Privacy Policy

We collect the following categories of information:

• Account data: name, email, phone, password (hashed), profile photo.
• Booking & traveler data: passenger names, age, gender, emergency contact, Aadhaar / government ID details required for verification and travel permits.
• Payment data: transaction reference, amount, status (processed via Razorpay — we do not store card or bank account numbers).
• Communication data: messages you send to support, feedback and reviews.
• Technical data: IP address, device info, browser type, pages visited, referral source.

• To confirm bookings, issue tickets and coordinate logistics.
• To verify identity and comply with travel permit requirements.
• To process payments and refunds.
• To send booking confirmations, trip reminders and important updates via email, SMS or WhatsApp.
• To respond to support queries and resolve complaints.
• To improve the Platform, prevent fraud and ensure security.
• To send marketing communications about upcoming trips — only if you have opted in (you can opt out anytime).

We share your information only with:

• Trip partners (hotels, transporters, guides) — only what is strictly required to deliver your trip.
• Payment gateway (Razorpay) — for processing transactions.
• Service providers (email/SMS providers, analytics, cloud hosting) — bound by confidentiality.
• Government authorities — when required by law, court order or for safety investigations.

We do not sell your personal data to advertisers or third parties.

We use industry-standard safeguards including HTTPS encryption, hashed passwords, role-based access control and audit logging. Data is stored on secure Supabase infrastructure. While we follow reasonable security practices, no method of transmission over the internet is 100% secure.

We retain personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes and enforce our agreements. You may request deletion of your account and associated data at any time.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and data (subject to legal retention requirements).
• Withdraw consent for marketing communications.
• Restrict or object to certain processing activities.

To exercise any of these rights, write to support@ghumakkars.in.

We use cookies and similar technologies for authentication, session management, analytics and improving the Platform. You can disable cookies in your browser, but some features may not work properly without them.

The Platform is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, contact us so we can remove it.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

For privacy-related questions, contact us at support@ghumakkars.in or visit our Contact page.