Comprehensive and Legally Specific Privacy Policy for EASEMYYATRA
Last Updated: May 24, 2025
PLEASE READ THIS PRIVACY POLICY CAREFULLY AND IN ITS ENTIRETY. IT EXPLAINS HOW WE COLLECT, USE, STORE, DISCLOSE, AND PROTECT YOUR PERSONAL INFORMATION. YOUR USE OF OUR WEBSITE AND SERVICES CONSTITUTES YOUR CONSENT TO THESE PRACTICES.
Your privacy and the meticulous protection of your personal data are of paramount importance to EASEMYYATRA (referred to as "we," "us," or "our"). We are EASEMYYATRA, a company duly registered under section 58(1) of the Indian Partnership act.1932, and having its registered office at Ragannaguda,Abdullapurmet, Rangareddy, Telangana, India, 501510 has been entered in the Register of Firms as [No : 906 of 2025]. Our Goods and Services Tax Identification Number (GSTIN) is 36AALFE9222D1ZI. We operate under the brand name - Easemyyatra/website – www.easemyyatra.com and are committed to transparently detailing how we handle your personal information.
This Privacy Policy meticulously explains how we collect, use, store, disclose, share, and protect your personal information when you access, browse, interact with, or otherwise utilize our Website https://www.easemyyatra.com and engage with our extensive array of online and offline travel and tourism services. We are absolutely committed to processing your personal data in strict compliance with applicable Indian laws, including the principles outlined in the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), once fully effective.
By accessing, Browse, or utilizing our Website, or by directly booking, purchasing, or participating in any of our Services (whether online through our platform, via email, phone, or in person at our offices), you explicitly acknowledge that you have read, understood, and unequivocally agree to the terms of this Privacy Policy. Your continued use of our Website and/or Services signifies your informed consent to the processing of your personal data as described herein. If you do not agree with any part of these terms, please immediately cease using our Website and refrain from booking or utilizing any of our Services.
1. Definitions (Unambiguous Terminology)
To ensure absolute clarity, the following terms used in this Privacy Policy shall have the meanings ascribed to them below:
"Company," "We," "Us," "Our": Refers specifically to “EASEMYYATRA”, a company duly registered under section 58(1) of the Indian Partnership act.1932, and having its registered office at Ragannaguda, Abdullapurmet, Rangareddy, Telangana, India, 501510 has been entered in the Register of Firms as [No : 906 of 2025]. Our Goods and Services Tax Identification Number (GSTIN) is 36AALFE9222D1ZImited], and operating under the registered brand name/website “Easemyyatra” /website – www.easemyyatra.com.
"Customer," "You," "Your": Refers to any individual, group, corporate entity, or any other legal person or organization that accesses our Website, makes a booking, purchases, or participates in, or intends to utilize any Service provided or facilitated by the Company.
"Personal Information": Refers to any information that relates to a natural person, which can be used to identify that person, either directly or indirectly, in conjunction with other information available or likely to be available with us. This includes, but is not limited to, name, address, email, phone number, identification numbers, and in certain contexts, sensitive personal data.
"Sensitive Personal Data": Refers to specific categories of Personal Information that require a higher level of protection under Indian law and other applicable regulations. This may include, but is not limited to, health information, biometric data, caste or ethnic origin, political opinions, religious beliefs, sexual orientation, or precise financial account details (although we do not directly store full payment card details on our servers).
"Service(s)": Refers collectively to the entire range of products and services offered, sold, or facilitated by the Company, encompassing, but not exclusively limited to:
- Domestic and International Tour Packages (including pre-defined itineraries, customized tours, group tours, and fixed departure tours).
- Online and Offline Flight Bookings (both domestic within India and international).
- Online and Offline Hotel Reservations (domestic and international accommodation bookings).
- Offline Car & Coach Rentals (local point-to-point transfers, hourly rentals, outstation tours, covering diverse vehicle types from private cars to Multi-Axle Coaches).
- Events & Celebrations Management (inclusive of corporate events, private functions, weddings, and special occasions).
