Table of Contents

1) Scope & Consent

This Policy applies to our online activities on the Site and to related communications (e.g., email, phone, WhatsApp) where we link or refer to this Policy. By using our Site or services, you consent to this Policy and agree to our practices described here.

Note: This Policy does not apply to information collected by third-party websites, apps, or services that are not controlled by us.

2) Information We Collect

2.1 Information You Provide

• Contact & Identity: name, phone, email, address, ID details (when required for permits/hotels), passport/visa info for cross-border tours.
• Booking Details: travel dates, pickup points, preferences, room type, passenger count, special requests (dietary/medical).
• Communications: messages and attachments you send via our forms, email, phone, or WhatsApp.
• Payment Info: limited details necessary to process payments via secure gateways (we do not store full card data on our servers).
• Testimonials/Media (optional): reviews, photos or videos you voluntarily share for promotional use (with consent).

2.2 Information Collected Automatically

Like most sites, we collect standard log information for analytics and security, such as IP address, browser type, ISP, device identifiers, pages visited, referring/exit pages, date/time, and click counts. These are not directly linked to personally identifiable information.

2.3 Cookies & Similar Technologies

We use cookies to remember preferences, improve performance, analyze traffic, and personalize content (see Cookies below).

3) How We Use Your Information

• Provide, operate, and maintain the Site and our travel services.
• Process inquiries, quotations, and bookings; issue vouchers/invoices; coordinate with suppliers.
• Personalize itineraries; improve service quality and user experience.
• Communicate updates, confirmations, alerts, policy changes, and support messages.
• Send marketing communications and offers (with your consent where required; you can opt out anytime).
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations (e.g., tax, regulatory, law enforcement requests).

4) Legal Bases for Processing (GDPR)

Where the EU/UK GDPR applies, we rely on these legal bases:

• Contract: to process bookings and deliver travel services you request.
• Consent: for certain marketing, cookies, and optional data you choose to provide.
• Legitimate Interests: to improve services, secure our systems, and prevent fraud (balanced with your rights).
• Legal Obligation: to comply with tax, accounting, and lawful requests.
• Vital Interests: limited processing in emergencies relating to your health/safety.

5) Sharing & Disclosures

We do not sell your personal information. We may share it in these scenarios:

• Service Providers / Independent Contractors: hotels, transport operators, drivers, guides, ticketing partners, insurance, and permit authorities—strictly as needed to fulfill your booking.
• Payment Gateways: to process payments securely (e.g., UPI, cards). We do not store full card data on our servers.
• IT/Cloud & Analytics Vendors: website hosting, backup, email/SMS/WhatsApp tools, analytics platforms.
• Legal & Safety: to comply with law, enforce policies, or protect rights/safety of our customers or the public.
• Business Transfers: in a merger, acquisition, or reorganization, data may be transferred under safeguards.

6) Cookies & Similar Technologies

Cookies are small files placed on your device. We use:

• Essential Cookies: required for site functionality (cannot be disabled via our tools).
• Analytics Cookies: to understand usage and improve performance.
• Functional Cookies: to remember preferences (e.g., language, region).
• Advertising/Remarketing Cookies: to show relevant ads (if used; see Analytics & Ads).

Your Choices: You can manage cookies in your browser settings (blocking/clearing). Some features may not work without essential cookies.

7) Analytics, Advertising & Social Integrations

We may use analytics (e.g., traffic measurement) to improve the Site. We may also use advertising/remarketing tools to reach interested audiences. These partners may set cookies or read your IP to measure performance and personalize content.

• You can opt out of interest-based ads through your browser/device settings and relevant ad preference tools.
• Social media buttons or embeds (e.g., Facebook, Instagram, YouTube) may collect data per their own policies.

Note: Madhu Tourism does not control third-party tracking; review each provider’s privacy policy for details and opt-out options.

8) Calls, WhatsApp & Other Messaging

• When you share your number or message us, you consent to being contacted via phone, SMS, or WhatsApp for service and support. Marketing messages will be sent only with consent where required, and you can opt out anytime.
• We may store call/message logs, including date/time, duration, and content necessary to deliver service and for dispute resolution.
• For WhatsApp, your data is processed per WhatsApp’s privacy policy in addition to ours.

9) Data Retention

We retain personal data only as long as necessary for the purposes described or as required by law (e.g., tax and accounting). Typical examples:

• Booking records & invoices: generally 5–7 years (legal/accounting requirements).
• Permit/ID copies (where required): retained only for the duration necessary to complete the trip and comply with local regulations, then securely deleted or archived.
• Marketing consent records: until you withdraw consent or the purpose ends.
• Support communications: retained for a reasonable period for service quality and disputes.

10) Security

We apply reasonable technical and organizational measures to protect personal data (encryption in transit where applicable, access controls, secure hosting, staff confidentiality). However, no system is 100% secure; transmission is at your own risk.

11) International Transfers

As a cross-border travel provider (e.g., India–Nepal routes), your data may be transferred to and processed in countries with different data protection laws. We take steps to protect your information in line with this Policy and applicable law.

12) Your Privacy Rights

12.1 GDPR (EU/UK) Rights

• Access: request copies of your personal data.
• Rectification: correct incomplete or inaccurate data.
• Erasure: request deletion in certain cases.
• Restriction: request limited processing in certain cases.
• Portability: receive data in a portable format.
• Object: object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: where processing is based on consent, you may withdraw at any time.

We may need to verify your identity and may not always be able to comply (e.g., where law requires retention), but we will explain our reasoning.

12.2 CCPA/CPRA (California) Rights

• Know/Access: request disclosure of categories and specific pieces of personal information collected.
• Delete: request deletion, subject to exceptions (e.g., legal compliance).
• Correct: request correction of inaccurate personal information.
• Opt-Out of Sale/Sharing: Madhu Tourism does not “sell” personal information, but if we engage in sharing for cross-context behavioral advertising, you may opt out.
• Non-Discrimination: you will not be discriminated against for exercising your rights.

How to Exercise Rights: Use the contact options in the Contact & Grievance Redressal section. We will respond within the timeframe required by law.

13) Children’s Privacy

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child provided personal data on our Site, please contact us so we can promptly remove it.

14) Third-Party Links & Services

Our Site may link to third-party websites or services. Those have their own privacy policies and practices. We are not responsible for their content or data handling. Please review their policies before providing information.

15) Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top indicates the latest version. Material changes will be highlighted on this page; continued use of our Site or services after changes constitutes acceptance.

16) Contact & Grievance Redressal

For privacy questions, requests (access/erasure/correction), or complaints, please contact:

Supplemental Notices

Log Files

We follow standard log practices: IP addresses, browser type, ISP, date/time stamp, referring/exit pages, and click counts, used for analytics, site administration, and demographic info. These are not directly linked to personally identifiable information.

Advertising Partners’ Privacy Policies

If we run third-party ads, ad servers/ad networks may use cookies, JavaScript, or web beacons. They automatically receive your IP to measure campaign effectiveness or personalize ads. We do not control these cookies. Review each partner’s privacy policy for details and opt-outs.

Third-Party Privacy Policies

Our Policy does not apply to other websites/advertisers. Consult their privacy policies for information about their practices and how to opt out.

Browser Cookie Controls

You can disable cookies through your browser options. For detailed guidance, visit your browser’s help pages. Disabling certain cookies may affect site functionality.