Privacy Policy

Information you give us

When you submit an enquiry, create an account, or make a booking, we collect your name, email address, WhatsApp number, travel dates, and preferences you share with us. If you pay online, payment details pass directly through Razorpay and are never stored on our servers.

Information collected automatically

When you visit our website, we automatically collect device information (browser type, IP address, operating system), the pages you view, and how you navigate between them. We use PostHog for product analytics. See our Cookie Policy for full details.

To deliver our service

We use your contact details and travel preferences to design and deliver your bespoke South India itinerary, send booking confirmations, share documents (hotel vouchers, PDF itineraries), and respond to your queries.

To improve our website

Aggregated, anonymised analytics help us understand how visitors use the site so we can improve content, navigation and the booking experience.

To send you relevant communications

With your consent, we may send occasional newsletters, travel inspiration or early access offers. You can unsubscribe at any time via the link in any email.

Service providers

We share your information with trusted partners who help us deliver the service — including hotels, transport operators, and wellness resorts in South India. These partners are contractually required to protect your data and not use it for any other purpose.

Technology providers

We use Razorpay (payments), Resend/Nodemailer (email), PostHog (analytics), Google OAuth (sign-in), and Twilio (WhatsApp). Each provider operates under their own privacy policy.

Legal requirements

We may disclose information if required by law, to protect our legal rights, or to prevent fraud or harm.

How long we keep your data

We retain your account information and booking records for 7 years from the date of your last booking for legal and accounting purposes. Enquiry-only records are retained for 2 years. You may request deletion at any time (subject to legal retention obligations).

Access, correction and deletion

You have the right to access the personal data we hold about you, correct any inaccuracies, and request deletion. If you are based in the European Union or UK, the GDPR gives you additional rights including data portability and the right to restrict processing.

How to exercise your rights

Email us at [email protected] with "Data Request" in the subject line. We will respond within 30 days.

How we protect your data

Our website runs over HTTPS. Passwords are hashed and never stored in plain text. Database access is restricted and audited. Payment data flows through PCI-DSS compliant Razorpay servers and never touches our systems.

Our website may link to third-party websites (hotel partners, tourism boards, review platforms). We are not responsible for the privacy practices of those sites and encourage you to read their policies.