Last updated 2026-10-08 · Effective from 2026-07-15
1. Who we are
Save Farm is an agro-tourism destination in Gholvad, Dahanu taluka, Palghar district, Maharashtra, operated as a sole proprietorship. For the purposes of the Digital Personal Data Protection Act, 2023, Save Farm is the Data Fiduciary — the party that decides why and how your personal data is handled. You are the Data Principal.
Legal entity: Aditya Prabhakar Save, sole proprietor, trading as Save Farm
GSTIN: 27DDYPS2700B2ZE
Address: Save Farm, SY No. 181/2/2, Rampur, Post Gholvad, Tal. Dahanu, Dist. Palghar, Maharashtra 401702
Email: aditya@savefarm.in
Phone: +91 99211 77335
2. What we collect
When you submit an enquiry or booking form, we collect:
- Your name (required)
- Your phone number (required)
- Your email address (optional)
- Number of adults and children in your party (the children field is optional)
- Type of visit, number of nights and rooms, preferred room types, and any enquiry notes you choose to share
- Your intended check-in and check-out dates
- Which page or form you enquired from
- Your IP address, captured automatically
When you stay with us, we additionally collect the photo ID details of guests aged 18 and above (Aadhaar, Driving Licence, or Election Card). We are legally required to verify guest identity, and this is not optional.
Photographs on the farm. We may photograph or film general activity on the farm for our own promotional use, such as this website and our social media. If you do not wish to appear, please tell our team on arrival and we will respect that. Where a guest could be recognised in a photograph we publish, we usually edit it, for example by altering faces, to protect their identity. If you find a photograph of yourself on our website or social media and would like it removed, email aditya@savefarm.in and we will remove it.
When you pay online, our payment gateway collects your payment details. We never receive, see, or store your card number, CVV, UPI PIN, or net-banking password. Those go directly to Razorpay. We only receive a transaction reference, the amount, the status, and the payment method used.
When you simply browse this site, we and our analytics tools automatically collect technical information: pages viewed, time on page, which links and buttons you clicked, approximate location derived from your IP address, referring website, device type, and browser.
When you contact us on WhatsApp, your phone number and the content of your messages are visible to us and are handled under WhatsApp's own privacy policy.
We do not knowingly collect data from children under 18. Bookings must be made by a lead guest aged 21 or over, and we only expect to hold a child's details where a parent or guardian has supplied them to us as part of a booking. If you believe a child has given us personal data directly, contact us and we will delete it.
3. Why we use it, and on what legal basis
| What we do | Why |
|---|---|
| Respond to your enquiry, quote rates, confirm your booking | To take steps you have asked for before entering a contract, and to perform that contract |
| Contact you by phone, WhatsApp, or email about your booking | Necessary to deliver the stay you booked |
| Take payment and issue a GST invoice | To perform the contract and to meet our tax obligations |
| Verify guest ID at check-in and maintain guest records | Required by law for accommodation providers |
| Keep the site secure and prevent spam and abuse | Our legitimate interest in protecting the site — this is why we log IP addresses and rate-limit forms |
| Understand how the site is used and measure our advertising | With your consent, via analytics and advertising cookies |
What we do not do: we do not sell your personal data, we do not rent or trade it, and we do not share it with third parties for their own marketing. We do not send marketing messages to people who have only made an enquiry unless they have asked to hear from us.
6. How long we keep it
- Enquiries that do not become bookings: up to 24 months, then deleted.
- Booking and guest records: up to 8 years, because tax and accommodation record-keeping law requires it.
- Payment records: up to 8 years, for tax and audit purposes.
- Guest ID details: only as long as the applicable law requires us to keep them.
- Analytics data: as per Google's retention settings, typically up to 14 months.
Under the Digital Personal Data Protection Act, 2023 we are required to erase your personal data once the purpose for collecting it has been served and we are no longer required by law to retain it. We do that.
7. How we protect it
The site is served over HTTPS. Our database is access-controlled and is only reachable using server-side credentials that are never exposed in your browser. Our enquiry forms are rate-limited and screened for spam. Access to guest data is restricted to the Save Farm team members who need it to do their job.
We are honest about the limits here: no method of transmitting or storing data is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as required by law.
Please do not send us sensitive information — ID documents, card details, passwords — over unsecured channels such as email.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Know what personal data we hold about you and what we have done with it.
- Correct data that is wrong, and complete data that is incomplete.
- Erase your data, where we no longer need it and no law requires us to keep it.
- Withdraw consent at any time, where we relied on your consent — for example, cookies or marketing messages. Withdrawing consent does not undo what we lawfully did before you withdrew it.
- Nominate another person to exercise these rights on your behalf if you die or become incapacitated.
- Complain to us, and then to the Data Protection Board of India if we do not resolve it.
To exercise any of these rights, email aditya@savefarm.in. We respond within 30 days. We may need to verify your identity first — this protects you from someone else requesting your data.
These rights are free to exercise. Please note that you are also obliged, under the Act, not to file false or frivolous complaints or impersonate another person.
9. Grievance Officer
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer with any complaint about how we have handled your personal data:
Grievance Officer: Mr. Aditya Prabhakar Save, Proprietor
Save Farm
Rampur, Post Gholvad, Tal. Dahanu, Dist. Palghar, Maharashtra 401702
Email: aditya@savefarm.in
Phone: +91 99211 77335
Hours: 9:30 AM to 8:30 PM, all days
We acknowledge every complaint within 48 hours and aim to resolve it within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.
10. Changes to this policy
We may update this policy as our services or the law change. The "last updated" date at the top of this page tells you when it last changed. If we make a significant change to how we use your data, we will take reasonable steps to tell you.
Please check this page occasionally. Continuing to use the site after a change means you accept the updated policy.
11. Contact us
Any question about this policy or your data:
Save Farm (Aditya Prabhakar Save, sole proprietor · GSTIN 27DDYPS2700B2ZE)
Rampur, Post Gholvad, Tal. Dahanu, Dist. Palghar, Maharashtra 401702
Phone: +91 99211 77335 / +91 70203 66302
Email: aditya@savefarm.in
Hours: 9:30 AM to 8:30 PM, all days