From booking to checkout, guest info is everywhere — here's what to fix.
A guest books a room. You take their name, phone number, and Aadhaar copy. They log into your WiFi. They order room service. By checkout, you have collected a lot of their personal information. The new DPDPA law says you must handle all of this carefully. If you run a hotel, guesthouse, resort, or even a small homestay — this law applies to you today.
Every step above is now a legal responsibility. When you take an Aadhaar copy at check-in, you must tell the guest why you need it. If a guest says 'delete my information,' you must act on it. If you share guest details with a cab vendor on WhatsApp, that vendor becomes your responsibility too. If guest data is leaked — even by your vendor — you must report it. A complaint box or WhatsApp number for guest grievances is now required by law.
Put a simple notice at check-in: why you collect Aadhaar and phone number.
Write down which vendors get guest info and make them sign a basic agreement.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“The warmest guest experience still needs a disciplined back office.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
