0) Who we are (Data Fiduciary)
- Legal entity: Onlitrip Travel Pvt. Ltd.
- Registered address: 14/14 Vatika Kunj, Gurgaon, Haryana, 122102, India
- Primary contact: info@onlitrip.com · +918527018007 (Mon–Sat, 10:00–18:00 IST)
- Grievance Officer (DPO): info@onlitrip.com
1) Information we collect
- Identifiers/contact: name, email, phone, address.
- Booking data: selected trip, dates, participants, preferences, special requests (as provided by you).
- Payment data: transaction IDs, masked card details/tokenised references via gateway (we don’t store full card numbers).
- Device/usage: IP, device/browser info, pages viewed, referrers, approximate location.
- Communications: enquiries, emails, chat/support, feedback.
- Cookie/analytics data: consent status, attribution, preferences.
We do not intentionally collect sensitive personal data. Share only what is necessary to operate your trip safely.
Back to top ↑1b) Sources of personal data
- Directly from you: forms, bookings, calls, emails, chat.
- Automatically from your device/browser when you visit our site.
- From service providers/partners (payment, analytics, communications).
- From group organisers/fellow travellers to complete your booking.
2) How we use your information
- Manage bookings, payments, confirmations and trip operations.
- Service communications: itinerary updates, support, important notices.
- Improve site/services (analytics, testing, troubleshooting).
- Personalise content/offers where permitted by law and your preferences.
- Prevent fraud/abuse and comply with legal obligations.
- Marketing with your consent or as permitted; you can opt out anytime.
3) Legal basis (India — DPDP, 2023)
- Consent: obtained through clear notice; you may withdraw consent anytime.
- Legitimate uses permitted by law: e.g., compliance with legal obligations, medical emergencies, prevention/detection of fraud/violations.
- Contractual necessity: to provide the services you request (e.g., your booking).
4) Sharing of information
- Service providers for operations: payment processors, hosting, analytics, communications, customer support, and trip suppliers (hotels, transport, guides).
- Legal/compliance: when required by law or to protect rights/safety.
- Business transfers: merger/acquisition/asset sale under equivalent safeguards.
- We do not sell your personal data.
4b) International transfers (future)
Currently we operate India itineraries. If we transfer data outside India (e.g., cloud hosting, future international trips), we will do so in accordance with the DPDP Act, 2023.
- Cross‑border transfers are permitted unless restricted by Central Government notifications.
- We use contractual and organisational safeguards with processors and take reasonable security measures.
5) Data retention
- Bookings/invoices: typically up to 7 years (tax/accounting).
- Support records: typically up to 3 years after last interaction.
- Marketing preferences: until you opt out or withdraw consent.
- Cookies/analytics: session cookies expire when you close your browser; persistent cookies may last from 1 day up to 24 months depending on the tool.
6) Security
We use reasonable technical/organisational measures (encryption in transit, access controls, monitoring). No method is 100% secure. If legally required, we will notify you of a breach as per law.
Back to top ↑7) Your rights (India — DPDP)
- Right to access information about processing.
- Right to correction and erasure of your personal data.
- Right to grievance redressal.
- Right to nominate another person to exercise your rights in the event of death or incapacity.
- You may submit a request via email below
8) Cookies & tracking
- Essential cookies: Core site functions (login/session security, load balancing, preferences). These are required for the site to work.
- Analytics cookies (optional): Help us understand site usage and improve services (page performance, popular content). We do not use analytics to identify you directly.
- Advertising/marketing cookies (if enabled in future): Used to measure campaigns or show relevant ads. Currently not in use for India itineraries.
- How to control cookies:
- Use your browser settings to block/clear cookies or set “Do Not Track”. Blocking some cookies may impact features.
- If a consent banner is shown, use it to opt in/out of analytics cookies.
- On mobile, you can reset advertising IDs and limit ad tracking from device settings.
- Retention: Session cookies expire when you close your browser; persistent cookies may last from 1 day up to 24 months depending on the tool.
9) Children's privacy (India)
Our services are intended for adults. We do not knowingly process children’s data (under 18) without verifiable consent of a parent/guardian as required. If you believe a child provided data, contact us to remove it.
Back to top ↑10) Changes to this policy
We may update this policy. Material changes will be posted here and, where required, notified by email/banner. Continued use after changes means you accept the updated policy.
Back to top ↑11) Contact & grievance
For privacy questions or requests, email: info@onlitrip.com or write to: 14/14 Vatika Kunj, Gurgaon, Haryana, 122102, India.
- Grievance Officer (DPO): info@onlitrip.com
As per Indian rules, we acknowledge grievances within 48 hours and endeavour to resolve within 30 days.