Privacy Policy
How Volcastay® collects, uses and protects your data.
Version 2026-06-11 · Volcastay®
1. Controller
Volcastay® is a registered trademark and travel platform operated by its proprietor. The proprietor is the data controller for personal data processed via the platform.
2. Data We Collect
Account data (name, email, phone, password hash), booking data (dates, guests, properties, payment references), pet profile data (name, breed, age, vaccinations, behaviour notes), device and usage data (IP address, browser, OS, cookies, analytics), communications, KYC documents where required, and any content you submit.
3. Legal Bases
Performance of contract, your consent, our legitimate interests (fraud prevention, security, product improvement) and compliance with legal obligations under Indian law including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
4. How We Use Data
To create accounts, process bookings, take payments, communicate with you, prevent fraud, comply with law, personalise the platform, send marketing where you have consented, and improve our services.
5. Sharing
With hosts, transport providers, event organizers and partners strictly to fulfil your booking; with payment gateways, KYC vendors, analytics, hosting, communications and cloud providers under confidentiality; with authorities where legally required; and in connection with a corporate transaction.
6. Cookies
See the Cookie Policy. You can control cookies via your browser; some platform features require cookies to function.
7. Marketing
You may opt out of marketing emails, SMS or WhatsApp at any time. Transactional and safety messages will continue.
8. Security
We implement reasonable technical and organisational measures. No system is perfectly secure; you use the platform at your own risk.
9. Retention
We retain personal data for as long as necessary for the purposes described and as required by tax, accounting, fraud and legal obligations.
10. Your Rights
Subject to applicable law, you may access, correct, update, port, restrict, object to or request deletion of your personal data by writing to support@volcastay.com. We will verify identity before acting.
11. Children
The platform is not directed to children under 18. We do not knowingly collect their data.
12. Cross-Border
Data may be processed in jurisdictions outside India by our service providers. We require appropriate safeguards by contract.
13. Grievance Officer
See the Contact & Grievance Redressal Policy.
14. Updates
We may update this policy from time to time. Continued use constitutes acceptance.