Legal Compliance
This Privacy Policy is drafted in accordance with the Information Technology Act, 2000, the Information
Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information)
Rules, 2011 (‘SPDI Rules’), and best practices aligned with the Digital Personal Data Protection Act, 2023
(‘DPDPA’). Trip Nest Travel is committed to protecting the privacy and personal data of all its clients and
website visitors.

15. Data We Collect
    When you interact with Trip Nest Travel – whether through our website, WhatsApp, Instagram, or any other
    channel – we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, nationality.
• Contact Data: Mobile number, email address, WhatsApp number, home address.
• Travel Data: Passport/Aadhaar details (for permit applications), travel dates, destination preferences.
• Payment Data: UPI ID, bank name, transaction reference (no full card details stored).
• Communication Data: Messages, inquiries, feedback, and correspondence with the Company.
• Technical Data: IP address, browser type, pages visited (via website analytics).
• Sensitive Personal Data: Health or medical conditions voluntarily disclosed for trip safety planning.

15. Purpose of Data Processing

• To process, confirm, and manage your travel booking and itinerary.
• To issue GST-compliant invoices and maintain statutory financial records.
• To obtain necessary travel permits (ILP, PAP) on your behalf with your explicit consent.
• To communicate trip-related updates, changes, weather alerts, and emergency information.
• To send promotional offers or newsletters (only with your opt-in consent; you may unsubscribe at any
  time).
• To improve our services based on aggregated, anonymised feedback and analytics.
• To comply with legal obligations including tax laws, anti-money laundering regulations, and tourism
  compliance requirements.

15. Data Sharing & Disclosure
    Trip Nest Travel does not sell, rent, or trade your personal data to any third party. Data may be shared only
    in the following limited circumstances:

• Service Providers: Hotels, transport vendors, DMC partners, and local guides – solely to execute your
  booked itinerary.
• Permit Authorities: Government offices processing Inner Line Permits or other travel authorisations.
• Payment Processors: Payment gateways (Razorpay, UPI platforms) for transaction processing under
  their own privacy terms.
• Legal Obligations: Regulatory bodies, law enforcement, or courts if required under applicable Indian law.
• No Cross-Border Transfer: Your data is not transferred outside the territory of India without explicit
  consent.

15. Data Security & Retention
    The Company implements reasonable security measures to protect your personal data from unauthorised
    access, disclosure, alteration, or destruction. These measures include restricted access controls, secure
    communication channels (WhatsApp encryption, HTTPS on the website), and periodic review of data
    storage practices.

• Booking data is retained for a minimum of 5 years to comply with GST and financial record-keeping
  requirements.
• Identity documents (Aadhaar, Passport copies) collected for permit purposes are deleted within 60 days
  of trip completion unless legally required to retain.
• You may request deletion of your personal data at any time (subject to legal retention obligations) by
  contacting the Company.

15. Your Data Rights

• Right to Access: Request a copy of all personal data held about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request erasure of data (subject to legal obligations).
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
• Right to Grievance: Lodge a complaint with the Company’s Grievance Officer (Clause 20).

15. Contact & Grievance Redressal
    In accordance with the Information Technology Act, 2000 and the Consumer Protection Act, 2019, a
    Grievance Officer is designated to address any privacy-related complaints or data requests. Complaints
    will be acknowledged within 24 hours and resolved within 30 days.

• Grievance Officer: Sanju Chatterjee
• Company: Trip Nest Travel
• Address: Subhash Pally, Birpara, Alipurduar, West Bengal – 736122, India
• Website: tripnesttravel.co.in
• Instagram: @travelstripnest
• Business Hours: 10:00 AM – 7:00 PM IST, Monday to Saturday