Privacy Policy

YaatraExpress ("we", "us", "our") is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information. By using our website or confirming a booking, you accept this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Name, age, and date of birth
• Contact information: phone number, email address, WhatsApp number
• City and state of residence
• Emergency contact name and phone number
• Medical information disclosed voluntarily for safety purposes
• Government ID details required for forest permits or accommodation (e.g. Aadhaar, passport number)
• Payment information — we do not store full payment details; transactions are processed through third-party payment gateways

1.2 Information Collected Automatically

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on our website
• Referring website or source

1.3 Communications

When you contact us via WhatsApp, email, or phone, we retain records of those communications to manage your booking and respond to your queries.

2. How We Use Your Information

• To process and manage your booking
• To share necessary participant details (name, contact, medical information if disclosed) with Service Providers delivering your experience
• To obtain required permits, registrations, and documentation from forest departments and other authorities
• To contact you about your booking, itinerary changes, or operational updates
• To respond to your inquiries
• To send relevant promotional communications about our experiences (you may opt out at any time)
• To improve our website and services through aggregated, anonymised analytics
• To comply with applicable legal obligations

3. Sharing Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

• Service Providers: We share necessary participant information (name, contact details, and disclosed medical information) with local operators, trek leaders, accommodation providers, and transport partners solely to facilitate delivery of your Experience.
• Regulatory Authorities: Government agencies, forest departments, or other authorities as required by law or for permit purposes.
• Emergency Services: Medical professionals or emergency services when required to protect your health or safety.
• Payment Processors: Payment gateway providers process transactions securely under their own privacy policies.
• Legal Requirements: Where required by court order, applicable law, or legal proceedings.

4. WhatsApp and Messaging

Our primary communication channel is WhatsApp. By contacting us on WhatsApp, you acknowledge that WhatsApp (Meta Platforms, Inc.) operates independently under its own terms and privacy policy. We use WhatsApp solely for booking communication and customer support. We do not add you to broadcast lists without your consent and will not share your WhatsApp number with unrelated third parties.

5. Cookies and Analytics

Our website uses cookies and similar technologies to understand how visitors interact with our content. This includes analytics tools that collect anonymised usage data. These cookies do not identify you personally. You may disable cookies through your browser settings, though this may affect certain website functionality. We do not use third-party advertising cookies or cross-site tracking.

6. Data Retention

We retain your booking-related personal information for a period of 5 years following the completion of your Experience, or as required by applicable law. Medical information disclosed for safety purposes is retained only for the duration of the Experience and then securely deleted unless you request otherwise. You may request deletion of your data at any time, subject to our retention obligations under law.

7. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. However, no data transmission over the internet or storage system can be guaranteed to be 100% secure. We encourage you to contact us only through known and verified channels.

8. Your Rights

Subject to applicable Indian law (including the Digital Personal Data Protection Act 2023 when in force), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal and operational retention requirements)
• Withdraw consent to promotional communications at any time
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us at helloyaatraexpress@gmail.com.

9. Children's Privacy

We do not knowingly collect personal information from children under 13 without verified parental consent. For participants under 18, all bookings must be made by a parent or legal guardian who accepts our Terms and this Privacy Policy on the minor's behalf.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via a notice on our website. Continued use of our services after such notice constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of India. Disputes arising under this policy are subject to the jurisdiction of courts in Kolkata, West Bengal.