Privacy Policy

This policy explains how Singh Hotels Pvt. Ltd., which runs JB's at Tourist Complex Area, Near Man Singh Palace, Vibhav Nagar, Tajganj, Agra, Uttar Pradesh 282001, India (“we”, “us”), handles your personal data. We decide why and how your data is used, which makes us the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023.

It covers our website, our reservation system, the emails and WhatsApp messages we send about your booking, and your visit to the venue. By making a reservation or otherwise giving us your details you agree to this policy.

Only what a table booking needs, plus a little more to look after repeat guests.

We do not collect payment card details, Aadhaar or other government ID numbers through this website. Nothing we collect here counts as “sensitive personal data or information” under the 2011 Rules.

• To run your booking. You give us your details so we can hold a table. That is the purpose, and it is the only one we rely on for most data.
• To contact you about it. Confirmations, changes, and a reservation pass link by email or WhatsApp.
• To keep the venue safe and lawful, including meeting our excise, food-safety and other legal duties.
• To improve. Counting busy dates and popular events helps us plan. We use totals, not profiles of individuals.

No marketing without your yes. We will send offers or event news only if you separately agree, and every message will tell you how to stop. We never sell your data and we do not use it for advertising.

Your consent is the basis for using your data. You can withdraw it at any time (see “Your rights”). Withdrawing does not affect anything we did lawfully before, though we may then be unable to hold your reservation.

Your data is seen by our staff who need it to look after your booking, and by the services that help us run it:

• Hosting and database providers that store reservation and guest records on our behalf (we use Supabase).
• An email delivery service that sends your confirmation email.
• WhatsApp (Meta), if we message you there or you message us. WhatsApp handles those chats under its own privacy policy.
• Google Maps and similar links, which open on the provider's own service when you click them.
• Authorities, when the law requires it or a valid order is served on us.
• A buyer, if the business is ever sold, and only on terms that protect your data the same way.

These providers may only use your data to serve us, under their agreements with us. We do not sell or rent your data to anyone.

Our providers run cloud servers, and some of them may be located outside India. We choose providers with sound security practices and transfer data only where Indian law allows it, which excludes any country the Central Government may restrict.

The table in “What we collect” shows each period. When the purpose is finished, or you withdraw consent, we delete or anonymise the data, unless a law requires us to keep it longer (for example tax or accounting records).

Deleting a booking from our system does not remove the matching guest profile. If you want that gone too, ask us and we will erase it.

• The website and our admin tools use HTTPS, so data is encrypted as it travels.
• Staff access sits behind a login with a one-time code sent to an approved email address.
• Only people who need your details to do their job can see them.
• We review who has access and remove it when roles change.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, and explain what happened and what to do.

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

• Show you a summary of the personal data we hold about you and what we do with it.
• Correct, complete or update anything that is wrong or out of date.
• Erase your data when you no longer want us to hold it and the law does not require us to keep it.
• Withdraw your consent as easily as you gave it.
• Nominate someone to use these rights for you if you die or cannot act yourself.
• Resolve a complaint through our Grievance Officer (below).

Email concierge@jbsloungeandbar.com from the address or number you booked with, so we can confirm it is you. We aim to reply within 7 days and to finish within 30 days, and always within the time the law sets. If you are still unhappy after using our grievance process, you can complain to the Data Protection Board of India.

Reservations must be made by adults aged 18 and over. Children may attend when accompanied by a parent or legal guardian, but we do not knowingly collect personal data directly from children. If you think a child has given us their details, write to us and we will delete them.

We use only what the site needs to work, such as keeping a staff member signed in to the admin area. We do not use advertising or cross-site tracking cookies. If we add analytics later we will update this page first.

For any question, complaint or request about your data, contact:

If we change how we use your data, we will update this page and its date, and tell you directly when a change matters to you. This is the version in force from 20 October 2026.