We collect as little personal data as possible. This policy explains what we collect and why, in line with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone, message | When you use a contact, advertising or listing form | To reply to you |
| Name, contact details, travel date, number of travellers, message | When you send an enquiry to a listed business | To pass your enquiry to that business |
| IP address and browser details | When you submit a form | Security, spam and abuse prevention |
| Aggregate counts (for example, how often a listing is viewed) | When you browse | To improve the site. These counts contain no personal data. |
We do not sell your personal data.
Enquiries to businesses
When you send an enquiry about a listed hotel, agency or service, you consent to us sharing the details you submit with that business so it can respond. Once shared, that business handles your data under its own policies.
Service providers
The site runs on Cloudflare (hosting, content delivery, security, privacy-friendly analytics) and uses Cloudflare Turnstile to protect forms from bots. When advertising is enabled, Google AdSense serves the ads (see below). Maps are provided by OpenStreetMap tile servers, and videos load from YouTube or Vimeo only when you press play. These providers may process technical data, such as your IP address, to deliver their services.
Advertising (Google AdSense)
When advertising is switched on, the site shows ads from Google AdSense in fixed, clearly labelled positions:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
- You can opt out of personalised advertising in Google's Ads Settings (opens in a new tab), or opt out of some third-party vendors' cookies at www.aboutads.info (opens in a new tab).
- See how Google uses information from sites that use its services (opens in a new tab).
Visitors from regions that require consent (such as the European Economic Area, the UK and Switzerland) are asked for consent through Google's consent message before personalised ads are shown.
Retention
Contact messages and enquiries are kept only as long as needed to respond and for reasonable record-keeping — normally no more than 24 months — after which they are deleted or anonymised.
Your rights
You may ask to access, correct or erase the personal data you have given us, or withdraw consent, by contacting us. We will respond within a reasonable time.
Security
Data is stored on Cloudflare's infrastructure with access limited to authorised staff, protected by strong authentication and audit logging.
Changes
We may update this policy. The date of the last review is shown below.