- Adventure Trips (e.g., trekking, rafting, mountaineering, safaris, wildlife tours).
- MICE (Meetings, Incentives, Conferences, Exhibitions) services (comprising venue selection, logistics, accommodation, travel arrangements for corporate clients).
- Day Outing packages for Families & Corporates.
- Homestays (private residential accommodation arrangements).
- DMC (Destination Management Company) Services, with a particular focus on Hyderabad and surrounding regions.
- Entry Tickets for Amusement Parks, Theme Parks, Water Parks, and Adventure Parks.
- Bus & Train Tickets (both public and private operators).
- Pilgrimage Tour Packages (including those specifically organized by the Company or through third-party operators).
- Excursion or Study Tours (educational or recreational trips).
- Daily / Weekly Tours to specific destinations (e.g., Shirdi, Srisailam, Tirupathi), which may be conducted via:
- The Company's owned or leased private cars/coaches.
- State Tourism Development Departments (e.g., Telangana State Tourism Development Corporation, Andhra Pradesh Tourism Development Corporation) utilizing their designated vehicles, including Multi-Axle Coaches.
- Third-party private bus operators.
- Special Flight Packages to pilgrimage destinations (e.g., Shirdi, Tirupati), which bundle flight components with ground services such as transfers, accommodation, and Darshan/temple visit arrangements.
"Supplier(s)": Refers to any independent third-party entity, principal, or provider of services or products that are directly utilized or arranged by the Company as a component of the Services you book. This includes, but is not limited to: airlines, hotels, resorts, guesthouses, homestay owners, other accommodation providers, ground transport operators (including private taxi operators, bus operators, coach companies, railway operators, and specifically, State Tourism Development Departments), tour operators, event venues, local guides, activity providers, amusement/theme parks, pilgrimage site authorities (e.g., Tirumala Tirupathi Devasthanams - TTD, Shri Saibaba Sansthan Trust), travel insurance providers, and any other third-party service provider or vendor whose services constitute a part of your overall booking.
"Website": Refers specifically to the Company's official, publicly accessible website located at https://www.easemyyatra.com, including any sub-domains, mobile applications, or associated digital platforms operated by the Company.
2. What Information Do We Collect? (Precise Data Types)
We collect various types of information meticulously necessary to provide and improve our Services, facilitate your bookings, ensure operational efficiency, and deliver a seamless, secure, and personalized experience for you.
2.1. Personal Information (Identifiable Information):
Contact & Demographic Details: This includes your full legal name (exactly as it appears on your official Government-issued photo identification), primary and alternative email addresses, primary and alternative mobile phone numbers (for immediate communication regarding bookings), complete residential address, date of birth, gender, and nationality.
Identification & Travel Document Information: For specific bookings, regulatory compliance, or visa processing, we collect explicit details from your Government-issued photo ID. This may include: Passport number, Passport expiry date, place of issue, Visa details (type, number, expiry), Aadhar Card number, Driving License number, Voter ID number.
Important Note on Physical IDs: While we collect these specific identification numbers as necessary for booking and compliance with Supplier or governmental requirements, we generally do not store full scanned copies or images of your physical ID documents on our servers unless explicitly mandated by law for a specific, identifiable booking/compliance purpose (e.g., certain visa applications, specific pilgrimage site registrations) and only with your explicit and informed consent.
Travel & Booking Specifics: This encompasses precise details relevant to your travel and the specific Service you book, including: precise flight/train/bus details, specific hotel preferences (e.g., smoking/non-smoking room, bed type, adjacent rooms), detailed dietary requirements (e.g., vegetarian, halal, allergies), special assistance needs (e.g., wheelchair access, medical equipment storage), emergency contact details (name and phone number of a non-travelling person), preferred pickup/drop-off locations for tours/rentals, and your comprehensive historical travel and booking records with us.
Financial & Payment Information: This includes your billing address and limited payment instrument details such as the type of card used (e.g., Visa, MasterCard) and the last few digits of your card number. Crucially, we do not directly store highly sensitive financial details like full credit/debit card numbers, CVVs (Card Verification Value), or complete bank account numbers on our servers. All financial transactions are processed securely and directly by our trusted, PCI DSS compliant third-party payment gateway partners.
Sensitive Personal Data (Voluntary & Explicit Consent Required): If you voluntarily choose to provide information about specific health conditions, severe allergies, mobility issues, or any other sensitive personal data (e.g., for adventure trips where medical fitness is critical, pilgrimage tours where specific health needs require accommodation, or to ensure comfort/safety during any tour), this information is collected solely for the explicit purpose of accommodating your stated needs, ensuring your safety during the Service, or meeting a specific Supplier/legal requirement. This type of data is handled with the highest level of care and processed only with your explicit and informed consent.
Children's Information: When you book Services that include children or minors, we collect their full names, age, and any other required details to facilitate their booking and participation (e.g., for child-specific tickets, rooming arrangements, age-restricted activities). This information is collected with the explicit understanding and representation from you that you are the parent or legal guardian providing verifiable consent for the processing of their data.
Corporate Information (for MICE/Corporate Bookings): For corporate clients, this includes the company name, Goods and Services Tax Identification Number (GSTIN), complete corporate billing address, authorized contact person details (name, designation, contact), and employee lists (for group bookings) along with specific event requirements and specifications.
2.2. Non-Personal Information (Non-Identifiable Information):
Usage Data: Information about your interactions with our Website, which is typically aggregated or anonymized where possible. This includes your IP address, browser type and version, operating system, device type (e.g., desktop, mobile), pages viewed, referring/exit pages, time spent on pages, clickstream data, navigation paths, and general patterns of Website usage. This data is primarily collected for analytical purposes to understand user behavior and improve our services.
Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar tracking technologies (as detailed in Section 7).
3. How Do We Collect Your Information? (Sources of Data)
We collect information through various secure, transparent, and defined methods:
3.1. Directly from You:
This is the primary method of collection. We collect information when you:
- Create or register an account on our Website, or manage your existing profile.
- Initiate or complete a booking, or purchase any Service, whether online through our Website or offline via our sales representatives (e.g., phone, email, in- person).
- Fill out inquiry forms, request quotes, subscribe to our newsletters, or opt-in for marketing communications.
- Participate in surveys, contests, promotions, or loyalty programs.
- Leave reviews, provide feedback, or submit testimonials about our Services.
- Communicate with us via email, phone calls, live chat, social media interactions, or in-person interactions at our offices.
3.2. Automatically (Through Technology):
We automatically collect certain information as you interact with our digital platforms:
- As you navigate and interact with our Website, we automatically collect usage data through cookies and other tracking technologies.
- From our server logs when your device accesses our online platforms.
3.3. From Third Parties (When Essential and Lawful):
We may receive information about you from the following third-party sources, strictly when necessary for service delivery or with appropriate legal basis:
- Suppliers: Such as airlines, hotels, other tour operators, or payment gateways, who share necessary details with us to process and fulfill your bookings (e.g., booking confirmations, payment status).
- Online Travel Agencies (OTAs) or Distribution Partners: If you book our Services through their platforms, they may transmit necessary booking details to us to facilitate the service provision.
- Referral Partners: Who may provide your details to initiate a booking or inquiry on your behalf.
- Publicly Available Sources: As permitted by applicable law (e.g., public business registries, public professional profiles).
- We ensure that any such third parties are legally authorized or have obtained your explicit consent to share your information with us before such sharing occurs.
4. How Do We Use Your Information? (Precise Purposes of Processing)
We use your information for the following specific and legitimate purposes, which are indispensable for providing and improving our Services, facilitating bookings, ensuring operational efficiency, and delivering a secure, seamless, and personalized experience. Our processing of your personal data is primarily based on: (i) contractual necessity (to fulfill our obligations to you), (ii) our legitimate business interests, or (iii) your explicit consent (where required by law).
