Travetory (“Travetory”, “we”, “us”, or “our”) respects your privacy and is committed to handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal information when you enquire about, purchase, or use our travel-related services.

Travetory operates as a travel intermediary and facilitates services such as flights, hotels, holiday packages, customised itineraries, transfers, visa assistance, travel insurance, cruises, group tours, activities, and sightseeing.

This Privacy Policy should be read together with our Terms & Conditions, Cancellation Policy, and Refund Policy.

1. About Travetory

Travetory is a partnership firm based in Mumbai, Maharashtra, India.

• Business name: Travetory

• GSTIN: 27AAXFT7360B1ZR

• Email: ops@travetory.com

• Phone / WhatsApp: +91 77097 24558

• Address: 3rd floor, Flat no 310/311, Siddheswar Bldg, LT Dilip Gupte Marg, Mahim West, Mumbai - 400016, Maharashtra, India

For privacy-related questions or requests, you may contact us using the details above.

2. Personal Information We Collect

Depending on the services you request and the nature of your booking, we may collect the following categories of personal information:

2.1 Contact Information

• Name

• Phone number

• Email address

• Address, where required

2.2 Traveller Information

• Date of birth

• Gender

• Nationality

• Other traveller details required to arrange the requested service

2.3 Identity and Travel Documents

• Passport details

• Visa information

• Identity document details

• Other travel-document information required for bookings or related assistance

2.4 Travel Preferences and Itinerary Information

• Travel dates and destinations

• Requested itinerary, accommodation, transport, or activities

• Preferences or requirements voluntarily provided in connection with a travel enquiry or booking

2.5 Billing and Transaction Records

• Billing address

• GSTIN, where applicable

• Payment transaction references, payment status, and receipts

• Invoice and accounting-related information

We do not request or retain your UPI PIN, net-banking password, or banking authentication credentials as part of our ordinary payment reconciliation process.

Please provide only information that is relevant to your enquiry, booking, or requested service.

3. How We Collect Personal Information

We currently collect personal information through our interactions with customers, including:

• WhatsApp conversations and messages

• Phone calls

• Emails

• In-person or offline interactions

• Documents or information you voluntarily provide for travel arrangements

We may also receive information about other travellers from the person making a booking on their behalf.

At present, our website is not used for customer contact, enquiry, or newsletter forms. If we introduce such features, this Policy may be updated to explain the relevant collection and use of information.

4. How We Use Personal Information

We may use personal information for purposes reasonably connected with our travel services, including:

• Responding to enquiries and preparing quotations

• Arranging, confirming, managing, and servicing travel bookings

• Sharing necessary traveller details with relevant airlines, hotels, travel operators, insurers, visa-service providers, or other suppliers

• Issuing or facilitating tickets, vouchers, confirmations, invoices, and travel updates

• Processing or reconciling payments and maintaining accounting or tax records

• Facilitating visa assistance and travel-insurance services

• Responding to customer-support requests, complaints, cancellations, modifications, and refund enquiries

• Communicating important booking-related information

• Sending promotional communications to existing customers, subject to applicable law and your preferences

• Meeting applicable legal, regulatory, accounting, or other legitimate business requirements

We do not use personal information for unrelated purposes where such use would be inconsistent with applicable law or this Policy.

5. Sharing of Personal Information

We may share relevant personal information with third parties where reasonably necessary to provide or facilitate the services you request.

5.1 Travel Suppliers and Service Providers

Depending on your booking, information may be shared with airlines, hotels, travel operators, transport providers, insurers, visa-service providers, activity operators, or other relevant suppliers.

The information shared will depend on the service being arranged. For example, an airline or hotel may require traveller names and identity or travel-document details to process a booking.

These third parties may process information under their own terms, privacy policies, and legal obligations.

5.2 Technology and Business Tools

We use Google services, including Gmail and Google Drive, and spreadsheets or other business tools to manage enquiries, bookings, communications, and related records.

Information may be processed or stored through these tools, subject to the relevant provider’s terms and privacy practices.

5.3 Legal or Other Permitted Disclosures

We may disclose information where reasonably necessary to comply with applicable law, respond to lawful requests, protect legal rights, address disputes, or prevent fraud or misuse, subject to applicable legal requirements.

We do not sell customer personal information. We do not share customer information with third parties for their unrelated advertising purposes.

6. International Travel and Cross-Border Processing

Where you request international travel or related services, relevant personal information may need to be shared with overseas airlines, hotels, travel suppliers, visa authorities, insurers, or other service providers.

Such recipients may process information in countries outside India. The location of processing or storage may depend on the relevant supplier or technology provider.

Where applicable, we will handle such information in accordance with relevant legal requirements. Third-party recipients may also be subject to their own privacy policies and applicable laws.

7. Payments and Financial Information

Travetory accepts payments through methods such as UPI and net banking.

For payment reconciliation, accounting, and related business purposes, we may retain transaction IDs or references, payment status, receipts, and associated invoice records.

We do not ordinarily collect or retain your UPI PIN, net-banking password, or banking authentication credentials.

Payment transactions may be subject to the terms and privacy practices of the relevant bank or payment service provider.

8. Data Storage and Access

Customer information may be maintained in business email inboxes and attachments, WhatsApp conversations and shared documents, office computers or laptops, Google Drive, spreadsheets, and other business tools used for enquiry and booking management.

Access to customer information is intended to be limited to Travetory partners and relevant employees who need the information for booking, customer-support, or related business purposes.

