Privacy policy

What we collect, why, who sees it, how long we keep it, and how you stay in control.

Last updated 14 October 2026

Who we are

KashmirMarathon (“we”, “us”) is an independent travel media publication based in Srinagar, Jammu & Kashmir, India. We decide how and why the personal data described here is processed. Contact us about privacy at privacy@kashmirmarathon.com.

What we collect

When you request accommodation

  • Trip details: dates, number of guests and rooms, type of stay, budget, reason for visit, extras you ask for, and any notes you add.
  • Contact details: your name, email address, phone number and country of residence, and how you prefer to be contacted.
  • Your choices: your consent to share the request with partners, any marketing preference, and the version of the wording you agreed to, with the time.
  • How you found us: the page you started on, the referring website and any campaign tags in the link you followed.

When you browse the site

Our hosting provider records standard technical information such as IP address, browser type and the pages requested, to deliver and secure the site. To limit misuse of our forms, we create a one-way, scrambled version of your IP address and keep it for no more than two hours. We do not store your raw IP address with your request.

We do not ask for passport numbers, payment card details or other sensitive identity documents.

Why we use it

  • To answer your accommodation request and send you suitable options.
  • To share your request with up to three relevant accommodation or travel partners, so they can confirm availability and rates.
  • To follow up on your request, at most twice, unless you tell us to stop.
  • If you opted in: to email you when the next race dates are announced, plus occasional race-week tips.
  • To keep our forms secure, prevent spam and understand which pages and campaigns bring useful requests.

We process your request on the basis of the consent you give in the form. You can withdraw consent at any time. Withdrawing doesn’t affect anything we did before, but we may no longer be able to help with your request.

Who we share it with

  • Accommodation and travel partners: only those relevant to your request, and no more than three. They may use your details only to respond to it. Some partners may be businesses connected to the people who run KashmirMarathon.
  • Service providers who run the site for us: Google Firebase (hosting and secure data storage in India) and our email provider. They act on our instructions only.
  • Authorities, if the law requires it.

We never sell your personal data, and we don’t share it with advertisers.

How long we keep it

We keep accommodation requests until 12 months after your check-out date, then delete them automatically. If we keep a record of a confirmed booking for accounting with a partner, we keep only what is needed for as long as the law requires. Marketing preferences are kept until you unsubscribe.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, and other laws that may apply to you, you can:

  • ask what personal data we hold about you and who we have shared it with;
  • ask us to correct, complete or update it;
  • ask us to delete it, and withdraw your consent;
  • nominate someone to exercise these rights for you in case of death or incapacity;
  • raise a complaint with us, and if you’re not satisfied with our response, with the Data Protection Board of India.

Email privacy@kashmirmarathon.com from the address you used with us. We aim to respond within 30 days. If you live outside India, you may also have rights under your local law, such as the GDPR, and we will honour them.

Cookies and analytics

We don’t use advertising cookies. The request form keeps a small note in your browser for the length of your visit, recording the page you arrived on and any campaign tags, so we know which pages bring useful requests. It is deleted when you close the tab. If we add analytics, we will update this policy first.

Security

Requests are sent over an encrypted connection and stored in a database that cannot be read from the public website. Only authorised people at KashmirMarathon can access them.

Children

Our request form is for adults. If you are under 18, please ask a parent or guardian to make the request.

Changes to this policy

If we change how we use personal data, we will update this page and the date at the top before the change takes effect.