Privacy Policy
INSTANCES WE COLLECT AND USE YOUR PERSONAL DATA
We shall collect and process your personal data only if one or more of the following lawful circumstances exist:-
1.1
You have provided explicit consent for processing your personal data as per the terms of this Privacy Policy.
1.2
The processing is necessary for the performance of a contract or for taking pre contractual steps at your request.
1.3
The processing is required for compliance with a statutory obligation.
1.4
The processing is necessary to protect your vital interests or those of another person.
1.5
The processing is necessary for the performance of a task carried out in public interest or under official authority vested in us.
1.6
The processing is necessary for legitimate interests pursued by us or a third party, provided such interests does not violate your rights.
HOW DO WE USE YOUR INFORMATION WHEN PROVIDING OUR SERVICES TO YOU
We process personal data pursuant to legal bases, based on your consent and our legitimate business interests, inter alia for purposes listed below:-
2.1
Your data is used for enhancing and optimising user experience.
2.2
Configuring content display for device compatibility and performance.
2.3
Managing bookings, administering travel-related services and maintaining client relationship.
2.4
Facilitating engagements with agents, suppliers, and other business associates and Improving our service delivery.
2.5
Engaging with you for inquiries, complaints, or incomplete transactions.
2.6
Complying with legal and regulatory obligations, including cooperation with law enforcement.
2.7
To carry out promotional and marketing activities such as to identify and inform you of travel related services and products which might interest you, to process feedback and similar communications.
2.8
To personalise your experience of our Services by ensuring only relevant and useful marketing material is visible to you when using our Services
2.9
Notifying you of changes or updates to Services.
2.10
Initiating communication and correspondence.
2.11
We want to serve you better as a customer so if you contact us, for example by email, post, and phone or via social media, we may use personal data to provide clarification or assistance to you.
2.12
Monitoring use of our services to ensure data security and prevent fraudulent activity.
2.13
Managing operational and information security incidents.
2.14
Conducting internal research and analysis to enhance quality and develop new offerings.
2.15
We tailor and personalise our interactions with you to make them more relevant to your interests. These interactions include your journey around our Sites and the content that appears on it and marketing communications we send or show to you in our direct marketing campaigns and through online targeted advertising.
2.16
We monitor your usage and behavioural data to identify your interests. Where we identify that a product or service depicted in an advertisement aligns with your interests, we push those relevant advertisements to you.
PERSONAL DATA YOU GIVE TO US
3.1
You may provide us with your full legal name, date of birth, gender identity (including male, female, or other, as applicable), honorific or professional title, residential and electronic mail addresses, contact number(s), emergency contact details (next of kin), particulars of travel insurance coverage, declared dietary restrictions, passport details (including place of birth and nationality), Aadhar card id, visa-related information, and digitized copies or scans of your passport identification page and applicable visa documentation and other relevant data for using our services.
3.2
We may be required to collect certain health-related or medical data, including but not limited to pre-existing medical conditions, physical or cognitive disabilities, immunization or vaccination status, known food allergies, and details pertaining to prescribed medication requiring controlled storage (e.g., refrigeration). Such additional data required to provide personalised tour experience. Such information may also constitute 'personal data' under the provisions of the Digital Personal Data Protection Act, 2023 ("DPDP Act").
3.3
When you provide us your personal details for availing our Services or connect with us, including by email, post and phone or through social media, you may provide us with your personal details, including your name, e-mail address, post code, date of birth, phone number, travel preferences through such external sources.
3.4
You may also provide us with such other personal data such as your-
- Contact details provided during correspondence.
- Data submitted during participation in promotions, surveys or feedback mechanisms.
- If you contact us online, we may retain your correspondence logs, including call recordings and email interactions for training customer service purposes.
- Updated or rectified personal information communicated to us.
- Photographic and videographic data maybe collected incidentally during your package holiday with us. You are in full control of your privacy and in case you do not wish for your photographs are videos to be taken you may object using our standard grievance redressal mechanism as provided under Clause 12 of this Policy.
PERSONAL DATA WE COLLECT AND/OR OBSERVE ABOUT YOU
Based on how you have used our Services in the past and your activity on our website, social media channels, or with our contact centre, we collect the following personal data about you:
4.1
Details of the services we have provided to you in the past, including your previous travel arrangements, such as holidays and other purchases, and matters related to those arrangements, such as details of your previous enquiries, requirements or complaints.
4.2
Preferences and activity-related information to provide you curated advice and services.
4.3
Details of your visits to our Sites (including, but not limited to, traffic data, location data and weblogs) whether this is required for our own purposes or otherwise, and of the resources that you access, including information about you when you click on one of our adverts, including those shown on other organisations' websites.
4.4
We use third party technology services, such as Google Analytics and Facebook SDK to facilitate our services, we collect referring URLs, on-site activity patterns, and usage time. For further information regarding the manner in which your personal data is processed by third-party platforms, please consult their respective privacy policies, accessible via the following links: Google Privacy Policy and Facebook Privacy Policy. By accepting this Privacy Policy, you expressly acknowledge and consent to the collection, use, and processing of your personal data by such third-party entities in accordance with their applicable privacy policies.
4.5
Referral sources, payment sources, transaction values, and other bank and transaction related data.
4.6
Your location data when you turn on location settings and use geo-tagging functions within on your device.
