Privacy Policy

Last updated: 07-07-2026

1. What we collect

On this website: only what you submit — typically your name, phone number, email and travel notes when you enquire. The site sets no advertising or analytics cookies.

On WhatsApp (when you book): the details needed to create a genuine reservation — traveller names as per passport, travel dates and route, and, where a booking requires it, passport bio-page details. Payment happens through a secure Razorpay payment link sent in the chat — card/UPI data is processed by Razorpay under its own privacy policy; we never see or store card details, and this website collects no payment data.

2. What we deliberately do NOT store

We never store Aadhaar or PAN numbers in plain text. If an identity number is unavoidable for a booking, we keep at most its last 4 digits plus a one-way hash. Raw document images used for data extraction are not retained after processing.

3. Where your data lives

Booking and enquiry records are stored in our database hosted in Mumbai, India (ap-south-1) for data residency, encrypted in transit and at rest. Documents, when stored, are encrypted at rest in a private bucket and served only via short-lived signed links. WhatsApp messages are end-to-end encrypted by WhatsApp; our chat records are handled by our small fulfilment team only.

4. How long we keep it

Documents are kept only as long as needed to fulfil your booking and are deleted after fulfilment. Basic booking records (name, route, reference, amount) are retained as required for accounting and statutory compliance.

5. Deletion requests

Message us on WhatsApp (+91 91155 80911) or email hello@sureshottravel.com from the contact you booked with, and we will delete your personal data that is not under a statutory retention duty, and confirm once done.

6. Sharing

Data is shared only where fulfilment requires it: reservation details go to the airline / GDS / hotel system that holds your booking, and insurance details to our licensed IRDAI partner that issues your policy. We do not sell or rent personal data to anyone.

7. Your rights & grievances

Under India’s DPDP Act 2023 you may request access, correction or erasure of your personal data. Grievance officer: Pro Lifeset Overseas Private Limited, Patiala, Punjab 147004 — reachable at the contacts below. We respond within 30 days.