Privacy Policy
What personal data we collect, why, who it is shared with, and your choices — including cookies.
Who is responsible
[To be confirmed: Registered legal entity name] ([To be confirmed: Registered office address]) is responsible for the personal data described here. Contact: info@trip2world.in. Grievance officer: [To be confirmed: Grievance officer name] [To be confirmed: Grievance officer designation] [To be confirmed: Grievance officer e-mail] [To be confirmed: Grievance officer mobile number].
What we collect
- Account: name, e-mail address, phone number and a securely hashed password (we cannot read your password).
- Travellers: names, dates of birth and relationships you save, and identity details (for example passport number and expiry) you choose to add.
- Documents: files you upload (passport, visa, ID) and booking documents we issue to you. They are stored privately, outside the public website, and are available only to you and authorised staff; every staff download is recorded.
- Enquiries, requests and bookings: what you asked for, searched for and booked, traveller and contact details, the details a visa application needs, and your messages.
- Payments: amount, status and references. Card and bank details are handled by our payment provider, not by us.
- Security records: the IP address and time of sign-ins, bookings and other requests, used to protect accounts and prevent abuse.
Why we use it
To answer your enquiries, prepare quotations, make and manage your bookings and visa applications, send booking, payment and account messages, provide support, prevent fraud and abuse, keep financial records required by law, and improve the service. We do not sell your personal data, and we do not send marketing messages.
Who we share it with
Only as needed to provide the service: airlines, hotels and other suppliers fulfilling your booking; for visa assistance, the embassy, consulate, visa application centre or authority concerned; our payment provider; our e-mail delivery provider; our website hosting provider and the content delivery and security network the website is delivered through; and government authorities where the law requires it (for example, airline passenger data rules). Suppliers and authorities outside India receive the details needed for the service you booked there. Fonts and some page libraries load from third-party content networks, which receive your IP address when the page loads.
Travel Insight
Questions you type into Travel Insight are answered by Trip2World's own service from our destination, service and package information. The question text is not stored. Do not type passport, card or other personal numbers into it.
How long we keep it
[To be confirmed: How long customer and booking data is kept]
Booking, payment and tax records are kept for as long as accounting and tax law requires, even after an account is deleted.
Your choices and rights
You can view and correct your account, traveller and identity details in My Account, and delete saved travellers, identities and documents there. To request a copy of your data, its correction or deletion, or to raise a concern, contact us or our grievance officer. Some records (bookings, payments) must be kept for legal and accounting reasons. You can also use any further rights the law gives you, including under the Digital Personal Data Protection Act, 2023 as its provisions come into force.
Children
Accounts are for adults. Details of a child traveller are given by the adult who books for them.
Cookies
We use only essential cookies: a session cookie that keeps you signed in, protects forms against cross-site request forgery, and remembers your search context during your visit (a separate one is used for the staff area). They expire when you close your browser or sign out. We do not use advertising or analytics cookies, so there is nothing to opt into or out of. If we ever add non-essential cookies, we will ask for your consent first.
Security
Passwords are hashed, pages are served over an encrypted connection, sessions expire after inactivity, and sign-in attempts are rate-limited. Changing or resetting your password signs out every other device.
Changes to this policy
We update this policy when how we handle personal data changes. Current version: draft-2026-10-07.