4.1. To Provide, Manage, and Fulfill Services (Contractual Obligation & Essential Service Delivery):
Booking Processing & Confirmation: To accurately process and definitively confirm your bookings for all Services, including flights, hotels, tour packages, car rentals, event arrangements, and ticket purchases.
Secure Payment Facilitation: To facilitate secure and seamless processing of your financial transactions through our trusted payment gateway partners, ensuring that your bookings are confirmed.
Issuance of Travel Documents: To issue and promptly send you all essential travel documents, such as comprehensive booking confirmations, e-tickets, service vouchers, detailed itineraries, and official invoices.
Operational Logistics & Supplier Coordination: To meticulously coordinate all operational aspects of your travel and Service logistics. This involves the essential sharing of your necessary personal details with relevant Suppliers, which may include, but is not limited to: airlines (for flight manifest, PNR creation), hotels (for guest lists, room allocation), car/coach operators (for transfers, vehicle allocation, driver communication), State Tourism Development Departments (for passenger manifests on their coach tours, itinerary coordination), private bus operators, local guides, event venues, amusement parks (for ticket validation), train operators, homestay owners, and other local partners/DMC associates.
Specific Service Operational Requirements:
Car & Coach Rentals: To assign appropriate drivers, allocate suitable vehicles, plan optimal routes, and manage necessary toll/permit requirements.
MICE & Events: To manage attendee lists, coordinate with event venues, and fulfill specific event setup, execution, and logistical requirements.
Homestays: To facilitate booking with homestay owners and communicate any specific property rules or host requirements.
Amusement/Theme/Water/Adventure Parks: To facilitate park access and manage any associated rules (e.g., height/weight restrictions for rides) by providing necessary attendee details to park authorities.
Bus & Train Tickets: To process ticket bookings, including adherence to operator-specific rules (e.g., boarding points, baggage limitations).
Pilgrimage Tours (including Special Flight Packages to Shirdi and Tirupati): To arrange intricate pilgrimage tours, including specific Darshan timings, temple entry requirements, and adherence to pilgrimage site regulations (e.g., sharing details with TTD or Shri Saibaba Sansthan Trust for entry management and compliance).
Customer Support & Communication: To respond promptly and comprehensively to your inquiries, requests, feedback, and to provide dedicated customer support throughout your booking and travel journey.
Transactional Communications: To send you important non-promotional transactional updates, changes, or alerts regarding your booked Services (e.g., flight schedule changes, tour itinerary updates, reminders for departures/check-ins).
4.2. To Improve and Personalize Services (Legitimate Interests & Analytical Purposes):
Service Enhancement & Development: To meticulously analyze customer preferences, travel patterns, and feedback (e.g., through surveys, reviews, direct communication) to understand market demand, identify emerging trends, and continuously enhance and develop our existing and new Service offerings.
Internal Research & Optimization: To conduct internal research, data analysis, and statistical studies to optimize our operational efficiency, refine our pricing strategies, and improve overall service delivery models.
Website Functionality & User Experience: To improve our Website's functionality, user interface, navigation, and overall content based on usage data and user feedback, aiming for a more intuitive and seamless online experience.
Personalized Recommendations: To personalize your experience by recommending relevant tours, destinations, hotels, or other Services that align with your past bookings, Browse history, stated preferences, and demographic information.
4.3. Marketing and Communication (Consent-Based or Legitimate Interests):
Promotional Communications: To send you carefully curated promotional offers, newsletters, and information about new tours, special deals, discounts, or relevant travel news that we believe may be of legitimate interest to you. You have the full right to opt-out of these marketing communications at any time (see Section 7 for details).
Promotional Activities: To administer surveys, contests, loyalty programs, or other promotional activities.
Personalized Advertising: To personalize advertisements and content displayed to you on our Website and across third-party advertising platforms (e.g., Google Ads, Meta platforms, other ad networks) based on your Browse history, interests, and demographic profile, in compliance with applicable advertising regulations.
