1. Introduction
NomadicYatra (“we”, “us”, “our”) deeply values your privacy. This Privacy Policy delineates how we gather, use, disclose, and secure your personal information when you engage with our website, mobile applications, travel itineraries, newsletters, or other services. By using any portion of our services, you acknowledge and consent to these practices.
2. Information We Collect
We collect two overarching categories of information:
- Personal Information: such as your name, email, phone number, postal addresses, passport or visa data (if voluntarily provided for bookings), travel preferences, dietary requirements, emergency contacts, and payment instrument data.
- Usage & Technical Data: including IP address, device characteristics, browser type, operating system, pages visited, geographic location (derived from IP or GPS), duration of visit, clicks, and referral sources.
3. Legal Basis for Collection
Under applicable data protection laws (such as GDPR principles), we rely on multiple lawful bases including your consent (e.g. for promotional communications), performance of a contract (i.e. tour bookings), legal obligation (e.g. compliance with tax or immigration authority), and our legitimate interests (e.g. service enhancement, fraud detection).
4. Uses of Information
Your data enables us to deliver and refine our services. Specifically, we may use your information to:
- Facilitate travel bookings, confirmations, amendments, and cancellations;
- Create personalized itineraries and recommend relevant experiences;
- Send transactional communications (e.g. booking receipts, updates) and promotional messages (subject to consent);
- Analyze usage trends, optimize site and application performance, and tailor our offerings;
- Prevent fraud, unauthorized transactions, or security breaches;
- Fulfill legal or contractual obligations, responding to lawful requests from governmental or regulatory authorities.
5. Disclosure & Sharing
We do not sell or trade your personal data. Disclosure may occur only in the following contexts:
- With trusted third-party service providers (such as airlines, hotels, insurance partners, analytics providers) to facilitate your travel arrangements;
- With law enforcement or governmental agencies when required by court order or to meet legal obligations;
- During corporate transactions such as mergers or asset sales, provided confidentiality is maintained;
- With affiliates and group companies to administer and improve services.
6. Data Retention
We retain your personal data only as long as needed to fulfill the purposes specified in this policy, including contractual requirements (e.g. travel fulfilment), legal obligations (e.g. tax compliance), and legitimate interest (e.g. dispute resolution or internal audits). After such retention periods expire, we securely delete or anonymise your data.
7. Security Measures
Your data’s security is paramount. We implement industry-standard security protocols including:
- Encryption at rest and in transit;
- Role-based access controls limiting internal data access;
- Regular security audits and vulnerability assessments;
- Secure storage on servers compliant with international standards;
- Incident response plans in case of breach attempts.
While we endeavor to protect your data, no system can be completely secure. Use of the internet carries inherent risks beyond our control.
8. Your Rights
Depending on applicable law, you may have the following rights:
- Right of access: request a copy of the personal data we hold;
- Right to rectification: correct incomplete or inaccurate data;
- Right to erasure: request deletion under specific circumstances;
- Right to restriction of processing in certain situations;
- Right to data portability: where feasible, transfer your data to another controller;
- Right to object: especially to direct marketing or profiling;
- Right to withdraw consent: any consent given (e.g. for newsletters) can be revoked freely.
To exercise any of these rights, please contact us at support@nomadicyatra.com. We will respond within mandated timelines.
9. Cookies & Tracking Technologies
We use cookies, local storage, device fingerprinting, and pixels (collectively “cookies”) to:
- Enable essential site functionalities (like login sessions);
- Track site performance and user behavior;
- Retain your preferences; and
- Serve personalized promotions or content.
These policies align with industry standards such as those described by Guardian’s Cookie policy — categorizing cookies into strictly necessary, performance, functionality, and advertising types :contentReference[oaicite:0]{index=0}. You may manage your preferences via browser settings or the cookie consent tool on our site.
10. Third‑Party Platforms & Links
Our website may include links to external third‑party platforms (e.g. review sites, partner blogs). We are not responsible for their privacy practices or content. Please review their privacy policies independently before engaging with them.
11. Children’s Privacy
We do not knowingly offer services to children under 18. We do not intentionally collect personal data from minors without parental consent. If we become aware that we inadvertently collected data from a minor, we will promptly delete it.
12. Policy Modifications
We may periodically revise this policy to reflect updates in legal requirements, services, or technology. Material changes will be notified via email or highlighted on our site. Continued use after changes constitutes acceptance of the updated policy.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or data practices, please contact us at:
NomadicYatra Data Privacy Office
Email: support@nomadicyatra.com