Privacy Policy & Personal Data Protection

1. Our Commitment to Data Minimization

At TravelIndia365, we respect your privacy and collect only the personal information strictly necessary to provide customized holiday proposals and coordinate overseas travel arrangements. We operate on a strict data-minimization philosophy: we do not collect superfluous biographical data, banking credentials, or unnecessary identity numbers until formal booking execution requires statutory compliance.

2. Categories of Information We Collect

When you interact with our website, request a custom proposal, or message our team, we collect:

• Contact Identifiers: Your full name and Indian mobile / WhatsApp number (+91). Email address is collected optionally if you prefer receiving proposals via email.
• Holiday Preferences: Target travel destination (Vietnam, Bali, Thailand), approximate travel dates, group size (adults, seniors, children with ages), departure city in India, accommodation standard, and dietary requirements.
• Technical & Security Metadata: Anonymized SHA-256 IP address hash (used exclusively to enforce our 5-attempt hourly rate limiter and prevent automated spam bots), browser user-agent, and referral page.

3. Purpose of Processing & Lawful Consent

Under the Digital Personal Data Protection (DPDP) Act of India, we process your personal data based on explicit consent. By checking the consent box on our quotation modal or initiating contact via WhatsApp, you authorize our destination planners to communicate with you via WhatsApp, telephone, or email solely for:

• Qualifying your travel pacing, hotel room preferences, and dietary needs.
• Preparing and transmitting your customized itemized travel quotation.
• Coordinating pre-departure flight vouchers, hotel reservations, and visa filing instructions.
• Providing on-trip concierge assistance while you are traveling abroad.

You may withdraw your consent at any time without penalty by sending a WhatsApp message to +91 9718200365 or emailing sales@travelindia365.com.

4. Zero Third-Party Broker Sharing

We do not sell, rent, trade, or distribute your personal data to third-party telemarketers, credit card loan brokers, or advertising networks. Your contact details are shared only with verified Destination Management Companies (DMCs) and contracted hoteliers specifically assigned to execute your confirmed itinerary.

5. Data Retention, Security & Storage Isolation

Lead inquiry data is stored in isolated, secure directories located completely outside the public webroot (`public_html/`) with restricted Linux file permissions (`0600` / `0750`). Inquiries that do not convert into confirmed bookings are archived or permanently purged within 12 months. We do not store credit card CVVs or net banking credentials on our web servers.

6. Your Rights as a Data Principal

In accordance with the DPDP Act, travellers have the right to request access to their stored inquiry data, request corrections to inaccurate contact details, or demand complete erasure of their data from our storage systems. To exercise these rights, please contact our data desk: