Last updated August 2026. Applies to palampurproperties.com and all its subpages.

1. Who we are

Palampur Properties operates palampurproperties.com, an index of accommodation in the Palampur and Bir-Billing belt of Kangra district, Himachal Pradesh, India. For the purposes of India’s Digital Personal Data Protection Act 2023 we are the Data Fiduciary for personal data submitted through this site.

2. What we collect

We collect only what you actively give us. Specifically:

Stay enquiries — your name and phone number, which are required, and optionally your email, travel dates, group size, budget band and free-text notes.
Listing and claim requests — the property name, your name, phone, optional WhatsApp and email, the area and category, and any description you write.
Technical data — your IP address is used transiently to rate-limit form submissions and is not stored alongside your enquiry.

We do not run advertising networks, third-party trackers, retargeting pixels or session-recording tools on this site. Advertising placements are sold and served directly by us and do not track you.

3. Why we use it, and on what basis

To answer your enquiry. We share your name, phone number, dates and stated requirements with properties matching your request so they can reply to you. This is the entire purpose of the enquiry form and your submitting it is your consent to that sharing.
To verify a listing. We call the number you supply to confirm you run the property before we hand over a page.
To prevent abuse. Rate limiting and honeypot fields guard the forms against automated submission.

4. Who we share it with

Accommodation providers in the Palampur and Bir-Billing belt, and only those relevant to your enquiry. Our hosting and database providers process data on our instructions. We do not sell personal data to anyone, for any purpose, and we do not share it for third-party marketing.

5. How long we keep it

Stay enquiries: 24 months from submission, then deleted.
Listing and claim requests: for as long as the listing is active, plus 24 months.
Rate-limiting records: held in memory only and discarded within minutes.

6. Your rights

Under the Digital Personal Data Protection Act 2023 you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to erase it, and withdraw consent for its further use. Visitors in the European Economic Area or the United Kingdom have equivalent rights under the GDPR. We answer these requests within 30 days and we do not charge for them.

Use the contact page — our published email address will appear there once the line is live.

7. Cookies

This site sets no advertising or analytics cookies. If analytics are added in future, a consent banner will appear before any non-essential cookie is set, and you will be able to reject non-essential categories without losing access to the site.

8. Security

Data is transmitted over TLS and stored with access restricted to the people who operate the site. No system is perfect; if a breach affects your data we will notify you and the Data Protection Board of India as required by law.

9. Children

This site is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has submitted personal data, contact us and we will delete it.

10. Changes

When this policy changes materially we will update the date at the top and note what changed. Continued use after a change constitutes acceptance.