Privacy Policy

Who we are

Elysian Home Food & Stay, House No. 23, Block C, Lumiablot, Nongthymmai, Shillong - 793014, Meghalaya, India. For anything about your information, write to elysianhome25@gmail.com or call +91 7308003326.

Information you give us

Enquiry form. When you send an enquiry we receive your name, phone or WhatsApp number, email address (optional), arrival and departure dates, number of guests, the room and meal plan you are interested in, and your message. It is stored in our website database (Google Firebase) so that we can reply. Only our hosts can read it; other visitors cannot.

WhatsApp, phone and email. If you message or call us, we see what you send. Those conversations are carried by WhatsApp (Meta), your phone network or email provider under their own privacy policies. We use what you send only to answer you and to arrange your stay.

At the property. Where Indian law requires it, we may ask to see and record identity documents at check-in. That happens at the homestay, never through this website.

Information collected when you browse

Delivering the site. Like any website, our hosting provider (Google Firebase) receives your IP address and browser details in order to send you the pages.

Our own visit counters. When a page opens we add one to a set of daily totals: page views, whether this is your first visit today, whether it is a new browsing session, your screen-size category (mobile, tablet or desktop), the website that sent you (its domain only), the page visited, and clicks on buttons such as WhatsApp or “Enquire”. These totals are anonymous — no name, no IP address, no cookie. To tell a new visitor from a returning one, your browser keeps a random ID and the date of your last visit in its own local storage; they never leave your device.

Google Analytics. We use Google Analytics 4 to understand, in aggregate, how people find and use the site (approximate location, device, pages and referring site). It sets cookies such as _ga. According to Google, Analytics 4 does not log or store IP addresses. You can block these cookies in your browser or install Google’s opt-out add-on.

Google Maps. Our location section embeds a Google map. When it loads, Google receives your IP address and may set cookies, under Google’s Privacy Policy.

Sign-in for our hosts (Google user data)

Guests never need an account. The staff dashboard at /admin is for our hosts only and uses Firebase Authentication. When a host signs in with Google, we receive that Google account’s name, email address and profile picture and use them only to confirm that it is an authorised host account. Sign-in with Google is limited to our own business account and any other Google account is refused. Refused attempts are recorded in our server logs (the Google email address and IP address) for security, and those logs are deleted automatically after 30 days.

We do not request access to Gmail, Google Drive, contacts, calendars or any other Google data. Google user data is not sold, not shared with anyone, not used for advertising and not used to train any AI or machine-learning model. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• to reply to your enquiry and confirm, manage or change a booking;
• to arrange things you ask for, such as meals, a cab or airport pickup;
• to understand which pages and rooms interest visitors, and improve the site;
• to keep the website and the host dashboard secure;
• to meet our legal obligations.

We do not use your information for automated decision-making or profiling.

Who we share it with

We do not sell or rent personal information. We share it only with the services that run this website for us — Google (Firebase hosting, database and sign-in, Google Analytics and Google Maps) — who process it on our behalf; with someone you have asked us to involve, such as passing your name and pickup time to a driver; or when the law requires it.

Where it is stored and for how long

Enquiries are stored in Google Cloud in its Mumbai (asia-south1) region. Google Analytics data is processed by Google and may be handled outside India.

We keep enquiries only as long as we need them to reply, manage your stay and keep basic records, and we delete them sooner if you ask. The visit counters are totals with nothing that identifies you. Google Analytics keeps its data for the retention period set in our Analytics account.

Your rights and choices

You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can withdraw any consent you have given. Write to elysianhome25@gmail.com from the email address or phone number you used with us, and we will reply as soon as we can and within the time the law allows. Under India’s Digital Personal Data Protection Act, 2023 you may also nominate someone to exercise these rights for you and, if you are not satisfied with our answer, complain to the Data Protection Board of India.

Cookies and browser storage

• elysian:visitor, elysian:last-seen (local storage) and elysian:session (session storage) — our visit counters, described above.
• _ga, _ga_* — Google Analytics cookies.
• Google Maps may set its own cookies when the map loads.
• On /admin only, Firebase keeps a host’s sign-in session in the browser.

Clearing your browser’s site data removes all of these.

Security

The site is served only over HTTPS. Database rules let visitors send an enquiry but never read one back, so no guest can see another guest’s details, and only listed host accounts can open the dashboard. No system is perfectly secure, but we take reasonable care to protect what you share.

Children

The website is meant for adults arranging a stay. We do not knowingly collect personal information from anyone under 18 through it; a parent or guardian should make enquiries on a child’s behalf.

Changes to this policy

If we change how we handle information we will update this page and the date at the top.