4.7
Additional information necessitated by use of our Services.
4.8
Information about your computer (or mobile device/tablet), including, where available, your IP address, operating system, device location, browser type and details, and online identifiers such as cookie identification numbers, for system administration purposes, marketing purposes. Our Sites use cookies, and you hereby consent to the processing your data processed using cookies. This is statistical data about our users' browsing actions and patterns, and any reports we share do not identify any individuals.
PERSONAL DATA OF CHILDREN
Our platforms and Services are not intended for access or use by children below the age of eighteen (18) years. We do not knowingly solicit, collect, or process personal data from minors or any other individuals lacking the legal capacity to engage with our Sites and Services, without a legal basis for processing, which may include verifiable consent from a parent or legal guardian for the limited purpose of contractual performance. In the event that we learn of the inadvertent collection of personal data from a minor without such lawful basis, we shall promptly delete said data, unless retention is mandated by applicable law. You are encouraged to contact the consent manager in the manner as prescribed under Clause 7.2 hereinunder, if you suspect or become aware that personal data has been inadvertently collected from a minor.
PERSONAL DATA YOU PROVIDE ABOUT OTHER INDIVIDUALS
6.1
Personal data submitted on behalf of other individuals will be processed solely for the intended purpose of service delivery and as provided under this Privacy Policy.
6.2
By furnishing such data, you confirm that you have the necessary authority and have obtained appropriate consents for the disclosure and processing of such information.
YOUR RIGHT TO ACCESS YOUR PERSONAL DATA
7.1
As a Data Principal, you are entitled to submit a Data Access Request to obtain a copy of the your personal data, held by us. This right allows you to request access to the personal data we retain about you. Where we determine that disclosure is warranted in accordance with applicable data protection laws, we shall provide you or an authorized representative acting on your behalf with a copy of the relevant personal data, free of charge.
7.2
Your requests for accessing your personal data may be directed to our Consent Manager
7.3
In order to safeguard the confidentiality your personal data, we may require you to provide appropriate proof of identity, along with sufficient information regarding your interactions with us, to enable us to locate the personal data in question. Where a request is submitted by an authorized representative on your behalf, we will require written and duly signed authorization from you confirming that the individual or entity is authorized to act on your behalf.
7.4
Such documentation must be provided prior to our disclosure of any personal data to you or your representative. We reserve the right to withhold disclosure of personal data where such data contains information relating to other individuals, or where we are otherwise legally permitted or required to withhold such information.
7.5
Reasonable administrative fees may be levied for multiple copies of the data requested as per terms provided under this sub section.
CORRECTING AND UPDATING YOUR PERSONAL DATA
8.1
We prioritise the accuracy of your personal data and continue to enhance mechanisms for its correction and verification.
8.2
Please notify us of any amendments required to your personal data. You retain the right to request correction at any time.
WITHDRAWING YOUR CONSENT
Processing of your data is strictly based on your consent as per Clause 13 of this Privacy Policy, you reserve the right to withdraw it at any time. Such requests may be submitted to the Consent Manager.
NOMINATION PROCEDURE
You shall have the right to nominate, any other individual, who shall, in the event of your death or incapacity, exercise the rights enumerated under this Policy on your behalf in accordance with the terms set forth in this Privacy Policy. You may contact the Consent Manager in this regard.
DATA STORAGE AND SECURITY
11.1
We store your personal data securely within our internal private network using enterprise-grade SaaS software hosted on cloud infrastructure. The SaaS platform is configured to comply with applicable data protection regulations and includes built-in security controls such as access restriction, logging, and encryption. All data is encrypted both in transit and at rest using industry-standard protocols.
11.2
Access to stored data is restricted using role-based access controls, and protected by multi-factor authentication (MFA). Additional measures, including firewalls, intrusion detection systems, and routine vulnerability assessments, are used to safeguard our systems from unauthorized access or threats.
11.3
The transmission of information via the internet is not completely secure, and although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Services; therefore, any transmission is at your own risk. Once we have received your information, we will take all reasonable steps to keep your personal data secure and to try to prevent any unauthorised access, use, or loss of your data by putting in place appropriate security measures and limiting access to those who have a business need to know
MAKING A COMPLAINT
All communications including any complaints regarding the handling of your personal data must be directed to the Consent Manager. For the purpose of exercising your rights under this Privacy Policy, your single point of contact will be the Consent Manager. We encourage you to promptly communicate any concerns, requests, or inquiries related to your personal data to ensure timely and appropriate action.
CONSENT
“Consent" refers to the lawful basis for processing your personal data wherein you have clearly indicated your agreement for your data to be processed for a specified purpose as explicitly stated under this Privacy Policy. You hereby warrant that you have given you free, specific, informed, and unambiguous consent for processing your personal data as per the terms set forth in this Privacy Policy. You retain the right to withdraw your consent at any time by contacting us; such withdrawal will not affect the lawfulness of processing carried out prior to the withdrawal.
CHANGES TO THIS PRIVACY POLICY
This version supersedes all prior iterations. We reserve the right to revise this Privacy Policy, with material amendments being highlighted on our Sites. It is your sole responsibility to remain informed about updates to this Privacy Policy. Should you choose to withdraw your consent for the processing of your personal data, you may do so at any time by contacting the Consent Manager. Continued use of our Services after changes to the Privacy Policy will be deemed as your acceptance of those changes.