Privacy policy
What we collect, why, who we share it with and your rights under India's Digital Personal Data Protection Act, 2023.
Last updated:
Loyal Tourism, Tiruchirappalli, Tamil Nadu ("we") runs this website. We are the data fiduciary for the personal data you give us here. This policy explains what we collect and what we do with it.
What we collect
| When | What | Why |
|---|---|---|
| Plan my trip enquiry | Your name, mobile number, email (optional), destination, dates, number of adults and children, budget and your message | To plan your trip, send you a quote and contact you about it |
| Booking a trip | Lead traveller's name, mobile and email; each traveller's name and age; seat and pickup point; for travellers under 18, a parent or guardian's name, phone and consent | To book seats, issue your voucher, prepare the traveller list for the bus and keep you safe on the trip |
| Paying | The payment reference, amount and status from Razorpay. We never see or store card, UPI PIN or bank login details | To confirm your booking and handle refunds |
| Visiting the site | Basic server logs (IP address, browser, pages requested) and the campaign tag in the link you came from (for example utm_source) | To keep the site secure, stop abuse and know which links bring enquiries |
We do not use advertising trackers, analytics cookies or session recording. The site sets no cookies for visitors who are not logged in, except a short-lived security cookie (30 minutes) if our bot check runs.
To stop automated abuse, the booking, enquiry, sign-in and lookup forms may run a Cloudflare Turnstile check. It looks at your IP address and browser signals, sets no tracking cookie and is usually invisible.
Children
Only a person aged 18 or older can send an enquiry or make a booking. For school, college and family trips with travellers under 18, the adult booking confirms that a parent or guardian has given consent, and we record the guardian's name and phone number. We collect only what the trip needs: name and age for the traveller list. We do not use children's data for marketing.
Who we share it with
- Razorpay processes online payments.
- Our email provider (Resend) delivers booking vouchers and replies.
- Cloudflare hosts the website and stores the data.
- Hotels, bus operators and guides on your trip get the names and details they need to serve you.
- Authorities, when the law requires it.
We never sell your data and never share it for anyone else's marketing.
How long we keep it
Enquiries that do not become a trip are deleted within 12 months. Booking and payment records are kept for 8 years because tax law requires it. Traveller details for minors are deleted 12 months after the trip unless the law needs us to keep them.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask what personal data we hold about you and who we shared it with,
- ask us to correct, complete or update it,
- ask us to erase it when it is no longer needed for your trip or by law,
- withdraw consent (for example to WhatsApp messages) at any time,
- nominate someone to use these rights for you,
- complain to our grievance officer, and then to the Data Protection Board of India.
To use any of these rights, write to hello@loyaltourism.example or call +91 84289 97062. We reply within 7 days and act within 30 days.
Grievance officer
The grievance officer of Loyal Tourism, Loyal Tourism, Tiruchirappalli. Email hello@loyaltourism.example, phone +91 84289 97062. See also Report a problem.
Security
Data is sent over HTTPS, stored with our hosting provider and open only to Loyal Tourism staff who need it. Staff logins are password protected and rate limited.
Changes
If we change this policy we update the date at the top of this page. Big changes are also shown on the home page.