Privacy Policy

Effective Date: Prathama Chaitra Shukla, Vikrama 2081 (9th April, Gregorian 2024)

Introduction

We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Data Protection and Privacy Act (DPDPA) 2023.

Definitions

• “Data Fiduciary” means Dhaama Planning & Services LLP, the entity that determines the purpose and means of processing your personal data.
• “Data Principal” refers to you, the individual to whom the personal data relates.
• “Personal Data” means any information relating to an identified or identifiable natural person, such as name, email address, phone number, contact information, travel preferences, passport details (if applicable), travel insurance information (if applicable), and browsing history.

Information We Collect

We collect personal data in several ways:

• Information you provide: This includes data you enter on our website when booking travel, creating an account, or contacting us (e.g., name, email address, phone number, contact information, travel preferences).
• Information from third parties: We may collect limited data from travel agencies, booking platforms, and other trusted partners to fulfill your travel bookings.
• Information from your use of our website: We may collect data about your browsing history and interactions with our website through cookies and other technologies.

Purpose of Data Collection

We collect and process your personal data for the following legitimate purposes:

• Providing travel services: We use your data to process your travel bookings, manage your itinerary, and provide customer support.
• Personalizing your experience: We use your data to offer tailored travel recommendations, suggest personalized experiences, and improve your overall experience with our services.
• Communicating with you: We use your data to send booking confirmations, updates, travel alerts, promotional offers (with your consent), and respond to your inquiries.
• Compliance with legal obligations: We may use your data to comply with legal and regulatory requirements.

Lawful Basis for Processing

 

We process your personal data based on one or more of the following lawful bases:

• Your consent: We will obtain your explicit consent before processing your data for certain purposes, such as sending marketing communications.
• Contractual obligations: We need your data to fulfill our contractual obligations with you, such as processing your travel bookings.
• Legitimate interests: We may use your data for our legitimate interests, such as improving our website and services, provided your interests and rights are not overridden.

Data Sharing and Disclosure

We may share your personal data with third-party service providers who assist us in providing travel services, such as airlines, hotels, tour operators, and payment processors. We only share data with partners who comply with data privacy regulations and have appropriate security measures in place.

Data Security Measures

We take the security of your personal data seriously and implement various measures to protect it, including:

• Encryption: We use industry-standard encryption technologies to protect your data at rest and in transit.
• Access controls: We restrict access to your personal data to authorized personnel who have a legitimate business need.
• Regular security audits: We conduct regular security audits to identify and address any potential vulnerabilities.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. We will delete your personal data when it is no longer needed unless we are required to keep it for legal, tax, or accounting purposes.

User Rights

Under the DPDPA 2023, you have the following rights regarding your personal data:

• Right to access and rectify: You have the right to access your personal data and request corrections if it is inaccurate or incomplete.
• Right to erasure (data deletion): You have the right to request the deletion of your personal data in certain circumstances.
• Right to object to processing: You have the right to object to the processing of your personal data for certain purposes, such as marketing communications.
• Right to withdraw consent: You have the right to withdraw your consent for the processing of your data at any time.

To exercise any of these rights, please contact us using the information provided in the “Contact Us” section below.

Grievance Redressal Mechanism

 

If you have any concerns or complaints regarding the processing of your personal data, you can contact our Grievance Officer at info@dhaama.com or +91 96434 35703. We will investigate your complaint promptly and provide a response within a reasonable timeframe.

Children’s Privacy

We do not knowingly collect personal data from children under the age of 18 without parental consent.

Policy Updates

We may update this privacy policy periodically to reflect changes in our privacy practices. We will notify you of any material changes to the policy through email or a notice on the website.

Legal Compliance

This privacy policy complies with relevant data protection laws, such as the GDPR or CCPA. We ensure compliance by regularly reviewing and updating our privacy practices.