Depending on where and how you interact with us (e.g. by using our app or by walking into one of our OYO-branded accommodations or booking an OYO- branded accommodation via a third party travel agency) different companies within OYO will process your information. You can find out more about the OYO companies that handle your information, including which company makes decisions about how your information is handled, by clicking here.

This privacy notice applies to individuals who enquire about, purchase or make use of our products and services, such as when a user signs up with OYO, modifies her account, makes a booking (whether through our app, website, in person or via any other channel), requests on-demand services, contacts customer support, stays at OYO-branded accommodations or otherwise communicates or interacts with OYO.

It describes how we handle your information, regardless of the way you contact us (e.g. app, website, email, phone, walk-ins to OYO-branded accommodations, etc.). Sometimes we will provide you with additional information or notices, depending on the way we interact with each other, e.g. if you use particular functionality on our app, we may explain how that functionality uses your information.

OYO offers accommodation in both OYO-branded guest houses, hotels and other lodgings. The word “OYO” appears in front of all OYO-branded accommodations, e.g. OYO 116 Kathmandu Resort, OYO 316 Hotel Brigade Royale and OYO 2262 Hotel Heritage Inn. If you book a stay through us book a stay through us at one of our partners’ accommodations, that partner will use your personal information as shown in their privacy notice (which can normally be found on our partner’s website or is provided by our partner via email or at check-in).

OYO’s website and app is not aimed at children, and we do not allow children to book accommodation or stay at our accommodations without a responsible adult. This privacy notice is therefore not aimed at children. If you provide us with information about your children, it is processed as described in this notice.

If you have any questions about this, please contact us.

We obtain personal information from you through your interactions with us, including by telephone (please note that we record or monitor our calls for compliance and quality assurance purposes), by email, via our websites, via our apps, via post, via, social media or face to face e.g. in our OYO-branded accommodations or when you meet an OYO agent.

We also obtain your personal information from third parties such as:

• others who book accommodation for you;
• travel agencies through which you book OYO-branded accommodation (e.g. Booking.com and Expedia);
• accommodation providers;
• service providers who work with us in relation to our product or service; and
• if your work role involves you booking corporate employee accommodation, third parties who identify you as the appropriate contact for marketing our services to your organisation.

Standard personal information includes:

• Contact Information: We collect your name, user name, address, e-mail address and telephone number(s); if you choose to upload one or connect your social media account to your OYO account, your profile picture; and your country of residence, age, gender and date of birth;
• Location Information: We may derive your approximate location from your IP address so that we show you more relevant content (e.g. accommodation near you). You can choose to allow our app to access location services so that we can suggest nearby accommodation. This will mean that we collect the precise location of your device when the app is running both in the foreground and the background.
• Transaction Information: We collect transaction details related to your use of our services, e.g. type of service requested, date and time the service was provided, amount charged, days booked/stayed, and other related transaction details. If someone else uses an OYO referral code you have given them, OYO may associate that other person with you to ensure that you receive the benefit of having made that referral.
• Account History: We collect details of your bookings and of contact we have had with you, such as complaints or incidents.
• Usage and Preference Information: We collect information about how you interact with our website, app or other Services, including IP addresses, search terms and parameters and device information (you’ll find more information about this in our Cookie Statement)
• Log Information: We collect server logs, which may include information like device IP address, access dates and times, app features or pages viewed, app crashes and other system activity, type of browser, and the third-party site or service you were using before interacting with our Services
• Device Information: We collect information about your mobile device, including, for example, the hardware model, operating system and version, software and file names and versions, preferred language, unique device identifier, advertising identifiers, serial number, device motion information, and mobile network information to help us understand how our app is performing across a range of devices and to help us identify the cause of “crashes” and potential performance improvements.
• Call and SMS Data: We make it easier for you to contact accommodation managers. In connection with this, we receive call data, including the date and time of the call or SMS message, the parties’ phone numbers, and the content of the SMS message.
• CCTV: We may also collect your personal information if you access our premises and we use CCTV to monitor those premises.
• WiFi: If you use WiFi offered at our accommodation, we will collect login information (which may include your email) and usage information that tells us how you use the WiFi.

• information about religious or philosophical beliefs may be revealed by food preferences (e.g. halal, kosher, etc.);
• information about health may be revealed by special requests for assistance or disability-friendly accommodation or if you require medical assistance during your stay; and
• information about sexual orientation may be revealed if you tell us that you are married or in a relationship and you also give us the name of your partner.

