Resoraa logoResoraa

Legal

Privacy Policy

We collect the minimum needed to answer your enquiry and run your marketing. We do not sell your data.

Last updated 9 August 2026

1. Who is responsible

Resoraa, a resort marketing studio based in Goa, India, is responsible for the personal data described here. Contact hello@resoraa.com for any privacy matter.

2. What we collect

  • Enquiry details you submit: name, property name, email, phone or WhatsApp number, country, budget range and your message.
  • Client engagement data: contact details of your team, billing information, and account access you choose to share.
  • Technical data: IP address, device and browser type, referring page and pages viewed.
  • Communications: emails, WhatsApp messages and call notes relating to your enquiry or project.

We do not knowingly collect data from children or ask for sensitive categories of data.

3. Why we use it

  • To respond to your enquiry and prepare a proposal (our legitimate interest / your request).
  • To deliver and support a paid engagement (contract).
  • To invoice, keep accounts and meet tax obligations (legal obligation).
  • To improve the site and understand which pages generate enquiries (legitimate interest).
  • To send occasional relevant updates, where permitted — you can opt out at any time (consent).

4. Who processes it for us

We use trusted providers strictly to run the business: cloud hosting and database, email, WhatsApp Business messaging, calendar and scheduling, analytics, advertising platforms for measurement of our own campaigns, and payment processors. They act on our instructions and may store data outside your country; we rely on appropriate safeguards for such transfers. We never sell or rent your personal data.

5. How long we keep it

  • Unconverted enquiries: up to 24 months, then deleted.
  • Client records: for the engagement plus the retention period required by tax and accounting law.
  • Marketing subscribers: until you unsubscribe.

6. Your rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent. Email us and we respond within 30 days. If you are in the EU or UK, you may also complain to your local data protection authority.

7. Security

Data is stored on access-controlled, encrypted-in-transit infrastructure with least-privilege access for our team. No system is perfectly secure; if a breach affects you materially, we notify you and the relevant authority as required.

8. Cookies

This site uses only what is needed to function plus basic measurement. See our Cookie Policy.

9. Changes

We update this policy as our tools or obligations change; the date at the top always shows the current version.

Two slots left.

Get your growth quote