Customer records maintained in spreadsheets are intended to be accessible only to authorised Travetory partners and relevant employees.

We use dedicated business devices for handling customer information. These devices are password- or PIN-protected and configured to lock automatically after a period of inactivity.

While we take steps intended to limit access to customer information, no storage method or electronic communication system can be guaranteed to be completely secure.

9. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, managing bookings, addressing customer requests, maintaining business records, and meeting applicable legal or regulatory obligations.

Booking, payment, invoice, and tax records may be retained for the period required by applicable law or legitimate accounting and business needs.

Travel documents and other personal information are intended to be retained only for as long as reasonably necessary for the relevant booking, service, legal obligation, dispute, or other legitimate purpose.

When information is no longer reasonably required, we may take steps to delete, securely dispose of, or anonymise it, subject to applicable law and legitimate retention requirements.

Deletion from active records may not immediately remove information from all systems, communications, or records maintained by third-party service providers.

10. Marketing Communications and Opt-Out

We may send promotional messages to existing customers through WhatsApp or email. Such communications are currently sent manually rather than through a dedicated third-party marketing platform.

You may opt out of promotional communications at any time by contacting us through WhatsApp, email, phone, or another reasonable communication channel.

After receiving an opt-out request, we will take reasonable steps to stop sending promotional communications, subject to applicable law.

Opting out of marketing will not prevent us from sending essential service-related communications, such as booking confirmations, tickets, payment-related messages, travel reminders, important itinerary updates, or responses to your requests.

11. Booking Communications

We may use WhatsApp and email to communicate booking confirmations, tickets, vouchers, reminders, travel updates, support responses, and other information relevant to your requested services.

If you book travel for another person, you should ensure that you are authorised to provide their information and that the information is accurate, where applicable.

Please be aware that WhatsApp, email, and other communication services may be subject to the privacy and security practices of their respective providers.

12. Children’s Personal Information

We may process a child’s personal information where it is necessary to arrange travel or a related service.

Such information should be provided by a parent, legal guardian, or other person legally authorised to act on the child’s behalf.

We will handle children’s personal information in accordance with applicable law and take reasonable steps appropriate to the circumstances. We do not knowingly seek to collect children’s personal information beyond what is reasonably necessary for the requested service.

13. Cookies, Analytics, and Website Tracking

At present, we do not use analytics or tracking cookies to monitor visitors through our website.

If website analytics, tracking technologies, or similar features are introduced in the future, we may update this Policy and provide notices or obtain consent where required by applicable law.

Third-party websites linked from our website may use their own cookies, analytics, or tracking technologies, which are governed by their respective privacy policies.

14. Automated Decisions and Profiling

Travetory does not currently use automated profiling or automated decision-making to determine whether to provide travel services or customer support.

Our booking and customer-support activities are handled manually, although third-party travel suppliers may use their own systems and processes.

15. Your Privacy Rights and Requests

Subject to applicable law, you may have rights concerning your personal information, which may include requesting access to, correction of, or deletion of certain information, or raising concerns about how it is handled.

You may submit a privacy-related request using:

• Email: ops@travetory.com

• WhatsApp / Phone: +91 77097 24558

Please provide sufficient information for us to understand and review your request. We may seek reasonable verification of your identity or, where a request concerns another traveller, verification that you are authorised to act on their behalf.

We will review and respond to requests within a reasonable period, subject to applicable legal requirements, the nature of the request, and any necessary verification.

Requests for deletion may be subject to legal retention requirements, pending bookings, disputes, accounting obligations, or other lawful grounds for retaining information.

Where a request concerns information held by a third-party supplier or service provider, we may need to refer you to that party or coordinate with it, as appropriate.

16. Data Security and Incident Handling

We take reasonable steps appropriate to our business operations to limit access to customer information and protect it from unauthorised access, misuse, loss, or disclosure.

Our current practices include restricting access to authorised partners and relevant employees and using password- or PIN-protected business devices with automatic screen locks.

No method of electronic storage, communication, or transmission is completely secure. We therefore cannot guarantee absolute security.

If we become aware of a personal-data incident, we will take steps appropriate to the circumstances to investigate and mitigate it and provide notifications where required by applicable law.

17. Third-Party Websites and Services

Our communications or website may contain links to third-party websites or services, including those of airlines, hotels, insurers, visa-service providers, or other travel suppliers.

These third parties may have their own privacy policies, terms, and data-handling practices. Travetory does not control the privacy practices of external websites or services.

We encourage you to review the relevant third party’s privacy policy before providing personal information directly to it. This section does not limit any obligations Travetory may have under applicable law.

18. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our business practices, services, technology, or applicable legal requirements.

The revised version will be published on our website, with the “Last Updated” date amended as appropriate. Where appropriate or required by applicable law, we may provide additional notice of material changes.

Your continued interaction with Travetory after an updated Policy becomes available will be subject to applicable law and any requirements relating to notice or consent.

19. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the handling of personal information, please contact:

Travetory

• Email: ops@travetory.com

• Phone / WhatsApp: +91 77097 24558

• Address: 3rd floor, Flat no 310/311, Siddheswar Bldg, LT Dilip Gupte Marg, Mahim West, Mumbai - 400016, Maharashtra, India

We will review privacy-related communications and handle them in a manner appropriate to the request and applicable legal requirements.

20. Related Policies

Please also refer to the following policies:

• Terms & Conditions

• Cancellation Policy

• Refund Policy