We process standard personal information about you on the basis that it is:

• necessary for the performance of a contract: where we have a contract with you, we will process your personal information in order to fulfil that contract (i.e. to provide you and others you have booked accommodation for with products and services).
• in our or a third parties’ legitimate interests: details of those legitimate interests are set out in more detail below.
• where we are required to or is otherwise permitted by law

• you have manifestly made it public: for example if you are open about your sexual orientation or (if the AutoParty service is available in your country) you choose to tell us that your AutoParty is for the celebration of your same-sex or opposite-sex wedding;
• processing is necessary for reasons of substantial public interest, on the basis of law: for example, if you are taken ill or have an accident at your accommodation, we may have to keep a record of the incident for health and safety purposes;
• we have your consent: we would ask for any consent to process your special category data separately (your consent is not assumed simply because you have read this privacy notice);
• processing is necessary for the establishment, exercise or defence of a legal claims

We process your personal information for the following legitimate interests (taking into account your interests, rights and freedoms):

• to provide and administer our products and services in respect of your booking, e.g. provide products and services requested (including our loyalty programme if applicable), send service communications (including updates about your accommodation arrangements), facilitate payments, send receipts and provide customer support;
• to administer our relationship with you, our business and our third-party providers (e.g. to investigate complaints, confirm that our providers have provided the correct service to you and invoiced correctly for them, etc);
• to ensure that you can interact with us securely, e.g. we authenticate users;
• to improve our services and develop new features for the OYO app, website and offering, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyse usage and activity trends;
• to send you marketing that we think will be of interest to you (including information about products, services, promotions, news, and events) and to personalise your experience of us (in each case as permitted by law), including to provide or recommend features, content, social connections, referrals, and advertisements. You can opt-out of marketing at any time by the unsubscribe link in any emails you receive, adjusting your device settings to block notifications or contacting us.
• to prevent fraud and abuse of our services;
• to enforce or apply our website terms of use, our policy terms and conditions or other contracts, or to protect the rights, property, or safety of OYO, our customers, or others;
• to exercise our rights and to defend ourselves from claims; or
• to participate in, or be the subject of, any sale, merger or acquisition or all or part of the OYO business.

To ensure that the processing of personal information we carry out for the purpose of achieving these interests is proportionate, we have carefully balanced these legitimate interests and your interests and fundamental rights and freedoms. For further details of this balancing test, please contact us.

We may allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify your device when you visit our site and use our Services, as well as when you visit other online sites and services. For more information about these technologies and service providers, please refer to our Cookie Statement.

We retain your personal information in accordance with OYO’s records retention policies.
In order to determine how long it is necessary to retain your personal information, we calculate retention periods in accordance with the following criteria:

• the currency of your relationship with us and the types of products or services you have with us;
• the length of time it is reasonable to keep records to demonstrate that we have fulfilled our obligations to you and under law;
• any limitation periods within which claims might be made;
• any retention periods prescribed by law or recommended by regulators, industry bodies or associations; and
• the existence of any relevant proceedings.

The data protection laws in the EEA and in some other countries provide individuals with the following rights:

• Right of subject access: The right to make a written request for details of personal information we hold about you and to request a copy of that personal information.
• Right to rectification: The right to have inaccurate information about you rectified.
• Right to erasure ('right to be forgotten'): The right to have certain personal information about you erased.
• Right to restriction of processing: The right to request that your personal information is only used for restricted purposes.
• Right to object: The right to object to the use of personal information (including the right to object to marketing).
• Right to data portability: The right to ask for personal information you have made available to us to be transferred to you or a third party in machine-readable formats.
• Right to withdraw consent: We do not normally rely on consent as a basis for processing your personal information. We will only ask for your consent in very limited circumstances and, if we do so, will make it obvious to you when we are asking for that consent and what that is for. You have the right to withdraw any consent you have given us to handle your personal information. If you withdraw your consent, this will not affect the lawfulness of use of your personal information prior to the withdrawal of your consent.

These rights may not apply in all cases. If we are not able to comply with your request, we will explain why. In response to a request, we will ask you to verify your identity if we need to, and to provide information that helps us to understand your request better. If you would like more information about your rights or to exercise any of your rights, please contact [dataprotection@oyorooms.com].