Privacy Policy

Last updated: 1 Sept. 2026

Travel of Dreams (referred to as “we”, “us”, “our”, or “the Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, use our services, or make bookings through our platform.

This Policy applies to Travel of Dreams, a company incorporated under the Companies Act, 2013. Our website is operated at www.travelofdreams.in.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use our platform.

1. Information We Collect

1.1 Information You Provide Directly

Identity and contact information: your full name, date of birth, gender, nationality, email address, phone number, and residential address.
Travel document information: passport number, visa details, and other travel-related identification when required for booking.
Booking and payment information: travel dates, destinations, package selections, hotel preferences, and payment card or UPI details (processed securely through our payment gateway; we do not store full card numbers on our servers).
Account credentials: username and password if you create an account on our platform.
Preferences and special requests: dietary requirements, accessibility needs, room preferences, and other special requests.
Communications: any enquiries, complaints, or feedback you submit to us.

1.2 Information We Collect Automatically

Device and browser information: IP address, browser type, operating system, device identifiers.
Usage data: pages visited, time spent on pages, links clicked, referring URLs.
Transaction data: booking history, payment records, and interaction with customer service.
Cookies and similar tracking technologies

1.3 Information from Third Parties

Hotel and travel suppliers: booking confirmation details shared by hotels, airlines, and other travel partners.
Payment processors: transaction status and fraud-check information from our payment gateway partners.
Social login providers: basic profile information if you choose to register or log in via a third-party social platform (such as Google).

2. How We Use Your Information

We use your personal data for the following purposes:

2.1 To Provide and Fulfil Services

Process and confirm your travel and hotel bookings.
Communicate booking confirmations, itineraries, vouchers, invoices, and updates.
Coordinate with hotels, airlines, tour operators, and other suppliers on your behalf.
Process payments and issue refunds.
Verify your identity where required.

2.2 To Manage Our Relationship with You

Respond to your enquiries, complaints, and requests.
Send important service-related notifications (e.g., changes to your booking, reminders, alerts).
Provide customer support before, during, and after your trip.

2.3 Marketing and Promotional Communications

With your prior consent, we may send you promotional emails, offers, and travel inspiration. You may withdraw this consent at any time by clicking the ‘unsubscribe’ link in any marketing email or by contacting us. Withdrawing consent for marketing will not affect your ability to make bookings or receive service-related communications.

2.4 Legal and Compliance Purposes

Comply with applicable laws, including tax and GST obligations.
Respond to lawful requests from government authorities or courts.
Detect, prevent, and investigate fraud, security breaches, and prohibited activities.
Enforce our Terms and Conditions, Cancellation Policy, and Refund Policy.

2.5 Business Improvement

Analyse usage patterns to improve our website, services, and user experience.
Conduct internal research and analytics (using anonymised or aggregated data wherever possible).

3. Legal Basis for Processing

In accordance with the Digital Personal Data Protection Act, 2023, we process your personal data on the following grounds:

Consent: where you have given explicit consent for a specific purpose (such as marketing communications).
Contractual necessity: to perform the booking contract you enter into with us.
Legal obligation: to comply with applicable Indian law, including GST, IT Act, and consumer protection regulations.
Legitimate interests: for fraud prevention, security, and business improvement activities — provided these do not override your fundamental rights.

4. Data Sharing and Disclosure

4.1 With Service Providers and Suppliers

To fulfil your booking, we share relevant personal data with:

Hotels, resorts, and accommodation providers.
Airlines, transport operators, and transfer services.
Tour operators, activity providers, and guides.
Payment gateway and fraud-detection service providers.
Technology service providers who support our platform (hosting, email, CRM systems).
These parties receive only the data necessary to perform their specific function. We enter into appropriate contractual arrangements requiring them to maintain the confidentiality and security of your data.

4.2 International Transfers

Some of our suppliers or technology partners may be located outside India. Where personal data is transferred internationally, we ensure appropriate safeguards are in place consistent with applicable law. We will update this section as DPDPA rules on cross-border transfers are notified.

4.3 Legal and Regulatory Disclosure

We may disclose your personal data to government authorities, regulators, or courts where required by applicable law, court order, or legitimate law enforcement request.

4.4 Business Transfers

If our business is acquired, merged, or restructured, your personal data may be transferred as part of that transaction. We will notify you of any such change and your options regarding your data.

4.5 With Your Consent

We may share your data with third parties for other purposes with your explicit consent.

5. Data Retention

We retain your personal data for as long as necessary for the purposes described in this Policy, or as required by law. In general:

Booking and transaction records: retained for a minimum of 7 years in accordance with financial record-keeping requirements under Indian law.
Account information: retained for as long as your account is active, plus a reasonable period thereafter.
Marketing consent records: retained until you withdraw consent, plus a period to evidence the consent.
Communication records: retained for a period sufficient to respond to any disputes or complaints.

After the applicable retention period, we securely delete or anonymise your data.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us recognise your device, remember your preferences, and improve your experience.

6.2 Types of Cookies We Use

Essential cookies: necessary for the website to function (e.g., maintaining your session, processing bookings). These cannot be disabled.
Functional cookies: remember your preferences (such as language and currency) to personalise your experience.
Analytics cookies: help us understand how visitors use our website, which pages are popular, and where errors occur (e.g., Google Analytics). Data collected is aggregated.
Marketing cookies: track your browsing activity to display relevant advertisements on third-party websites. These are only placed with your consent.

6.3 Managing Cookies

You can control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our booking platform. For more information on managing cookies, visit www.allaboutcookies.org.

6.4 Third-Party Tracking

Our website may include tools or pixels from third-party analytics or advertising providers. These providers have their own privacy policies and may collect data about your browsing activity across different websites. We encourage you to review their policies.

7. Data Security

We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These include:

SSL/TLS encryption for data transmitted between your browser and our website.
Secure payment processing through PCI-DSS compliant payment gateway partners.
Access controls and authentication measures for internal systems.
Regular security assessments and monitoring.

While we take reasonable precautions, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your account credentials confidential.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, and applicable Indian law, you have the following rights:

Right to access: request information about what personal data we hold about you.
Right to correction: request correction of inaccurate or incomplete personal data.
Right to erasure: request deletion of your personal data in certain circumstances (subject to legal retention obligations).
Right to withdraw consent: withdraw consent for marketing or other consent-based processing at any time.
Right to grievance redressal: raise a complaint with our Grievance Officer.

To exercise your rights, please contact us at the details in Section 11. We will respond within a reasonable time and, where required by law, within 30 days of your request.

9. Children’s Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. Where a booking includes travel by a minor, data is collected from the accompanying adult responsible for that minor. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email (where we hold your email address) or by a prominent notice on our website. We encourage you to review this Policy periodically. Your continued use of our platform after the effective date of any update constitutes your acceptance of the revised Policy.

11. Contact Us

For any privacy-related queries, please contact:
Travel of Dreams
Email: support@travelofdreams.in