4.4. Security and Legal Compliance (Legal Obligation & Legitimate Interests):
Fraud Prevention & Security: To detect, prevent, and thoroughly investigate fraud, unauthorized access attempts, security incidents, and other illegal or prohibited activities to protect our systems, your data, and our business interests.
Legal & Regulatory Compliance: To comply with all applicable Indian laws, regulations, court orders, government mandates, and legitimate requests from regulatory bodies (e.g., Ministry of Tourism, immigration authorities, law enforcement agencies, tax authorities, pilgrimage site official bodies, State Tourism Departments). This includes reporting necessary traveler manifests or other specific data as legally required.
Enforcement of Terms & Protection of Rights: To enforce our General Terms and Conditions and any Service-Specific Terms, and to protect our legal rights, intellectual property, physical property, or the safety of our Company, our employees, our customers, and the general public.
Dispute Resolution: To effectively manage and resolve any disputes, complaints, or grievances in accordance with legal requirements and our internal policies.
5. How Do We Share Your Information? (Specific Disclosures and Purposes)
We may share your personal information with the following categories of recipients, strictly only to the extent necessary for the specific purposes outlined in this Privacy Policy, and always with appropriate contractual and technical safeguards to ensure data protection and confidentiality. We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes without your explicit and separate consent.
5.1. Our Service Providers and Suppliers (Absolutely Essential for Service Delivery):
This is the most crucial category for data sharing. We share your personal information with:
Travel & Tour Suppliers: Airlines, hotels, car/coach rental companies, bus/train operators, homestay owners, local tour operators, guides, event venues, amusement parks, State Tourism Development Departments (e.g., for submission of passenger manifests for their coach tours, for obtaining required permits), and other third-party service providers who are indispensable for fulfilling your specific bookings and providing the requested Services. For example, your flight booking details are shared with the airline, hotel reservation details with the hotel, and specific passenger identification information with State Tourism Departments for their regulated coach tours and with pilgrimage site authorities (e.g., TTD, Shri Saibaba Sansthan Trust) for Darshan entry management and compliance.
Payment Gateway Providers: For the secure processing of your financial transactions. These providers are independently and handle sensitive payment data directly in an encrypted environment.
Technology & Operational Partners: For website hosting, data analytics platforms, email service providers, customer relationship management (CRM) systems, IT support, cloud storage solutions, and other essential operational functions that support our business infrastructure.
Marketing and Advertising Partners: To manage our promotional campaigns and personalize advertising efforts. We often share aggregated or anonymized data for these purposes, or use techniques that do not directly identify you where possible and comply with applicable advertising regulations.
We ensure that such service providers and Suppliers are contractually obligated to protect your information, use it solely for the specific purposes for which we disclose it to them, and process it strictly in accordance with our instructions and applicable Indian data protection laws.
5.2. Group Companies & Affiliates:
We may share your information with our affiliated entities or companies within our corporate group for legitimate business operations, internal analysis, shared service functions (e.g., centralized customer support), and mutual service enhancement, provided they adhere to privacy standards and data protection measures equivalent to ours.
5.3. Government Authorities and Legal Compliance (Strictly as Mandated):
We may disclose your personal information when legally mandated or reasonably necessary:
- To comply with applicable Indian laws, regulations, judicial orders, governmental directives, or legitimate requests from regulatory bodies (e.g., Ministry of Tourism, immigration authorities, law enforcement agencies, tax authorities, pilgrimage site official bodies).
- To respond to legitimate requests from public and government authorities for purposes of national security, public interest, or legal proceedings.
- To proactively protect and enforce our legal rights, intellectual property, physical property, or the safety of our Company, our employees, our customers, and the general public (e.g., in cases of suspected fraud or illegal activity).
5.4. Business Transfers (Due Diligence & Acquisition):
In the event of a merger, acquisition, divestiture, corporate restructuring, sale of all or a portion of our company assets, financing, or a transfer of all or a portion of our business to another entity, your personal information may be transferred as part of the business assets. We will provide you with reasonable notification via email and/or a prominent notice on our Website of any such change in ownership or control of your personal information, and outline any new privacy policy that will apply.
