This Privacy Policy explains how Tripgation Private Limited (“Tripgation”, “we”, “us”) collects, uses, shares, secures and retains your personal data when you use tripgation.com, contact us, or ask us to arrange travel services. As the entity that decides how and why your data is processed, we are the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and we also comply with the Information Technology Act, 2000 and its rules. Please read it alongside our Terms & Conditions.
1. Who we are
We are an Indian travel management company registered with the Ministry of Corporate Affairs (CIN U63030UP2020PTC128661, GSTIN 09AAHCT8545P1ZD), with our registered office at #UG-5, Provica Homes, Tower-02, Sarfabad, Noida-73, Gautam Buddha Nagar, Uttar Pradesh – 201301. We process personal data to arrange flights, hotels, tours, visas, foreign exchange, insurance and corporate travel. Questions about your data go to our data protection contact, dataprotection@tripgation.com.
2. What personal data we collect
We collect only what we need to serve you:
- Enquiry & booking details — your name, mobile number, email, nationality, country of residence, destination, visa or service type, travel dates, duration, number of travellers and the message or purpose you provide.
- Documents you upload — for visa and attestation work, copies of documents such as your passport, invitation or supporting letters. These are stored against a unique enquiry reference.
- Traveller & passport information — for bookings, the details required by airlines, hotels, insurers, foreign-exchange partners and visa authorities (for example passport number and validity).
- Payment information — we do not store your card number, CVV or OTP. Card payments are handled directly by a PCI-DSS-compliant payment gateway; we retain the invoice, amount and payment reference for accounting and GST.
- Technical data — your IP address, browser and device information, and cookie data, collected automatically when you use the site (including for security and spam prevention, e.g. reCAPTCHA).
We collect this when you submit an enquiry or booking form, call, email or message us, upload documents, or browse the site. Providing accurate information is your responsibility; incomplete details may prevent us from providing a service.
3. How and why we use it
We use your personal data to:
- Prepare quotes and process your bookings, visa applications, forex, insurance and other services;
- Communicate with you about your enquiry, itinerary, documents and payments, and provide 24×7 support during travel;
- Meet legal, tax (GST/TCS), regulatory and anti-fraud obligations;
- Secure the website and prevent spam and misuse;
- Improve our website and services using aggregate, non-identifying analytics.
Our lawful basis is your consent (which you may withdraw), the performance of the service you asked for, and compliance with law. We do not use your enquiry data for unrelated marketing without your consent.
6. How we protect your data
The site is served over encrypted HTTPS (SSL/TLS), and access to enquiry and booking data is restricted to authorised staff who need it and are bound to confidentiality. Card details are never stored on our systems — they are handled by the PCI-DSS-compliant gateway. Uploaded documents are stored against a unique reference with restricted access. We review our systems for security, but no method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. How long we keep it
We keep your personal data only as long as needed for the purposes above — to provide the service, support you, and meet legal, tax and accounting obligations (for example, invoices are retained for the period required under Indian tax law). When it is no longer needed, we delete or anonymise it. You may ask us to erase data we are not legally required to keep.
8. International transfers
Some services require your data to be shared outside India — for example, a visa application is submitted to the destination country’s embassy or consulate, and a booking may be shared with an overseas airline or hotel. Where we use service providers that process data outside India, we take reasonable steps to ensure it is handled securely and only for the agreed purpose, in line with applicable law.
9. Your rights
Under the DPDP Act, 2023 you have the right to:
- Access a summary of the personal data we hold about you and how we process it;
- Ask us to correct or update inaccurate or incomplete data;
- Ask us to erase data that is no longer needed and that we are not required to keep;
- Withdraw a consent you previously gave (this does not affect processing already done);
- Nominate another person to exercise your rights in the event of death or incapacity;
- Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India.
To exercise any of these, email dataprotection@tripgation.com. We may need to verify your identity, and we will respond within the time allowed by law.
10. Children’s data
Where a booking or visa application involves a child, we process the child’s data (for example passport details) on the basis of the consent of a parent or lawful guardian, only for that service. We do not knowingly collect a child’s data directly for any other purpose.
11. Grievance Officer & contact
For any privacy question, request or complaint, contact our data protection contact at dataprotection@tripgation.com, or our Grievance Officer appointed under the IT Rules and DPDP Act:
Mrs Pooja Rani — Grievance Officer
Email: grievance@tripgation.com
Tripgation Private Limited, #UG-5, Provica Homes, Tower-02, Sarfabad, Noida-73, Gautam Buddha Nagar, Uttar Pradesh – 201301
Hours: Mon–Sat, 09:00–19:00 IST
12. Changes to this policy
We may update this Privacy Policy from time to time. The version published here, with the “last updated” date above, is the current one. Significant changes will be highlighted on this page.