record is generated by a computer system and does not require any physical or digital signatures. This document is published in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules of 2011 that requires the publishing of the rules and regulations, privacy policy, and terms of use for the access and/or usage of this website.