Privacy Policy

Scope

This policy applies to personal data collected through our website, contact forms, bookings, customer support, marketing communications, and related online services. It does not apply to third-party websites or services that we do not control.

Key Definitions

"Personal data" means any data about an individual who is identifiable by or in relation to such data. "Sensitive personal data or information" (SPDI) under the SPDI Rules includes passwords, financial information (such as bank account or card details), physical, physiological and mental health condition, sexual orientation, medical records and history, and biometric information.

Information We Collect

• Account and contact details: name, email address, phone number, and communication preferences.
• Booking and travel details: destination, dates, traveler details (including for co-travelers you share with us), special requests, and service history.
• Payment information: collected via our payment providers. We do not store full card data on our servers. Limited references/tokens may be stored for refunds and reconciliation.
• Optional SPDI: only where necessary and with explicit consent, such as health information relevant to travel (e.g., accessibility needs), government ID for bookings (as legally required), and limited biometric data only if mandated by a carrier or authority.
• Device and usage data: IP address, device identifiers, browser type, pages visited, and interactions collected via analytics and cookies.
• Communications: queries, feedback, and support interactions.
• Marketing preferences: opt-ins, unsubscribe choices, and campaign engagement.

Note: Please avoid sharing SPDI unless specifically requested for a lawful booking purpose. If you share SPDI inadvertently, you may request deletion using the process below.

How we use your information

• Provide, personalize, and manage bookings, itineraries, and related services.
• Communicate about inquiries, confirmations, updates, and support.
• Process payments, refunds, and prevent fraud or misuse.
• Comply with legal obligations, including KYC/ID requirements of partners or authorities.
• Improve site performance, user experience, and service quality.
• Send marketing communications with your consent; you can opt out anytime.

Legal grounds include consent (particularly for SPDI and marketing), performance of a contract, compliance with law, and legitimate interests such as improving services and ensuring security.

Cookies and Tracking

We use cookies and similar technologies for essential site functions, analytics, and to remember your preferences. Where required, we seek your consent. You can manage cookies in your browser settings. Disabling certain cookies may impact site functionality.

Sharing and Disclosure

• Service providers and partners: hotels, airlines, local operators, payment gateways, CRM and analytics providers who process data under appropriate safeguards.
• Legal and compliance: to law enforcement, regulators, or courts when legally required or to protect our rights, users, or the public.
• Business transfers: in connection with mergers, acquisitions, or restructuring, subject to this policy or equivalent safeguards.

We do not sell personal data. We share SPDI only with consent or as required for a lawful purpose and on a need-to-know basis per the SPDI Rules.

International Transfers

Your data may be transferred to and processed in countries outside India where our partners or service providers operate. Such transfers are made with your consent where required and with reasonable security practices and contractual safeguards to protect your information.

Security Practices

We implement reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, including organizational, technical, and physical measures to protect data against unauthorized access, alteration, disclosure, or destruction. We follow industry-standard controls, encryption in transit, access controls, and regular reviews of security measures.

Data Retention

We retain personal data for as long as needed to fulfill the purposes outlined in this policy, comply with legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. When no longer needed, data is deleted or de-identified per our retention schedule.

Your Rights & Choices

Subject to applicable law, including the DPDP Act, you may have the right to access, correct, update, or delete your data; withdraw consent; and register a grievance. To exercise these rights, please contact us using the details below. We will verify your request and respond within reasonable timelines. You may also opt out of marketing communications using the unsubscribe option in our emails.

Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal data from children without appropriate consent from a parent or guardian where required by law. If you believe a child has provided us data without consent, please contact us to request deletion.

Grievance Redressal

In accordance with Rule 5(9) of the SPDI Rules, you may contact our Grievance Officer for any questions or complaints regarding the processing of your personal data or this policy.

Changes to this Policy

We may update this policy to reflect changes in legal requirements or our practices. Material changes will be notified by updating the effective date above and, where appropriate, through website notices or direct communication.