5.5. With Your Explicit Consent:
We may share your information with other third parties when you provide us with explicit, specific, and informed consent to do so for a particular purpose not otherwise covered by this Privacy Policy. This consent will be sought separately for each such instance.
6. Data Retention (Defined Periods)
We retain your personal information only for as long as is strictly necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, and for satisfying any legal, accounting, or reporting requirements. This includes the duration of our ongoing contractual relationship with you and beyond, as required by law.
Transactional Data: Booking and transactional data (e.g., flight manifests, hotel guest lists, payment records, invoices, booking confirmations, communication logs related to bookings) will be retained for a period required by Indian tax, accounting, and other relevant regulatory laws (typically 7-8 years, or longer if specifically mandated by certain regulations pertinent to the travel industry, or for ongoing legal proceedings).
Consent-Based Data: Personal data processed based on your consent (e.g., for marketing communications) will be retained until you withdraw your consent or opt-out from such communications.
Customer Relationship Data: Information related to your customer profile and service history may be retained for a reasonable period beyond your last booking to provide better customer service, personalize future offers, manage loyalty programs, and for analytical purposes, unless you specifically request deletion.
Usage Data: Non-personal usage data (e.g., anonymized website analytics) may be retained for aggregated analytical purposes for longer periods to continually improve our Services.
Upon the expiry of the relevant retention period, or when the data is no longer necessary for the stated purposes, we will securely delete or irreversibly anonymize your personal information in a manner that prevents re-identification, or we will take steps to de-identify it to ensure it is no longer personal data.
7. Your Rights and Choices Regarding Your Personal Information (Actionable Rights)
Subject to applicable Indian laws and regulations (including the Digital Personal Data Protection Act, 2023, once fully effective and its corresponding rules implemented), you, as a Data Principal, may have the following specific rights regarding your personal information held by us. To exercise any of these rights, please contact our designated Grievance Officer using the precise details provided in Section 14:
7.1. Right to Access and Correction:
You have the explicit right to request access to the personal information we hold about you. You also have the right to request the correction, amendment, or updating of any inaccuracies or incompleteness in your personal data. We will endeavor to provide you with a copy of your personal data in a readable format.
7.2. Right to Erasure (Deletion):
You may request the deletion or removal of your personal data. However, please be aware that this right is subject to our overriding legal obligations (e.g., retaining records for tax, accounting, or regulatory compliance), legitimate business interests (e.g., fraud prevention, dispute resolution), or contractual necessities (e.g., active bookings, ongoing service provision). We will comply with your request unless a legal or operational impediment prevents us from doing so.
7.3. Right to Opt-Out of Marketing Communications:
You have the absolute right to opt-out of receiving marketing emails, promotional offers, and newsletters from us at any time. You can typically do this by following the clear "unsubscribe" instructions prominently included in each marketing email you receive. Alternatively, you can contact our customer service or Grievance Officer directly to manage your communication preferences. Please note that even if you opt-out of marketing communications, we reserve the right to send you non-promotional, essential messages related to your confirmed bookings, critical service updates, security alerts, or customer service issues that are vital for your service provision.
7.4. Right to Withdraw Consent:
Where we rely on your explicit consent as the legal basis for processing your personal data (especially for Sensitive Personal Data or specific marketing activities), you have the right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Please be fully aware that withdrawing consent for essential data processing (e.g., sharing your name with an airline for a flight booking) may directly impact our ability to provide certain Services to you, and may result in cancellation of such services.
7.5. Right to Grievance Redressal:
You have the explicit right to easily access a grievance redressal mechanism for any issues, complaints, or concerns related to the processing of your personal data. We are committed to a fair and timely resolution of your grievances (refer to Section 14).
We may require specific verifiable information from you (e.g., a copy of an ID document for verification purposes, or specific booking details) to help us confirm your identity and ensure the security of your personal data when you exercise these rights, thereby preventing unauthorized access to your information.
