Privacy Policy

LawnAndHall (“we”, “us”, “our”) is a multi-tenant platform that lets lawn, banquet, resort, farmhouse, hotel and other venue owners build, customise and publish their own website on a subdomain such as royal.lawnandhall.com, without needing a developer.

This Privacy Policy explains what personal information we collect when you visit lawnandhall.com, create an account, manage a venue website from the dashboard, or submit an enquiry on a venue’s website, and how we use, store, share and protect it.

It applies to venue owners and their team members (“Tenants”), to people who browse a Tenant’s public website (“Visitors”), and to anyone who uses our marketing site. By creating an account or submitting an enquiry, you agree to this policy.

Account information

• Identity and login: your name, email address and password (stored only in encrypted form).
• Google sign-in: if you choose it, basic profile details from your Google account, such as your name and email.
• Account status: email verification and password reset records, your profile and account settings, and your role (Admin, Tenant Owner or Tenant Staff).

Business and venue information

• Business name, venue type, description, logo and cover image
• Address, phone number, WhatsApp number, email and Google Maps location
• Website and social media links
• Capacity, facilities, pricing, event types and opening or availability details

Website content and media

• Headings, descriptions, packages, services, events, testimonials and FAQs you add
• Photos and gallery images you upload, with their captions, categories and order
• Your template, section, colour and button choices

Enquiry information from Visitors

When a Visitor submits an enquiry form on a venue’s website, we collect their name, phone number, email address, event date, event type, number of guests and message.

Technical information

Sign-in IP addresses and timestamps, browser type, device information, pages visited and server logs, along with the cookies described in Section 07. We use this to run and secure the service.

We use personal information to:

• Create, verify and secure accounts, including sign-in with email or Google
• Host and publish each Tenant’s website on its own subdomain using the template and sections they choose
• Save your customisations, content and gallery, and let you preview before publishing
• Deliver enquiries to the right Tenant and show them in the dashboard with their status and contact details
• Show WhatsApp, Call and Enquiry buttons using the contact details the Tenant has set
• Process and optimise the images you upload
• Send service emails such as verification, password reset, invitations and enquiry notifications
• Provide support, monitor performance, and prevent fraud and abuse
• Comply with legal obligations

We do not sell personal information. We do not use your content to train public AI models or for unrelated advertising.

Each venue website is published under the Tenant’s own subdomain. Everything a Tenant publishes, such as the business name, photos, address, phone number, WhatsApp number, email, pricing, packages, testimonials and FAQs, is public and can be seen by anyone on the internet.

When a Visitor submits an enquiry, the details go to that venue. The venue (the Tenant) decides how to use them, for example to call or message the Visitor about a booking. The Tenant can view, update the status of, contact or delete the enquiry from the dashboard. LawnAndHall stores and processes enquiry data on the Tenant’s behalf to provide the service.

Tenants are responsible for using enquiry details lawfully, for publishing only information they have the right to publish (including testimonials and photos that show other people), and for responding to Visitors’ requests about their data.

If you are a Visitor and want your enquiry corrected or deleted, contact the venue directly or write to us and we will help pass the request on.

We do not sell personal information. We share it only in these cases:

• With the venue: enquiry details go to the Tenant whose website the Visitor used.
• With your team: people you invite to your workspace can see the data their role allows.
• Service providers: companies that help us run the platform under contract, such as hosting and servers, file storage, email delivery, and Google for sign-in and Maps.
• Platform administration: LawnAndHall administrators may access tenant, user, venue, enquiry and media data only as needed for support, moderation, security and legal reasons.
• Legal reasons: if required by law, or to protect rights, safety and security.
• Business transfer: in a merger, acquisition or sale of assets, with notice to you.

When a Visitor taps the WhatsApp button, they leave the website and WhatsApp’s own privacy policy applies from that point. We are not responsible for the privacy practices of third-party services.

• Encryption in transit: HTTPS (SSL) on lawnandhall.com and on Tenant subdomains.
• Passwords: stored only in encrypted form, never in plain text.
• Tenant isolation: each Tenant’s data is logically separated. A Tenant can only access its own website, venue details, gallery and enquiries.
• Role-based access: Admin, Tenant Owner and Tenant Staff roles, with authorization checks on what each can see and do.
• Limited internal access: our team accesses data only when necessary.

No method of transmission or storage is 100% secure. Please use a strong password, keep your login private, and tell us right away if you suspect unauthorised access to your account.

We use essential cookies and similar technologies for sign-in sessions, CSRF protection (form security) and remembering basic preferences. These are required for the platform to work.

You can block or delete cookies in your browser settings, but sign-in and other features may stop working. If we add analytics or other optional cookies later, we will update this policy and provide controls where required.

• Account and business data: kept while your account is active.
• Enquiries: kept until the Tenant deletes them, or until the related account is closed and we process a deletion request.
• Images and content: removed when you delete them from the dashboard, or when we process an account closure request.
• Account closure: there is no self-serve delete button yet. Email us to request account or data deletion and we will handle it manually, keeping only what we must for legal, security or accounting reasons.
• Backups and logs: may remain for a limited period before they are overwritten.

Depending on where you live, you may have the right to:

• Access and update your account and business information from the dashboard
• Ask us by email for a copy or correction of your personal data
• Ask us by email to close your account or delete your data
• Withdraw consent where we rely on it, and opt out of non-essential emails

Email us using the contact details below. We may need to verify your identity first, and we will respond within a reasonable time. Where applicable law, including India’s Digital Personal Data Protection Act, 2023, gives you additional rights, we will honour them.

LawnAndHall is built for business owners and is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has given us data, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top of this page will change, and for significant changes we will notify you by email or in the dashboard. If we add features that collect new kinds of data, such as online booking, payments or analytics, we will update this policy before they go live.

Questions about this policy, or requests about your data (including account closure), can be sent to [email protected]. We aim to respond within a reasonable business timeframe.