Legal
Privacy Policy
Last updated: July 2026
1. Who We Are
Vellora Escapes is the data fiduciary for the personal data you share with us. This policy explains what we collect, why, how we protect it, and your rights under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Information We Collect
Identity & contact details (name, email, phone, address, date of birth); travel documents you provide for a booking (passport, visa, government ID, photos); payment references (UPI/bank transaction IDs — we do not store full card numbers); trip details (travellers, preferences, dates, and any medical/dietary information you disclose); and technical data (device, cookies, usage analytics).
3. How We Use Your Information
To process and manage your bookings; issue quotes, invoices and vouchers; arrange visas, hotels, transport, flights, activities and insurance; communicate trip updates; comply with legal, tax and regulatory obligations; and — only with your consent — send offers and referral rewards. We process your data to perform our contract with you and on the basis of your consent.
4. Sharing Your Information
We share the minimum necessary data with the travel partners required to deliver your trip — airlines, hotels, DMCs/consolidators, visa and consular services, transport and insurance providers — plus payment processors and authorities where legally required. We never sell or rent your personal data for third-party marketing.
5. Sensitive Data & Minors
Medical, dietary and passport data are handled with heightened care and used only for your trip. For travellers under 18, a parent or guardian must provide consent and documentation.
6. Data Retention
We keep booking records for as long as needed for your trip and thereafter for the period required by tax and accounting law (currently up to 8 years for financial records), after which we delete or anonymise them.
7. Data Security
We use SSL/TLS encryption in transit, access-controlled storage, and a need-to-know basis for staff. No system is completely secure; we will notify you and the Data Protection Board of material breaches as required by the DPDP Act.
8. Your Rights (DPDP Act)
You may access a summary of your data, correct or update it, request erasure, withdraw consent, nominate a representative, and raise a grievance. Exercising these rights will not affect trips already contracted. Contact hello@velloraescapes.com.
9. Grievance Officer
For privacy concerns, contact our Grievance Officer at hello@velloraescapes.com. We acknowledge within 48 hours and resolve within the timelines set by the DPDP Act.
10. Cookies
We use cookies for functionality and analytics, and a first-party cookie for referral tracking which you can clear anytime. You can disable cookies in your browser, though some features may not function as intended.
11. Changes & Contact
We may update this policy; the “last updated” date will change and material changes will be posted here. Questions? hello@velloraescapes.com or Vellora Escapes (proprietor: Ayush Pathak), 5/579, Vikas Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010.
Questions? Contact us.