8. Cookies and Tracking Technologies (Detailed Explanation)
We utilize cookies and similar tracking technologies for various distinct purposes, as detailed below. These technologies involve small data files placed on your device (computer, tablet, smartphone) when you visit our Website.
8.1. Essential Cookies (Strictly Necessary):
These cookies are indispensable for the fundamental operation of our Website and enable core functionalities such as secure login, user authentication, managing your shopping cart, and processing transactions. Without these cookies, certain Services on our Website cannot be provided. Your consent is not typically required for these as they are necessary for the functioning of the website itself.
8.2. Analytical/Performance Cookies:
These cookies collect anonymous or aggregated information about how visitors use our Website (e.g., which pages are most visited, how long users stay on a page, sources of traffic). This data helps us understand user behavior, perform internal research, identify areas for improvement, and optimize our Website's performance and design.
8.3. Functionality Cookies:
These cookies allow our Website to remember choices you make (e.g., language preference, region, login details) and provide enhanced, more personalized features. They can also be used to remember changes you have made to text size, fonts, and other parts of web pages that you can customize.
8.4. Targeting/Advertising Cookies:
These cookies are used to deliver advertisements that are more relevant to you and your interests. They are often placed by third-party advertising networks with our permission and are used to track your Browse habits across different websites. They also help limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns.
8.5. Your Control Over Cookies:
You have explicit control over cookies. Most modern web browsers allow you to manage your cookie preferences through their settings. You can configure your browser to block all cookies, accept only certain types of cookies, or to notify you when a cookie is being sent, allowing you to decide whether to accept it. Please be fully aware that disabling or rejecting cookies, especially essential and functionality cookies, may significantly affect the functionality and your overall user experience on our Website, and some Services or features may not function correctly or optimally.
9. Data Security Measures (Robust Protection)
We are deeply committed to protecting your personal information. We implement and maintain robust, industry-standard technical, administrative, and physical security measures designed to safeguard your personal data from unauthorized access, accidental loss, misuse, alteration, destruction, or unauthorized disclosure. These comprehensive measures include, but are not limited to:
9.1. Data Encryption:
Utilizing industry-standard encryption protocols (e.g., SSL/TLS - Secure Sockets Layer/Transport Layer Security) for all data transmitted between your browser and our servers, ensuring secure and confidential communication.
9.2. Network Security:
Employing advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to protect our networks and systems from unauthorized access, cyber-attacks, and malicious activities.
9.3. Access Controls:
Implementing strict internal access controls, limiting access to your personal information only to authorized employees, contractors, and agents who have a legitimate and demonstrable business need to access it. All such personnel are bound by stringent confidentiality obligations.
9.4. Secure Payment Processing:
All financial transactions are handled by third-party payment processors. We do not store full payment card details on our servers, thereby leveraging the highest industry-standard security for your sensitive payment data.
9.5. Regular Security Audits & Vulnerability Management:
Conducting periodic security assessments, vulnerability scans, and penetration testing by independent cyber security experts to proactively identify and promptly address potential security weaknesses or vulnerabilities in our systems.
9.6. Data Minimization & Anonymization:
Adhering to the principle of collecting and retaining only the data that is necessary for the stated purposes, and anonymizing or de- identifying data whenever possible.
9.7. Employee Training:
Providing regular and mandatory training to our employees on data privacy principles, data handling protocols, and best security practices to foster a strong, privacy-aware culture across the organization.
While we strive to use commercially acceptable and industry-standard means to protect your personal information, it is important to acknowledge that no method of transmission over the Internet or method of electronic storage can be guaranteed as 100% secure. Therefore, while we endeavor to protect your personal information, we cannot guarantee its absolute security. You also play a crucial role in protecting your data by maintaining the confidentiality of your login credentials and using strong, unique passwords for your online accounts.
10. Links to Third-Party Websites (Disclaimer)
Our Website and Services may contain prominent links to external third-party websites, applications, or services (e.g., airline official websites, hotel booking platforms, payment gateways, social media sites, **official State Tourism Department websites, official pilgrimage site websites.
