Privacy Policy

Last updated: 04-10-2026

1. What we collect

On this website: only what you submit — typically your name, phone number, email and travel notes when you enquire. The site sets no advertising or analytics cookies. To improve the site we count page views and button clicks (a label, broad source category and page pathname — nothing that identifies you: no IP address, no device fingerprint, no cookies).

On WhatsApp (when you book): the details needed to create a genuine reservation — traveller names as per passport, travel dates and route, and, where a booking requires it, passport bio-page details. Order on WhatsApp — the team confirms your details, then sends payment instructions in the same chat. We never ask for card numbers or OTPs, we never see or store card details, and this website collects no payment data.

2. What we deliberately do NOT store

We remember non-personal trip selections on your device for up to 14 days, and a broad source category and first landing pathname for the current browser session. No visitor ID, raw referral URL or advertising identifier is stored. If you request a callback, the source category is included with your enquiry. We retain a pending delivery record in our private database if the team’s CRM is temporarily unavailable, and remove the contact payload from that delivery record once accepted.

We never store Aadhaar or PAN numbers in plain text. If an identity number is unavoidable for a booking, we keep at most its last 4 digits plus a one-way hash. Raw document images used for data extraction are not retained after processing.

3. Where your data lives

Booking and enquiry records are stored in our database hosted in Mumbai, India (ap-south-1) for data residency, encrypted in transit and at rest. Documents, when stored, are encrypted at rest in a private bucket and served only via short-lived signed links. WhatsApp messages are end-to-end encrypted by WhatsApp; our chat records are handled by our small fulfilment team only.

4. How long we keep it

Documents are kept only as long as needed to fulfil your booking and are deleted after fulfilment. Basic booking records (name, route, reference, amount) are retained as required for accounting and statutory compliance.

5. Deletion requests

Message us on WhatsApp (+91 91155 80911) or email info@sureshottravel.com from the contact you booked with, and we will delete your personal data that is not under a statutory retention duty, and confirm once done.

6. Sharing

Data is shared only where fulfilment requires it: reservation details go to the airline / GDS / hotel system that holds your booking, and insurance details to our licensed IRDAI partner that issues your policy. We do not sell or rent personal data to anyone.

7. Your rights & grievances

Under India’s DPDP Act 2023 you may request access, correction or erasure of your personal data. Grievance officer: Pro Lifeset Overseas Private Limited, Shop No. 2, near PRTC Workshop, Nabha Road, Patiala 147001, Punjab, India— reachable at the contacts below. We respond within 30 days.